
GDPR POLICY
Last updated: JANUARY 2026
​
Old Bones Fabrications Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
​
1. Who We Are
Old Bones Fabrications Ltd
Website: www.oldbonesfabrications.co.uk
We are the data controller responsible for your personal data.
​
2. What Information We Collect
We may collect and process the following information:
-
Name
-
Email address
-
Telephone number
-
Postal address
-
Vehicle details
-
Enquiry details and correspondence
-
Billing and invoicing information
-
Website usage data (via cookies)
-
​
3. How We Collect Your Data
We collect data when you:
-
Contact us via our website, email, phone, or social media
-
Request a quote or place an order
-
Enter into a contract with us
-
Subscribe to updates or communications
-
Use our website
4. How We Use Your Data
We use your personal data to:
-
Respond to enquiries and provide quotes
-
Carry out contracted services
-
Manage customer relationships
-
Process payments and invoices
-
Comply with legal and accounting obligations
-
Improve our website and services
We will never sell your data to third parties.
5. Lawful Basis for Processing
We process personal data under the following lawful bases:
-
Performance of a contract
-
Legitimate business interests
-
Legal obligation
-
Consent (where required)
6. Data Sharing
We may share data only where necessary with:
-
Accountants or financial providers
-
Legal or regulatory authorities
-
Trusted suppliers involved in delivering our services
All third parties are required to respect the security of your data and comply with GDPR.
7. Data Storage & Security
We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, or disclosure.
Data is stored securely and only retained for as long as necessary to fulfil the purposes outlined in this policy or to meet legal requirements.
8. Your Rights
Under UK GDPR, you have the right to:
-
Access your personal data
-
Request correction of inaccurate data
-
Request deletion of your data
-
Restrict or object to processing
-
Data portability
-
Withdraw consent at any time
To exercise any of these rights, please contact us using the details on our website.
9. Cookies
Our website may use cookies to improve user experience and analyse website traffic. You can control cookies through your browser settings.
10. Changes to This Policy
We may update this policy from time to time. Any changes will be posted on this page.
11. Contact Us
If you have any questions about this policy or how we handle your data, please contact us via our contact page.