Privacy notice

Last updated: {{LAST_UPDATED}}

Who I am

Stourworks is the trading name of Harry Milsom, a sole trader based in Sudbury, Suffolk. Harry Milsom is the data controller for the personal information described here.

Contact: info@stourworks.co.uk · HJM CREATIONS, Unit A, 82 James Carter Road, Mildenhall, IP28 7DE

What I collect

  • Contact details: name, company name, job role (if given), email address, phone number.
  • Order details: the files you send me (for example STL, 3MF or STEP files), quantities, materials, notes, quotes, invoices and correspondence.
  • Delivery details: delivery address and recipient name.
  • Payment details: bank transfer references and amounts. If you pay by card through a payment link, my card payment provider collects your card details; I never see them.
  • Website data: cookies set by my website host (see Cookies).

Why I use it and my lawful basis

PurposeLawful basis (UK GDPR)
Responding to your quote request, checking files, printing, delivering, invoicing and supportContract: to take steps at your request before a contract and to perform it
Keeping accounting and tax recordsLegal obligation
Keeping your files so you can reorderLegitimate interests: making repeat orders quick for you. You can ask me to delete them at any time.
Occasional emails to business customers about my own similar servicesLegitimate interests. Every email has an easy opt-out, and I stop as soon as you ask.
Preventing fraud and keeping my systems secureLegitimate interests

I do not sell your information, and I do not use it for automated decisions with legal or similarly significant effects.

Who I share it with

I use these providers to run the business. They act on my instructions or under their own privacy terms:

  • Wix (website hosting)
  • Google (Gmail), my email provider (business email, including the files you email to me)
  • My card payment provider (card payments, if you pay by card)
  • My tracked postage provider (delivery: name, address and, where needed, email or phone for tracking; it may act as its own controller)
  • IT and software service providers that help me run the business, including tools that help me check files and draft replies.
  • My accountant and HMRC, where the law requires it.

International transfers

Some of these providers store or access data outside the UK, for example in the European Economic Area or the United States. Where they do, I rely on UK adequacy regulations or on safeguards such as the UK International Data Transfer Agreement or Addendum, or the UK Extension to the EU-US Data Privacy Framework where the provider is certified.

How long I keep it

  • Your files (STLs etc.): until you ask me to delete them, or until I delete them after a period of inactivity (see below). I delete them within one month of your request, including copies in my email, website host and computers, and I empty the bins (Gmail's Bin clears itself after 30 days; my website host's Trash keeps items up to 180 days unless emptied, so I empty both).
  • Files and emails you send me by email: deleted from my inbox under the same rules as the rest of this section.
  • Accounting records (invoices, payments and related correspondence): at least 5 years after the 31 January self-assessment deadline for the tax year they relate to, as HMRC requires.
  • Quote enquiries that don't become orders: kept for 12 months, then deleted, unless you ask me to keep your files.
  • Inactive customers: once a year I contact customers who haven't ordered for 2 years or more and ask whether you'd like me to keep your files. If you don't reply within 30 days, I delete your files and your contact details, except for anything I must keep for my accounts.

Your rights

You have the right to: access your data; have it corrected; have it deleted; restrict or object to my use of it (including an absolute right to object to marketing); and data portability where it applies. Email me at info@stourworks.co.uk. I reply within one month. There's usually no charge.

Complaints

Please contact me first. You can also complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, or 0303 123 1113.

Cookies

Cookies and similar technologies. Wix, my website host, sets cookies that are strictly necessary to run and secure this site; these don't need your consent. With your consent only, Wix also sets optional statistics cookies that tell me how visitors use the site so I can improve it. I don't use advertising or tracking cookies. When you make a choice in my cookie banner, I store it in your browser (as "sw-consent-v1", in local storage) and Wix records the same choice, so I don't ask again on every page; I ask again after 12 months. You can change or withdraw your choice at any time using "Cookie settings" at the bottom of every page; withdrawing is as easy as accepting. Wix's list of the cookies it sets is here: Cookies and Your Wix Site.

Changes

I'll update this notice when my practices change and show the date at the top.