Privacy Policy

This privacy policy explains how BRJ Fabrications collects, uses, stores, and protects personal information when you use our website, contact us, request a quote, place an order, or use our fabrication and related services.

We only process personal data where it is necessary for the relevant enquiry, quote, order, contract, legal obligation, security purpose, analytics purpose, or legitimate business purpose.

Last updated: June 2026

Who we are

We are BRJ Fabrications.

Our website address is https://brjfabrications.co.uk.

You can contact us through our contact page.

Data controller and data processor roles

For personal data collected through this website, our contact page, enquiries, quotes, orders, invoices, correspondence, and our own business administration, BRJ Fabrications is normally the data controller.

Where we provide fabrication, installation, repair, modification, maintenance, site work, or related services, our role may vary depending on the work being carried out and the information we are asked to handle.

In most cases, we act as an independent data controller for our own business records and service management. In some cases, we may process personal data on behalf of a customer only as needed to provide the service they have requested.

Where we act as a data processor, we process personal data only in accordance with the customer’s instructions, the service being requested, and applicable data protection law.

How to make a data protection complaint

If you are unhappy with how we have handled your personal data, you can make a data protection complaint by contacting us through our contact page.

Please make it clear that your message is a data protection complaint. This helps us identify it correctly and handle it under the correct process.

When making a data protection complaint, please include enough information for us to understand the issue. This will usually include your name, your contact details, what personal data or service the complaint relates to, what you believe has gone wrong, and what outcome you are asking for.

We will acknowledge receipt of a data protection complaint within 30 days of receiving it.

We will then take appropriate steps to investigate the complaint, keep you informed where appropriate, and tell you the outcome without undue delay.

If we need more information from you in order to understand or investigate the complaint, we may ask you to provide that information. We may also need to verify your identity where this is necessary to protect personal data.

If your complaint relates to personal data we process on behalf of one of our customers, we may need to refer the matter to that customer because they may be the data controller responsible for deciding how that personal data is used.

If you remain unhappy after we have responded, you have the right to complain to the Information Commissioner’s Office. The ICO’s website is https://ico.org.uk.

Information we collect

The personal information we collect depends on how you interact with us.

This may include:

• Your name
• Your business name, where relevant
• Your email address
• Your telephone number
• Your billing address, delivery address, or site address, where needed
• Information you provide in contact forms, emails, phone calls, quote requests, order notes, drawings, specifications, messages, or project discussions
• Details of products, fabrication work, materials, services, quotes, orders, appointments, deliveries, installations, or repairs you request
• Billing, payment, order, transaction, and invoice information
• Technical website data, such as IP address, browser type, device information, timestamps, security logs, basic server logs, and analytics data

We do not ask you to provide more personal information than we reasonably need to respond to your enquiry, prepare a quote, provide the requested service, operate the website, process an order, understand website usage, or meet legal and business obligations.

Contact forms and enquiries

When you contact us through our contact page, by email, by telephone, or through another direct communication route, we process the personal information you provide so that we can respond to your enquiry.

This may also be used to provide requested information, prepare a quote, discuss your requirements, arrange work, supply products or services, manage our relationship with you, and keep appropriate business records.

We do not add you to an automated mailing list, newsletter, or marketing campaign simply because you contact us.

We may retain enquiry and correspondence records where necessary for business administration, service management, legal, accounting, dispute-resolution, security, or legitimate business reasons.

Quotes, orders, and services

If you request a quote, place an order, ask us to provide fabrication work, or become a customer, we may process personal data needed to prepare the quote, provide the service, manage the order, communicate with you, issue invoices, maintain records, arrange delivery or site work, and meet legal or tax obligations.

This may include contact details, address details, site details, order details, project notes, drawings, specifications, billing records, payment records, correspondence, and information required to deliver the requested work.

Where payment is made through an external payment provider, that provider may process payment information under its own terms and privacy information. We do not intentionally store full card details on this website.

This website

The following data handling applies to standard website functionality on https://brjfabrications.co.uk.

Comments

If comments are enabled and you leave a comment on the website, we collect the information shown in the comment form, along with your IP address and browser user agent string to assist with spam detection.

An anonymised string derived from your email address may be sent to the Gravatar service to check whether you use it. The Gravatar privacy policy is available at https://automattic.com/privacy/.

If your comment is approved, your name and comment content may be visible publicly.

Cookies

This website may use cookies and similar technologies where they are necessary for the website to function, to remember choices you have made, to support security, to provide features you have requested, or to measure website use where permitted.

If you leave a comment, you may opt to save your name, email address, and website URL in cookies for convenience. These cookies last for one year.

When authorised users log in, cookies are used to maintain login sessions and remember screen display preferences. Logging out removes login cookies.

Google Analytics may use cookies or similar technologies for website measurement and improvement where enabled and where consent is required.

We do not use third-party advertising cookies, remarketing pixels, or behavioural advertising trackers on this website unless this policy is updated to say otherwise.

For more information, please read our Cookie Policy.

Embedded content from other websites

Pages on this site may include embedded content such as videos, images, maps, articles, social media posts, or other media from other websites.

Embedded content behaves as if you had visited the other website directly.

Those websites may collect data about you, use cookies, embed additional third-party tracking, or monitor your interaction with that embedded content, including where you have an account and are logged in to that service.

Google Analytics

We use Google Analytics to understand how visitors use the website, which pages are visited, how people find the website, and how the website can be improved.

Google Analytics may process information such as page views, approximate location, browser and device information, referral source, interactions with the website, visit times, and cookie or device identifiers used for measurement.

Google states that Google Analytics does not log or store IP addresses for users in the United Kingdom, European Union, or Switzerland. IP address information may be used at collection time to derive approximate location information before being discarded.

We use Google Analytics for website measurement and improvement. We do not use Google Analytics on this website to identify individual visitors, sell personal data, run behavioural advertising, or remarket to visitors.

Where consent is required for Google Analytics cookies or similar technologies, we will ask for consent before using them.

Google’s privacy information is available at https://policies.google.com/privacy, and Google Analytics privacy information is available at https://support.google.com/analytics/answer/6004245.

Lawful bases for processing

Depending on the context, we may rely on one or more lawful bases under UK GDPR.

These may include:

• Contract: where processing is necessary to provide a quote, take steps before entering into a contract, manage an order, provide services, or fulfil our agreement with you.
• Legitimate interests: where processing is necessary for normal business operations, responding to enquiries, securing our systems, preventing abuse, managing customer relationships, improving services, understanding non-intrusive website performance, and keeping appropriate business records, provided those interests are not overridden by your rights and freedoms.
• Legal obligation: where processing is necessary to comply with tax, accounting, regulatory, legal, health and safety, or statutory obligations.
• Consent: where we specifically ask for consent for a particular activity, including analytics cookies where consent is required. Where processing is based on consent, you may withdraw that consent at any time.

Who we share your data with

We do not sell or rent personal data.

We do not share personal data with third parties for their own marketing purposes.

We may share personal data where necessary with service providers, professional advisers, hosting providers, website providers, payment providers, security providers, analytics providers, delivery providers, suppliers, subcontractors, legal or regulatory bodies, or other parties where required for the operation of our business, provision of services, legal compliance, security, website measurement, or dispute resolution.

If you request a password reset on this website, your IP address may be included in the reset email for security purposes.

Visitor comments may be checked through an automated spam detection service.

Where Google Analytics is used, website measurement information may be processed by Google so that analytics reports can be provided to us.

Where payment providers, delivery providers, suppliers, or subcontractors are used, order-related information may be processed by those parties where necessary to provide the requested product, service, delivery, or work.

How long we retain your data

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected.

This may include quote handling, order processing, service delivery, delivery management, business administration, legal compliance, accounting, tax, health and safety, security, analytics, dispute-resolution, and record-keeping purposes.

If you leave a comment, the comment and its associated metadata may be retained indefinitely to allow us to recognise and approve follow-up comments automatically, rather than holding them for moderation each time.

For registered users of this website, we store the personal information provided in their user profile.

Users may view, edit, or request deletion of their personal information at any time, with the exception of their username. Site administrators can also access and edit this information.

Quote, order, invoice, accounting, customer, delivery, project, and business administration records may be retained for longer where this is necessary for legal, tax, accounting, contractual, insurance, warranty, support, health and safety, or dispute-resolution purposes.

Technical logs, security logs, and analytics data are processed for website operation, website measurement, security, fault diagnosis, and abuse prevention. We do not use this data to create advertising profiles or track visitors for behavioural marketing purposes.

Google Analytics data may be retained by Google according to the analytics settings applied to the website and Google’s applicable terms and controls.

Your rights over your data

Under UK data protection law, you may have rights in relation to your personal data.

These may include:

• The right to request access to your personal data
• The right to request correction of inaccurate personal data
• The right to request erasure of personal data
• The right to request restriction of processing
• The right to object to processing
• The right to data portability, where applicable
• The right not to be subject to certain solely automated decisions

The availability of these rights depends on the type of data, the reason we process it, and whether we have a legal or legitimate reason to continue retaining or using it.

To exercise any of these rights, please contact us through our contact page.

If you make a subject access request, we will carry out reasonable and proportionate searches for personal data we hold about you.

We may ask for information needed to confirm your identity, clarify your request, refine your request, or confirm that a third party is authorised to act on your behalf.

Where the law allows the response period to be paused while we wait for information reasonably needed from you, the response period may restart or continue once that information has been received.

We will respond to valid data protection rights requests within the timescales required by law.

Where your data is stored and processed

Personal data may be processed in the United Kingdom, the European Economic Area, or other locations where appropriate safeguards, adequacy arrangements, contractual protections, or legal mechanisms apply.

We aim to keep personal data within the United Kingdom or GDPR-compliant regions where reasonably possible, but some external services, embedded content, email systems, hosting services, analytics tools, payment providers, delivery providers, suppliers, subcontractors, or professional service providers may process data outside the United Kingdom depending on how those services operate.

Where we use Google Analytics, website measurement data may be processed by Google outside the United Kingdom. Where this happens, it is handled under Google’s applicable data protection terms and transfer safeguards.

Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure.

These measures may include access controls, secure hosting, system monitoring, backups, software updates, form protection, and other security controls appropriate to the service being provided.

No website, email system, software service, device, or internet transmission can be guaranteed to be completely secure.

If we become aware of a personal data breach that creates a risk to individuals, we will take appropriate steps in accordance with applicable data protection law.

Automated decision-making and profiling

We do not use personal data collected through this website for automated decision-making that produces legal or similarly significant effects.

We do not use website visitors’ personal data to create advertising profiles.

Google Analytics may produce aggregated or statistical reports about website use. These reports are used to understand and improve the website, not to make legal, contractual, credit, employment, or similarly significant decisions about individuals.

Marketing

We do not add website visitors, customers, or people who contact us to automated mailing lists or newsletters without their consent.

We may use Google Analytics for website measurement and improvement. We do not use Google Analytics on this website for behavioural advertising, remarketing, or selling personal data.

We do not use third-party advertising networks, behavioural advertising pixels, or remarketing trackers on this website unless this policy is updated to say otherwise.

If we contact existing or previous customers about relevant services, quote follow-ups, order updates, project matters, or legitimate business matters, we will do so in accordance with applicable data protection and electronic communications rules.

You can ask us not to contact you for marketing purposes at any time by contacting us through our contact page.

External links

Our website may contain links to other websites. If you follow a link to another website, that website will have its own privacy and cookie information.

We are not responsible for the privacy practices, content, or data handling of websites operated by other organisations.

Changes to this policy

We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated date at the top.

We recommend checking this page periodically if you use our services regularly.

Contact

Questions, comments, requests, and data protection complaints can be sent through our contact page.

BRJ Fabrications
Website: https://brjfabrications.co.uk