Privacy Policy

1. Introduction

1.1We are committed to safeguarding the privacy of our website visitors and service users.

1.2This policy applies where we are acting as a data controller in respect of the personal data of our website visitors and service users, meaning where we determine the purposes and means of processing that data.

1.3We use cookies on our website. Where those cookies are not strictly necessary, we ask for your consent when you first visit. Full detail is set out in our Cookie Policy.

1.4In this policy, "we", "us" and "our" refer to Allsop & Francis Ltd, trading as a&f. Our full details are in section 10.

2. How we use your personal data

2.1This section sets out the categories of personal data we may process, the purposes for which we process it, and the legal basis for doing so.

2.2Usage data. We may process data about your use of our website, including your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and navigation paths, together with information about the timing, frequency and pattern of your use. The source is our analytics system. We process it to analyse and improve our website and services. The legal basis is our legitimate interests, namely monitoring and improving what we offer.

2.3Service data. We may process personal data provided in the course of using our services, which may include your name, telephone number, email address and company name. The source is you or your employer. We process it to operate our website, provide our services, keep our website and services secure, maintain backups and communicate with you. The legal basis is the performance of a contract between us, or taking steps at your request before entering into one.

2.4Enquiry data. We may process information contained in any enquiry you send us about goods or services, including through our contact and repair request forms. We process it to respond to your enquiry and to offer and supply relevant goods and services. The legal basis is your consent, or our legitimate interests in responding to enquiries made to us.

2.5Customer relationship data. We may process information relating to our customer relationships, which may include your name, employer, job title or role, contact details, and the content of communications between us. The source is you or your employer. We process it to manage and maintain customer relationships, keep records of our communications, and tell customers about our products and services. The legal basis is our legitimate interests in the proper management of customer relationships.

2.6Correspondence data. We may process information contained in or relating to any communication you send us, including its content and associated metadata. Our website generates metadata for communications made through website contact forms. We process it to communicate with you and to keep records. The legal basis is our legitimate interests in the proper administration of our business.

2.7We may process any personal data identified in this policy where necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or otherwise. The legal basis is our legitimate interests in protecting our legal rights and those of others.

2.8We may process any personal data identified in this policy where necessary to obtain or maintain insurance cover, manage risk, or obtain professional advice. The legal basis is our legitimate interests in protecting our business against risk.

2.9We may also process your personal data where necessary to comply with a legal obligation, or to protect your vital interests or those of another person.

2.10Please do not supply another person's personal data to us unless we ask you to.

3. Sharing your personal data

3.1We may disclose your personal data to our insurers and professional advisers where reasonably necessary to obtain or maintain insurance cover, manage risk, obtain professional advice, or establish, exercise or defend legal claims.

3.2We use third-party service providers to operate our business, including providers of website hosting, email and analytics. These providers process personal data only on our instructions and under contract.

3.3We may disclose your personal data where necessary to comply with a legal obligation, to protect your vital interests or those of another person, or for the establishment, exercise or defence of legal claims.

3.4We do not sell your personal data.

4. Retaining and deleting personal data

4.1This section sets out our data retention approach, which is designed to help us comply with our legal obligations on retaining and deleting personal data.

4.2Personal data we process for any purpose is not kept for longer than is necessary for that purpose.

4.3Data submitted through our enquiry forms is retained for a minimum of 30 days and a maximum of 365 days.

4.4In some cases we cannot specify a retention period in advance. Where that applies to data collected through our contact forms, the period is determined by whether services are subsequently offered and taken up.

4.5Despite the above, we may retain your personal data where necessary to comply with a legal obligation, or to protect your vital interests or those of another person.

5. Your rights

5.1This section summarises your rights under data protection law. Some of these rights are complex and not every detail is included here, so you should refer to the relevant legislation and to guidance from the Information Commissioner's Office for a full explanation.

5.2Your principal rights are:

• the right of access
• the right to rectification
• the right to erasure
• the right to restrict processing
• the right to object to processing
• the right to data portability
• the right to complain to a supervisory authority
• the right to withdraw consent

5.3Access. You have the right to confirmation of whether we process your personal data and, where we do, access to that data together with certain additional information, including the purposes of processing, the categories of data concerned and who receives it. Provided the rights and freedoms of others are not affected, we will supply a copy of your personal data. The first copy is free; further copies may be subject to a reasonable fee.

5.4Rectification. You have the right to have inaccurate personal data about you corrected and, taking the purposes of processing into account, to have incomplete data completed.

5.5Erasure. In some circumstances you have the right to have your personal data erased without undue delay. These include where the data is no longer necessary for the purpose it was collected for, where you withdraw consent for consent-based processing, where you object to processing under certain rules, where the processing is for direct marketing, and where data has been processed unlawfully. Exclusions apply, including where processing is necessary for freedom of expression and information, to comply with a legal obligation, or for the establishment, exercise or defence of legal claims.

5.6Restriction. In some circumstances you have the right to restrict our processing of your personal data: where you contest its accuracy; where processing is unlawful but you oppose erasure; where we no longer need the data but you require it for legal claims; and where you have objected to processing, pending verification of that objection. Where processing is restricted we may continue to store your data, but will otherwise only process it with your consent, for legal claims, to protect the rights of another person, or for reasons of important public interest.

5.7Objection. You have the right to object to our processing of your personal data on grounds relating to your particular situation, but only where the legal basis is the performance of a task in the public interest or our legitimate interests. If you object, we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is for legal claims.

5.8Direct marketing. You have the right to object to our processing of your personal data for direct marketing, including profiling for direct marketing. If you object, we will stop processing your data for that purpose.

5.9Portability. Where the legal basis for processing is your consent or the performance of a contract, and the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format. This right does not apply where it would adversely affect the rights and freedoms of others.

5.10Complaints. If you consider that our processing of your personal data infringes data protection law, you have the right to complain to a supervisory authority. In the UK this is the Information Commissioner's Office, at ico.org.uk.

5.11Withdrawing consent. Where the legal basis for our processing is your consent, you have the right to withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before you withdrew.

5.12You may exercise any of these rights by contacting us using the details in section 10.

6. Cookies

6.1A cookie is a small file containing an identifier that is sent by a web server to your browser and stored there. The identifier is sent back to the server each time your browser requests a page.

6.2Cookies do not usually contain information that identifies you personally, but personal information we hold about you may be linked to information stored in or obtained from cookies.

6.3Details of the cookies used on this website, what each one does and how to change your choices are set out in our Cookie Policy.

7. Third-party websites

7.1Our website includes links to other websites, including those of the manufacturers we work with. We have no control over, and are not responsible for, the privacy practices of those websites.

8. Keeping your data secure

8.1We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. Our website is served over an encrypted connection, and access to personal data is limited to those who need it to carry out their role.

9. Amendments

9.1We may update this policy from time to time by publishing a new version on our website.

9.2You should check this page occasionally to make sure you are content with any changes.

10. Our details

10.1This website is owned and operated by Allsop & Francis Ltd, trading as a&f.

10.2We are registered in England and Wales under company number 02589906. Our registered office is Carpenter Box LLP, Amelia House, Crescent Road, Worthing, West Sussex, BN11 1QR.

10.3Our principal place of business is Unit 18 Ford Lane Business Park, Ford, West Sussex, BN18 0UZ.

Last updated: September 2026