Privacy Policy

AMufacture Ltd ("AMufacture", "we", "our" or "us") is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store, share and protect personal data when you visit our website, use our Customer Portal, engage with our services, contact us, subscribe to our marketing communications or otherwise interact with us.

We process personal data in accordance with the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018 and other applicable data protection laws.

Please read this Privacy Policy carefully to understand how we handle your personal information.

AMufacture Ltd is the data controller responsible for your personal data.

AMufacture Ltd, registered in England and Wales, company number 11713128. Registered office: Unit 6 Pioneer Park, Portfield Road, Portsmouth, PO3 5GF.

AMufacture Ltd
6 Pioneer Park
Portfield Road
Portsmouth
PO3 5GF
United Kingdom

Email: [email protected]
Telephone: +44 (0) 1489 784141

This Privacy Policy applies to personal data collected by us through:

• The AMufacture website (www.amufacture.com)
• Contact forms and enquiry forms
• Newsletter subscription forms
• Email correspondence
• Telephone communications
• Services through our customer portal (“Customer Portal”)
• Digital warehouses, engineering dashboards and related digital services
• Customer, supplier and partner relationships
• Events, webinars and marketing activities

Information You Provide

We may collect and process:

• Name
• Company name
• Job title
• Email address
• Telephone number
• Postal address
• Information contained within enquiries or correspondence
• Marketing and communication preferences

Customer Account Information

Where you create or access a Customer Portal account, we may process:

• First name
• Last name
• Email address
• Company information
• Account credentials
• User profile information
• Account activity records
• Access permissions and user roles

Technical and Project Information

In the course of providing manufacturing, engineering, sourcing and related services, we may receive and process technical and project-related information submitted through our Website, Customer Portal, email correspondence or other communication channels.

This information may include:

• CAD files
• Engineering drawings
• Technical specifications
• Manufacturing requirements
• Project documentation
• Quotations
• Orders
• Project records
• Models and designs
• Supporting project information

Such information is processed solely for the purpose of providing requested services, evaluating manufacturing requirements, preparing quotations, managing projects and fulfilling contractual obligations.

Medical Project Information

In limited circumstances, project documentation supplied by customers may include a patient’s name. We do not ordinarily receive patients’ medical records, diagnoses, treatment information or other clinical data.

Where a patient’s name is included in project documentation, we process it only for the purpose of providing the agreed manufacturing services and, where applicable, in accordance with the customer’s documented instructions. Access is restricted to authorised personnel, and the information is protected using appropriate technical and organisational security measures.

Customers should provide only the minimum personal information necessary for a project and, wherever practicable, use a project reference or other identifier instead of a patient’s name.

Information Automatically Collected

When you visit our Website, we may automatically collect (“Automatically Collected Data”):

• IP address
• Browser type and version
• Device information
• Operating system
• Website usage data
• Referring websites
• Pages visited
• Date and time of visits
• Cookie and consent preferences
• Data about how you interact with and use our website, products and services (“Usage Data”)

We also collect and use aggregated data such as statistical or demographic data which is not personal data as it does not directly (or indirectly) reveal your identity. For example, we may aggregate individuals' Usage Data to calculate the percentage of users accessing a specific website feature in order to analyse general trends in how users are interacting with our website to help improve the website and our service offering.

We collect personal data:

• Directly from you when you complete forms or communicate with us
• Through Customer Portal registrations and usage
• Through email, telephone or other communications
• Through newsletter subscriptions
• Through website analytics technologies
• Through cookies and similar technologies where consent has been provided
• Through business interactions with customers, suppliers and partners

This website is not intended for children and we do not knowingly collect data relating to children.

We may use your personal data to:

• Respond to enquiries and requests
• Provide quotations and proposals
• Deliver products and services
• Manage customer relationships
• Operate and administer Customer Portal services
• Provide project support and manufacturing services
• Send newsletters and marketing communications where consent has been provided
• Improve our Website and digital services
• Analyse website performance and user experience
• Maintain security and prevent fraud
• Comply with legal and regulatory obligations
• Protect our business interests and contractual rights

We process personal data on the following legal bases:

Contract

Where processing is necessary to perform a contract with you or to take steps prior to entering into a contract.

Legitimate Interests

Where processing is necessary for our legitimate business interests, including:

• Responding to enquiries
• Managing customer and supplier relationships
• Providing quotations
• Improving our services
• Maintaining security
• Business administration

We make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).

Consent

We rely on consent for:

• Newsletter subscriptions
• Marketing communications
• Non-essential cookies and analytics technologies

You may withdraw your consent at any time.

Legal Obligation

Where processing is required to comply with legal, regulatory or statutory obligations. We will identify the relevant legal obligation when we rely on this legal basis.

Where you subscribe to receive marketing communications, newsletters or updates, we process your personal data on the basis of your consent.

You may unsubscribe at any time by:

• Clicking the unsubscribe link included within our emails; or
• Contacting us at [email protected]

Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.

If you opt out of receiving marketing communications, you will still receive service-related communications that are essential for administrative or customer service purposes.

We use cookies and similar technologies to improve Website functionality, analyse Website usage and enhance user experience.

Further information is available in our Cookie Policy.

We may share personal data with trusted third parties where necessary for the purposes set out above, including:

• HubSpot (customer relationship management and marketing communications)
• Microsoft 365 (email, business communications, document management and secure file storage)
• Google Analytics (website analytics)
• Website hosting and infrastructure providers
• Cookie consent management providers
• Professional advisers, auditors and legal advisers
• Regulatory authorities where required by law
• Third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy.

We do not sell personal data to third parties. We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

Certain third-party service providers used by AMufacture may process personal data outside the United Kingdom.

Where personal data is transferred internationally, we will ensure appropriate safeguards are implemented in accordance with applicable data protection laws, including the use of approved contractual mechanisms where required.

AMufacture implements appropriate technical and organisational measures designed to protect personal data and commercially sensitive information against unauthorised access, loss, misuse, alteration or disclosure.

These measures include:

• Access controls
• User authentication procedures
• Secure systems and infrastructure
• Encryption where appropriate
• Regular security reviews
• Staff awareness and training
• Restricted access to confidential customer information
• Secure handling of customer technical files, engineering data and project documentation

We recognise that certain information provided by customers may contain commercially sensitive technical or proprietary information. We maintain appropriate security controls designed to protect such information and restrict access to authorised personnel who require access for legitimate business purposes.

AMufacture maintains Cyber Essentials Plus certification and reviews its information security controls on an ongoing basis.

Whilst we take appropriate steps to protect personal data, no method of electronic transmission or storage can be guaranteed to be completely secure.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to satisfy legal, regulatory and business requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

Typical retention periods include:

Where retention periods expire, data will be securely deleted, anonymised or archived where appropriate.

Under applicable data protection laws, you may have the right to:

• Access your personal data
• Correct inaccurate personal data
• Request erasure of your personal data
• Restrict processing
• Object to processing
• Withdraw consent
• Request data portability
• Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, please contact us using the details below.

If you have questions regarding this Privacy Policy or wish to exercise your rights, please contact:

AMufacture Ltd
6 Pioneer Park
Portfield Road
Portsmouth
PO3 5GF
United Kingdom

Email: [email protected]
Telephone: +44 (0) 1489 784141

If you are unhappy with how we handle your personal data, we encourage you to contact us first so that we can attempt to resolve your concerns.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Website: www.ico.org.uk

This Privacy Policy is subject to periodic review and amendment. The current version number and effective date are displayed at the bottom of this page.

AMufacture reserves the right to amend, update or replace this Privacy Policy from time to time to reflect changes in applicable laws and regulations, business operations, technologies, website functionality, Customer Portal services or the way in which we process personal data.

Any revisions will become effective upon publication on this page. Users are encouraged to review this Privacy Policy periodically to remain informed of any changes.

Your continued use of the Website and associated digital services following publication of any revised Privacy Policy constitutes acknowledgement of the updated Privacy Policy.