Privacy Policy

Who we are

Malvern Plastics (“we”, “our”, “us”) is the data controller for personal information provided to the business. The existing website identifies the business as Malvern Plastics Ltd, Plastic Injection Moulding & Prototyping.

Contact: Unit 3, Spring Lane Industrial Estate, Spring Lane, Malvern, Worcestershire, WR14 1AL, United Kingdom. Email: malvernplastics@gmail.com. Telephone: 01684 577321. The owner should confirm the registered legal entity before launch.

Information you provide

When you contact us or request a quote, we collect the information you choose to supply: your name, email address, telephone number, company name, service required, project description, estimated production quantity and preferred contact method.

You may optionally upload a PDF, JPG or PNG project document, up to 5 MB. This can include drawings, product information or production notes. Please contact the team before supplying confidential information that requires a separate non-disclosure agreement.

Technical information

The website and its hosting providers may process technical information required to deliver and protect the website, such as connection details and server request information. The enquiry service uses a hashed combination of connection information and email address to limit repeated submissions. Raw IP addresses are not saved in the enquiry table.

How we use your information

We use enquiry information to respond to your request, discuss requirements, provide quotations and technical advice, and maintain project correspondence. Where you become a customer, information may also be used to process and manage orders, maintain internal records and meet legal obligations. We do not sell personal data.

Lawful basis for processing

The existing policy describes legitimate interests for responding to business enquiries and managing projects, contractual necessity for steps connected with quotes or manufacturing, and legal obligations for accounting and other required records. Which basis applies depends on the activity and circumstances.

Acknowledging this policy explains our handling of your enquiry; it is not consent to marketing. This website does not subscribe you to marketing communications. Any future processing requiring consent must offer a separate choice.

Enquiry and document storage

Submitted enquiries are stored in the website’s Lovable Cloud database. Uploaded project documents are stored in a private storage bucket and are not available through public document links. Website visitors cannot read, change or delete stored enquiries.

The owner must confirm internal access procedures and operational security arrangements before launch. No claim is made here that uploaded files are malware-scanned, or that every internal business system has been independently audited.

Data retention — owner confirmation required

The previous website stated: general enquiries up to two years; project data for the duration of the project lifecycle; accounting and legal records for six years. These are retained here as existing policy statements requiring owner/legal confirmation, not as verified deletion schedules.

No automated retention or deletion schedule is configured for this new enquiry service. The owner should approve appropriate retention periods and put a deletion process in place before relying on those periods.

Sharing your information

Website hosting, database and private file storage are provided through Lovable Cloud. The business uses the published Gmail address for direct email correspondence. Form-to-email notifications are not currently enabled; they require sender-domain configuration.

The previous policy also identified tooling suppliers, prototype or material partners, IT providers, accountants and legal advisers as possible recipients where needed. The owner should verify the actual recipients, purposes and processor agreements. We do not sell your personal information.

International data transfers — review required

The owner must verify hosting locations, subprocessors and the safeguards that apply to any personal data transferred outside the UK. The previous policy referred to adequacy regulations or standard contractual clauses, but those arrangements have not been independently confirmed for the redeveloped website.

Your data protection rights

Subject to applicable conditions, you may ask for access to your personal data, correction of inaccurate data, deletion, restriction of processing, portability, or object to processing based on legitimate interests. Where consent is used, you can withdraw it.

Contact malvernplastics@gmail.com to make a request. You may also raise a concern with the UK Information Commissioner’s Office at ico.org.uk.

Cookies, analytics and maps

No optional analytics or advertising tracking has been enabled in this website. Google Analytics can only be added after configuration and an appropriate consent choice. No optional analytics cookies are required for the present browsing experience.

The Google Map on the contact page is not loaded automatically. Choosing “Show Google Map” connects your browser to Google, which may process connection information or use its own technologies. You can instead open the directions link. External services operate under their own privacy policies.

Third-party links

We are not responsible for the privacy practices of external sites linked from our website. Please review the relevant third-party privacy information when using those services.

Updates and final review

We may update this policy when the website or data handling changes. The latest version will be shown on this page. This policy reflects the current enquiry and private-upload functions and preserves relevant existing policy information.

Before publication, the owner and legal adviser should confirm the controller name, lawful bases, retention schedule, internal access, processor agreements, international-transfer safeguards and any future analytics or email configuration.