Privacy Policy
Last updated: 5 September 2026
This policy explains how GT Laser Ltd uses personal information when you visit this website, contact us, request a quotation or provide production information.
Who is responsible?
GT Laser Ltd is the controller of the personal information described here. We are registered in England and Wales, company number 10197596, with our registered office at 18 Frank Brookes Road, Cheltenham, England, GL51 0UW. Contact office@gtlaser.co.uk about privacy, your information or a complaint.
Information you provide
We use the name, company, email address, telephone number and correspondence you give us. An RFQ may also contain the application, quantity, dimensions, material, thickness, process, fixings, target date and whether repeat production is expected.
Files can include drawings, artwork, photographs, spreadsheets, serial or asset information, URLs and manufacturing specifications. These can contain personal information as well as commercially confidential technical information. Please provide only information relevant to the job and tell us about any special handling requirements before sending it.
How we use project information
We use enquiries and files to prepare quotations, assess feasibility, clarify specifications and discuss proofs or samples. Where a job is agreed, relevant information supports production, checks against the approved specification, delivery, repeat-order administration and necessary business records.
Supplying artwork does not give us permission to publish your designs, customer data or project photographs as website marketing. Publication permissions are considered separately.
Our lawful bases
For an individual contracting with us, we use information as necessary to take requested steps towards a contract and to perform it. For contacts acting for a company, we normally rely on our legitimate interests in handling business enquiries, managing the customer relationship and producing the agreed work.
We also rely on legitimate interests to secure the website, prevent abuse and deal with disputes, while considering the effect on individuals. Legal obligations apply to records we must keep or disclosures we must make. If a use requires consent, we explain it when asking; consent can be withdrawn without affecting earlier lawful processing.
Website operation and logs
Our website and hosting services may process network addresses, request times, pages requested, browser information and security events to deliver and protect the service. The enquiry application uses a temporary hashed network identifier for rate limiting; this does not mean hosting or security logs never contain an IP address.
Staging is a test environment. The quote and file workflows remain unavailable until their operational checks and explicit activation are complete. A form preview is not confirmation that an enquiry has been received.
Cookies and analytics
The enquiry application uses an essential cookie named gtle_form_state when it needs to preserve form state after a submission attempt. Its configured lifetime is approximately 10 minutes. WordPress also uses authentication cookies for signed-in administrators. Cookie preference controls, where shown, record the choice you make.
The reviewed theme does not configure Google Analytics or an advertising pixel. The hosting environment does, however, add a GoDaddy traffic-measurement script (tccl.min.js). It can process visit and browser information independently of the theme. A cookie named _tccl_visitor was present during our staging review. Its detailed retention, storage and preference settings are being verified with the hosting provider; we do not describe this site as free of analytics. Local interface events in the theme are not, by themselves, transmissions to an analytics provider. If optional storage or tracking is introduced, we will explain its purpose and provide the consent or objection controls required for that use. You can also manage cookies through your browser.
Service providers and sharing
Authorised GT Laser personnel and providers supporting website hosting, business email, security, backup and professional advice may handle information needed for those services. The reviewed website uses Defender security and Snapshot backups from WPMU DEV. A GoDaddy traffic-measurement script is also supplied through the hosting environment. We do not sell personal information.
The enquiry system includes a Microsoft SharePoint storage connection for approved uploads when the submission workflow is enabled. Its presence does not mean test-page visitors have uploaded files. We may also disclose information when required by law or when necessary for legal claims. We use only the information needed for the purpose.
International processing
A service provider may operate or support a service outside the UK. Where this involves a restricted transfer of personal information, UK data-protection law requires a permitted transfer route, such as adequacy regulations or appropriate contractual safeguards and the relevant assessment. Contact office@gtlaser.co.uk for information about providers and safeguards applying to your information.
Retention
The website enquiry application has a configured retention period of 90 days for its enquiry records and associated uploads. Deletion is scheduled; it is not a guarantee that every copy held for another purpose disappears at that exact time.
An active quotation, order or repeat-production relationship may require relevant records for longer. We assess the purpose, continuing need, contractual requirements, tax or accounting duties and potential legal claims. Business email, hosting logs and backups have separate lifecycles. A deleted live record can remain in a restricted backup until that backup expires. Contact us about a particular record or deletion request.
Files and security
The enquiry workflow uses access controls, file validation and private storage rather than publishing submitted files in the public media library. File scanning and operational readiness checks form part of its activation requirements. These measures reduce risk but cannot guarantee that every file is safe or that internet transmission and storage are completely secure.
Please contact us first if the job requires an NDA, restricted access or special retention arrangements. Those requirements must be agreed for the actual project.
Your rights
Depending on the processing and circumstances, you can ask for access, correction, erasure, restriction or a portable copy of personal information. You can object to processing based on legitimate interests and to direct marketing. Where we rely on consent, you can withdraw it.
Email office@gtlaser.co.uk to make a request. We may need proportionate identity checks and will explain any lawful exception. Requests are normally answered within one month, subject to the applicable rules for clarification, extensions and exemptions. We do not use website enquiries for decisions based solely on automated processing that have legal or similarly significant effects.
Complaints
You can make a data-protection complaint by emailing office@gtlaser.co.uk or writing to the registered office. Describe the concern and what you would like us to investigate. We will acknowledge it within 30 days, take appropriate steps to investigate and tell you the outcome without undue delay.
You can also complain to the Information Commissioner’s Office. You do not have to give up any other legal remedy to use our complaints process.
Changes
Last updated: 5 September 2026. We review this policy when the website, its processing or legal requirements change. Material new uses of personal information will be explained through appropriate notices.