Privacy

Who is responsible

The controller of your personal data is Datum Surfaces. For any privacy question, email contact@datumsurfaces.com.

What we collect

• What you type into a form: your name, email address, role, country, project timing, company, and the details of your request. For samples, the delivery address and, if you give one, a phone number for the courier. Files you attach.
• Where the request came from: the page and product you were viewing when you sent the form.
• Security data: your IP address and a Cloudflare Turnstile check. We use them to block automated form submissions and to limit how often a form can be sent. Our host also keeps standard server logs.
• Visit statistics, only if you accept analytics cookies: pages viewed, how you arrived, device type and approximate location, through Google Analytics. See the cookies page.
• Email activity: which of our automatic emails we sent you, and when you confirmed or unsubscribed. We do not track opens or clicks.

Your sample tray and display preferences stay in your own browser. They reach us only if you send a sample request.

Why we use it, and the lawful basis

• To send what you asked for: the catalogue, samples, a quote or a reply. Basis: steps you ask us to take before a contract, and the contract once you order.
• Newsletters and the welcome emails after the catalogue, only if you tick the box and confirm by email. Basis: your consent, which you can withdraw at any time with the unsubscribe link.
• Follow-up emails about your own request (a quote reminder, a review request after delivery), which you can stop at any time. Basis: our legitimate interest in completing what you asked for.
• Spam protection. Basis: our legitimate interest in a working, secure website.
• Visit statistics with Google Analytics, to see which pages buyers use. Basis: your consent, which you can withdraw on the cookies page.
• Order and invoice records. Basis: our legal obligations for accounting and tax.

We never sell or rent your details, and we never call you. We do not use your details for automated decisions.

Who holds it

• Hostinger hosts this website. Our form handler there stores form submissions, the files you attach, and our list of contacts and subscribers.
• Hostinger Email delivers our emails from contact@datumsurfaces.com.
• Cloudflare runs the Turnstile check on our forms.
• Google Analytics, provided by Google Ireland Limited, counts visits if you accept analytics cookies. Google may process this data in the United States.

Some of these services process data outside your country. Where that happens, they use the safeguards the law requires, such as standard contractual clauses.

How long we keep it

• Enquiries: while your project is active, and up to 24 months after our last contact.
• Orders and invoices: as long as accounting and tax law requires.
• Backup copies of form submissions and attached files: 90 days.
• Security data such as IP addresses and rate-limit counters: up to 30 days.
• Google Analytics visit data: at most 14 months. Its cookies expire after 13 months.
• If you unsubscribe, we keep only your email address on a suppression list, so we do not email you again.

Your rights

You can ask to see the data we hold about you, to correct it or to delete it. You can also ask us to restrict or stop using it, or to send you a copy. Email contact@datumsurfaces.com from the address you used, and we reply within one month.

You can complain to your data protection authority, such as the ICO in the UK or the authority in your EU country.