GE STARR Engineering Limited is committed to handling personal information lawfully, fairly and securely, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains how we put that into practice and how to exercise your rights. For full details of what we collect and why, see our Privacy notice.
Our data protection principles
- Lawful, fair and transparent — we tell you what we collect and why, and only use information where we have a lawful basis.
- Purpose limitation — we use information only for the purposes we have told you about.
- Data minimisation — we ask only for what we need to respond to you and fulfil your orders.
- Accuracy — we keep records up to date and correct them when you tell us something has changed.
- Storage limitation — we keep information only as long as we need it, then delete it securely.
- Integrity and confidentiality — we protect information against loss, misuse and unauthorised access.
- Accountability — we take responsibility for complying with data protection law and can show how we do it.
How we protect information
- Our website is served over an encrypted (HTTPS) connection.
- Drawings uploaded through our website are stored privately, never in a public folder, and can only be opened by authorised GE STARR staff or through time-limited secure links.
- Staff and customer accounts are password-protected, and access is limited to the people who need it for their role.
- Customers using our portal can only ever see their own orders and documents.
- Our service providers may only process personal information on our written instructions, under contracts that meet UK GDPR requirements.
Making a request
To exercise any of your rights — for example to see, correct or delete the information we hold about you — email [email protected] with the subject "Data protection request", call +44 (0)1902 350090, or write to us at 7 Dixon Street, Wolverhampton, WV2 2BS.
Please tell us your name and contact details, which right you want to exercise, and anything that will help us find your information (such as an order reference). We may ask for proof of identity before we act on a request, to protect your information.
We will respond within one month. If a request is complex, or you make several, we may need up to two further months — we will tell you within the first month if so. Requests are normally free, but we may charge a reasonable fee, or decline, if a request is clearly unfounded or excessive.
If something goes wrong
If a personal data breach occurs, we will assess the risk and, where the law requires, report it to the ICO within 72 hours of becoming aware of it and tell anyone affected without undue delay.
Sharing other people’s information with us
If you give us personal information about someone else — for example contact details for a colleague — please make sure they know you are sharing it and point them to our privacy notice.
Complaints
If you are unhappy with how we have handled your information, please contact us first. You can also complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint or 0303 123 1113.