This notice explains how GE STARR Engineering Limited collects and uses personal information when you visit our website, contact us, become a customer or supplier, or sign up for our updates. It is written to meet the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

GE STARR Engineering Limited ("GE STARR", "we", "us") is the controller of your personal information. We are a private limited company registered in England and Wales (company number 15752518), whose registered office is at 7 Dixon Street, Wolverhampton, England, WV2 2BS.

If you have any questions about this notice or your personal information, email [email protected], call +44 (0)1902 350090, or write to us at our registered office marked "Data protection".

The information we collect

Contact details — your name, job title, company, email address, phone number and business address.
Enquiry and quotation details — the service, quantities, materials, finishes, deadlines and messages you send us, and any drawings, files or links you share.
Customer account and order information — customer portal login details, order references, job progress, delivery details and documents relating to your orders.
Billing information — the details we need to invoice you and receive payment. We do not take card payments through this website.
Marketing preferences — whether you have signed up for our updates.
How you found us — the page you first landed on, the website that referred you and any campaign tags in the link you followed, recorded with an enquiry.
Technical information — your IP address, browser type and the pages you request, which our servers and security provider log to keep the website secure and working.

We do not intentionally collect special category information (such as health data) through our website. Please do not include it in messages or drawings.

How we use it, and our lawful basis

To respond to enquiries and prepare quotations — our legitimate interest in responding to requests about our services, and taking steps at your request before entering into a contract.
To manufacture, deliver, invoice and support your orders, and to run the customer portal — performance of our contract with you or your organisation.
To keep business records and meet our legal, tax and accounting obligations — legal obligation.
To send you updates you have signed up for — your consent, which you can withdraw at any time using the unsubscribe link or by contacting us.
To tell existing business customers about similar services — our legitimate interests. You can object at any time.
To understand which marketing brings us enquiries, and to keep our website secure and improve it — our legitimate interests.
To manage our relationships with suppliers and subcontractors — performance of a contract and our legitimate interests.

Where we rely on legitimate interests, we have considered your rights and expectations and believe they are not overridden. You can ask us for more detail.

Drawings and technical information

We treat the drawings, models and technical information you send us as confidential. We use them only to quote for, manufacture and support your parts. Files uploaded through our website are stored privately on access-controlled systems and are not published. We do not share them outside GE STARR without your permission, except with the service providers listed below or where the law requires it.

Who we share it with

Service providers acting on our instructions, including our website hosting, security and content-delivery provider (Cloudflare), our customer relationship management (CRM) system, and our email and office software providers.
Couriers and hauliers, so we can deliver your order.
Our bank, insurers and professional advisers, such as accountants and lawyers.
The police, HMRC, regulators or others where the law requires it, or where needed to protect our rights.
A buyer or investor, if our business or part of it is sold or reorganised.

We do not sell your personal information.

International transfers

Some of our service providers (for example Cloudflare, and Google, which serves some of the fonts used on this website) may process information outside the UK. Where they do, we make sure it is protected by UK adequacy regulations (including the UK–US data bridge) or by the ICO’s International Data Transfer Agreement or Addendum.

How long we keep it

Enquiries and quotations that do not lead to an order: up to 24 months after our last contact with you.
Customer, order and supplier records: six years after the end of the financial year of our last transaction, to meet tax and accounting requirements.
Customer portal accounts: while the account is active, and deleted within 12 months of it being closed. Order records are kept as above.
Newsletter sign-ups: until you unsubscribe.
Server and security logs: only for as long as needed to keep our systems secure.

Your rights

Under UK data protection law you have the right to:

ask for a copy of the personal information we hold about you;
ask us to correct information that is wrong or incomplete;
ask us to delete your information, or to restrict how we use it;
object to our use of your information where we rely on legitimate interests, and object to direct marketing at any time;
ask for information you gave us to be transferred to you or another organisation (data portability);
withdraw your consent at any time, where we rely on consent.

We do not make decisions about you based solely on automated processing. Find out how to make a request on our GDPR & data protection page.

Cookies

Our website uses only the cookies needed to make it work. See our Cookie policy.

Complaints

If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113.

Changes to this notice

We may update this notice from time to time. The latest version will always be on this page, with the date it was last updated.

Privacy notice