Privacy

Privacy Policy

How we collect, use, protect and retain personal information when you visit the website, send a project enquiry, become a customer or receive relevant B2B outreach.

Last updated: 7 October 2026

1. Who is responsible for your information

Phoenix Additive is the industrial-facing additive manufacturing brand operated by The Creative Parrot, a UK sole-trader business. For data protection purposes, the business operating this website is the data controller for the personal information described in this notice.

Privacy contact

Arty Smith
Phoenix Additive / The Creative Parrot
3 Bro Brwynog, Treuddyn, Flintshire, CH7 4AL, United Kingdom
arty@phoenixadditive.co.uk
07933 074845

2. Information we collect

Depending on how you deal with us, we may collect:

  • your name, company, job role, business contact details and correspondence;
  • information you submit through the website enquiry form, including project type, quantity, material requirements and project details;
  • CAD files, drawings, photographs, ZIP files or other files you choose to upload;
  • quote, order, delivery, invoice and payment-related records where you become a customer;
  • technical website information such as server logs, IP address, browser or device information and requested pages;
  • privacy-limited Google Analytics 4 measurement information on a first visit with analytics storage denied, and fuller GA4 website usage information if you choose to allow analytics; and
  • professional business contact information obtained from public company websites, Companies House, professional networks or business directories where we conduct relevant B2B outreach.

Please do not include sensitive personal information in project files or enquiry text unless it is genuinely necessary and you have an appropriate reason to provide it.

3. Why we use personal information

PurposeTypical lawful basis
Reviewing an enquiry, advising on manufacturability, preparing a quote and communicating before an orderSteps at your request before entering a contract and/or legitimate interests in responding to business enquiries
Producing, supplying and supporting an orderPerformance of a contract and legitimate interests in providing the service effectively
Accounting, tax, fraud prevention and legal record keepingLegal obligation and legitimate interests
Website security, diagnostics and prevention of misuseLegitimate interests in operating a secure and reliable website
Relevant B2B direct marketing to professional contactsLegitimate interests where appropriate, subject to the UK GDPR, PECR and your right to object; consent where the law requires it
Privacy-limited website statistics before an analytics choiceLegitimate interests in understanding and improving the website, together with the PECR statistical-purposes exception where its conditions are met. Analytics storage remains denied.
Google Analytics 4 cookies and identifier-based measurement after you choose Accept analyticsConsent.

Where we rely on legitimate interests, we consider whether the use is necessary, proportionate and reasonably expected, and we balance our interests against the rights and interests of the person concerned.

4. Enquiry files and confidentiality

Files uploaded through the quote form are stored in a private area of the website hosting environment and are not intended to be publicly accessible. The enquiry email contains a random, time-limited download link rather than attaching the file directly.

Secure download links expire after 30 days. Temporary uploaded files are subject to housekeeping after expiry and may remain in restricted server storage for a short period until that housekeeping runs. If the notification email fails, newly uploaded files are removed by the enquiry system.

We use submitted technical files only as needed to assess, quote, manufacture or support the project, unless you ask us to use them for another agreed purpose.

The separate numbered quote tool collects your name and email address, with optional company and phone details, your 3D model, print choices and quote details. Its quote PDF is emailed through Google Workspace, and a private owner copy is kept on encrypted computer storage. The 30-day link above applies to the website enquiry form, not to numbered quotes. That tool provides its own more detailed privacy notice.

5. B2B outreach and your right to object

We may contact relevant people at organisations where our manufacturing services could reasonably be relevant to their professional role. Where personal business contact information is used, UK data protection law still applies even if the address is a work address.

We distinguish between corporate subscribers and individual subscribers when applying the electronic marketing rules. We do not treat legitimate interests as a blanket permission to contact anyone.

You can object to direct marketing at any time. If you tell us not to contact you for marketing, we will stop using your personal information for that purpose and keep only the minimum suppression record needed to respect your request.

6. Who we share information with

We may share information only where necessary with service providers that support the business, such as website hosting, email, IT/security, payment, accounting and delivery providers. If you choose to allow website analytics, Google receives information generated by Google Analytics 4 for measurement purposes. We may also disclose information where required by law, to establish or defend legal rights, or with your specific agreement.

We do not sell personal information to advertisers or data brokers.

7. International transfers

Some technology or service providers may process information outside the UK. Where UK data protection law requires safeguards for an international transfer, we take reasonable steps to use an appropriate transfer mechanism and protections.

8. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose it was collected, including contract, tax, accounting, warranty, dispute and legal requirements. Temporary website enquiry uploads have the shorter retention approach described above. Marketing suppression records may be retained so that we can continue to honour an objection.

For the separate numbered quote tool, we propose a two-year period for quotes and uploaded files and six years for order records, with longer retention where needed for a legal claim. These are proposed periods, not an active deletion schedule. Numbered quotes, their files and private owner copies are not yet automatically deleted. The same approach still needs to be implemented for backups.

9. Your data protection rights

Depending on the circumstances, you may have rights to ask for access to your personal information, correction, deletion, restriction, portability, or to object to certain uses. Where processing relies on consent, you can withdraw that consent at any time without affecting earlier lawful processing.

To exercise a right, email arty@phoenixadditive.co.uk. We may need information to verify your identity before acting on a request.

10. Data protection complaints

You can raise a data protection complaint with us by emailing arty@phoenixadditive.co.uk with the subject “Data protection complaint”, or by writing to the address above.

We will acknowledge a data protection complaint within 30 days of receiving it, take appropriate steps to investigate without undue delay, keep you informed where appropriate and tell you the outcome.

If you remain dissatisfied, you can complain to the UK Information Commissioner’s Office (ICO) through ico.org.uk.

11. Changes to this notice

We may update this notice when our services, technology or legal obligations change. The date at the top of this page shows the latest revision.