PRIVACY & COOKIES
Your privacy and choices
How we handle enquiries, artwork, orders and website information.
Who is responsible?
Sandycroft Workwear Ltd, company number 07917944, is the controller responsible for the personal information described here. This includes enquiries about our GRAFT CO workwear range.
Privacy enquiries: sales@sandycroft-workwear.co.uk. You can also write to Sandycroft Workwear, 26 Babbage Road, Engineer Park, Sandycroft, Flintshire, CH5 2QD.
Sandycroft Workwear Ltd is registered in England and Wales. Registered office: Prior House, 129 High Street, Prestatyn, Wales, LL19 9AS.
Information you provide
When you request a quote, email us or contact us through WhatsApp, we receive the details you choose to send. These can include your name, business or organisation, email address, telephone number, delivery postcode or address, product choices, quantities, required date, artwork and correspondence. Orders also involve payment references and delivery and support records.
Only include information needed for the job. If your artwork contains other people’s names or photographs, make sure you are entitled to supply it. Please do not send passwords, full payment-card details or unnecessary sensitive information.
Artwork, previews and enquiries
Choosing a file for a logo preview does not automatically send it to us. Preview tools work in your browser; artwork is sent when you choose to attach it to a quote request or send it by email or WhatsApp. Our website quote form uses the details and attachments you submit to prepare and reply to your enquiry.
The optional Cyberstaff text-chat service receives details you choose to provide through its widget. WhatsApp links open an editable message addressed to our business mobile; a message is sent only when you send it in WhatsApp.
Why we use your information
- Steps towards a contract and fulfilment: preparing the quote or artwork you request, agreeing and producing an order, arranging payment and delivery, and providing order support.
- Legitimate interests: responding to business contacts, maintaining necessary correspondence, protecting our services, preventing fraud and resolving queries or disputes. We consider your rights when using information for these purposes.
- Legal obligations: keeping required tax and accounting records and responding to lawful requests.
If a particular use relies on your consent, you can withdraw it at any time. Sending an enquiry does not sign you up for marketing. Required fields identify the information needed to handle the request; without essential contact, specification or delivery details, we may be unable to quote or fulfil an order.
Who may receive it
We share information needed to operate the service with relevant email and website hosting providers. Where an order requires it, approved artwork and specifications may go to production partners, delivery details to couriers, and payment information to the provider handling the payment. Professional advisers or public authorities may receive records where needed for our legal obligations or a dispute.
Independent services, including payment providers, Google Maps and WhatsApp, also process information under their own privacy notices. We do not sell customer information.
Processing outside the UK
Some service providers operate internationally and may process information outside the UK. Where a transfer is restricted by UK data protection law, it must be covered by an applicable adequacy decision or appropriate safeguards, such as approved contractual terms. Contact us for information about a particular provider or to request details of the relevant transfer safeguards.
How long information is kept
We keep enquiry information while dealing with the enquiry and any necessary follow-up, and review it when that purpose ends. Order, artwork and support records are kept while needed to fulfil the order, support agreed repeat work, handle complaints or establish and defend legal claims. Tax and accounting records are retained for the applicable statutory period. An unresolved dispute or legal requirement can justify longer retention. Information should be deleted or anonymised when no longer needed for these purposes. Contact us to ask which records and retention criteria apply to your enquiry or order.
Your right to object
You can object to processing based on legitimate interests, including any direct marketing. Contact sales@sandycroft-workwear.co.uk and explain the use you want to object to.
Your other privacy rights
Depending on the circumstances, you can ask to access your personal information, correct inaccuracies, erase it, restrict its use or receive a portable copy. These rights may be limited where we have a legal obligation or another lawful reason to retain information. Where we rely on consent, you can withdraw it without affecting earlier lawful processing.
Email sales@sandycroft-workwear.co.uk to make a request or raise a concern. We may need proportionate information to confirm your identity. You can complain to the Information Commissioner’s Office or call 0303 123 1113. We would welcome the opportunity to resolve your concern first.
Cookies and your choices
Essential storage supports website security and the cookie preferences you choose. Optional analytics, marketing and functionality services stay off until you allow the relevant categories. Browsing, closing the settings panel or ignoring the banner does not give consent.
Use Cookie settings on any page, or the button below, to accept all, reject optional services or save individual choices. Accepting and rejecting are equally available. A refusal does not prevent browsing, quote requests, direct email or WhatsApp links.
Storage and providers
- Our preference record:
scw-cookie-preferences-v1in local storage records the categories you selected and an expiry time, for up to 180 days. It contains no name, email, artwork or order details. After expiry we ask again. You can change it at any time. - Analytics, optional: Google Analytics on pages where it is installed receives technical and usage information to measure visits. Its
_gaand GA measurement cookies normally have a two-year expiry, which can refresh when you return. - Marketing and targeting, optional: existing Google Tag Manager services are held until both analytics and targeting are allowed. Any storage they use is also controlled by the provider’s settings.
- Optional features: Cyberstaff text chat, the timeanddate.com clock and Google services on older pages can receive your IP address and connection information and may use cookies or local storage when allowed. Chat receives only the details you choose to supply. Provider-controlled storage can have different lifetimes; use the provider’s notice and your browser’s site-data controls to inspect or clear it.
Provider information: Google privacy, Cyberstaff privacy and timeanddate.com privacy.
Turning off an active optional service reloads the page to stop it loading. This does not automatically erase cookies or storage already set by a provider. Clear website data in your browser to remove those records, including any preference cookie left from the former CookieScript banner.
Maps, catalogues and external links
Embedded Google Maps and FullCollection catalogues load only when you choose their load button. Loading connects your browser to that provider, which receives connection information such as your IP address and may use cookies under its own privacy arrangements. Reload the page to remove the embedded service. Payment and WhatsApp links open the service you select, which has its own privacy and cookie controls.
Updates
We update this notice when our website or use of information changes. Last updated: 4 October 2026.
