Privacy Policy

Who we are

This website is operated by [REGISTERED COMPANY NAME], a company registered in [JURISDICTION] under registration number[COMPANY NUMBER], with its registered office at[REGISTERED POSTAL ADDRESS]. We trade as Fabex Manufacturing and fabricate custom acrylic displays, cases, trays and housings for business customers worldwide.

For the purposes of the EU and UK General Data Protection Regulation (GDPR), we are thedata controller for personal data collected through this website and in the course of quoting for and fulfilling orders. Our contact address for any privacy matter is sales@acrylicdisplaymfr.com.

This policy covers personal data relating to individuals — typically the buyer, designer, engineer or accounts contact at a customer or supplier organisation. It does not cover data we hold about a company as such.

What we collect

We only collect what a fabrication business genuinely needs to quote for and make a part. In practice that falls into five groups.

1. Information you give us in an enquiry

When you use the quote form or email us, we collect the fields you fill in: your name, company, email address, telephone or WhatsApp number, country, the type of product you need, quantities, dimensions, your target date, and any free-text description of the project. If you attach drawings, photographs or 3D files, we receive those too.

2. Correspondence

We keep the emails, WhatsApp messages and file exchanges that make up a quotation or an order. This is the record that lets us answer "why was this dimension changed?" months later, and it is frequently the most useful document in a warranty discussion.

3. Order and delivery details

Once you order, we hold billing and delivery addresses, purchase order references, the name and contact details of the consignee, and the information a freight forwarder or customs broker needs — including an HS code description of the goods and, for some destinations, an importer identification number.

4. Website usage information

If you consent to analytics, we collect which pages you viewed, how you arrived at the site, your approximate location derived from a truncated IP address, and your device, browser and screen characteristics. If you do not consent, none of this is collected.

5. Cookies and similar technologies

A small number of cookies and local storage entries are used to deliver and secure the site, and — only with your consent — to measure usage and advertising. These are listed individually in our Cookie Policy.

We do not collect special category data (for example health, biometric or political data) and we ask that you do not send it to us. Please do not include personal data about third parties in a drawing or specification unless it is necessary — for example a named consignee — and you have the right to share it.

Why we collect it, and our legal basis

Under the GDPR we must have a lawful basis for each thing we do with personal data. The table below sets out every purpose we process data for, the data involved, and the basis we rely on.

Cookies and analytics

This site is built so that no analytics or advertising cookie is set until you make a choice. On your first visit, Google Consent Mode is initialised with every category denied; the tag library is not even loaded. If you accept analytics or advertising, or both, we record that decision in your browser's local storage and load the relevant tags. If you never interact with the banner, you are never tracked.

You can change or withdraw your choice at any time using the Cookie settings link in the footer. The categories, the cookies involved and the processors behind them are set out in full in the Cookie Policy.

Who we share data with

We do not sell personal data, and we do not share it for anyone else's marketing. We share it only with the service providers and counterparties needed to run the site and deliver your order.

Hosting, security and delivery

• Cloudflare — hosting, content delivery, DNS, firewall and bot protection. Cloudflare processes IP addresses and request metadata as part of serving the site, and may set strictly necessary security cookies such as the bot-management and challenge cookies. These are required for the site to function securely and are not used for advertising.
• Zoho Zeptomail — transactional email delivery. When you submit the quote form, or when we reply to you or send an order confirmation, the message content and the recipient address pass through Zeptomail's infrastructure as the sending service.
• Google — Google Analytics 4 (usage measurement) and Google Ads (advertising measurement, including conversion events when you submit the form or click a phone, email or WhatsApp link). These load only if you consent.

Order fulfilment

• Freight forwarders, couriers and customs brokers receive the consignee name, address, contact details and a description of the goods, because no international shipment moves without them.
• Banks and payment providers process payments and screen them for fraud. We do not store full card numbers on this website.
• Professional advisers — accountants and auditors, and insurers where a claim is made.

Legal requirements

We may disclose personal data where we are legally required to, or where it is necessary to establish, exercise or defend a legal claim. Where a request is manifestly unfounded or excessive we may refuse it, and where we can we will tell you about a disclosure.

Some of these providers act as our processors, which means they may only use the data on our instructions; others, such as a customs authority, are independent controllers for their own statutory purposes. We put written data processing terms in place with our processors.

International transfers

We are based outside the European Economic Area and the United Kingdom, and we sell into both, so personal data will be transferred internationally. Our processors may also store or process data in the United States, Singapore and other countries where their infrastructure sits.

When data leaves the EEA or the UK we rely on one or more of the following:

• an adequacy decision by the European Commission or the UK Secretary of State, where one exists for the destination country;
• the European Commission's Standard Contractual Clauses and, for the UK, the International Data Transfer Addendum, together with a transfer risk assessment covering government access to data; and
• for US recipients certified under the EU–US Data Privacy Framework, the relevant adequacy mechanism in respect of that certification.

You can request a copy of the safeguards we rely on by emailing the address at the end of this policy. Where we ship goods, consignee details necessarily travel with the shipment and are disclosed to customs authorities in the destination country, as export law requires.

How long we keep data

We keep personal data only as long as we need it for the purpose we collected it, plus any period we are legally required to hold it.

• Enquiries that do not become orders — 24 months from the last contact, so that a project which comes back a year later can be picked up with its history intact.
• Orders, invoices and shipping records — for the duration of the contract and then for the statutory record-keeping period in our jurisdiction, which we apply as seven years after the end of the financial year, whichever is longer.
• Warranty and inspection records — for the warranty period plus the 24-month claim window described in our Terms of Service.
• Quote form spam and security logs — typically 30 days or less.
• Analytics data — set to the shortest retention available in Google Analytics 4 that still gives a useful year-on-year comparison, currently 14 months.
• Your consent choice — stored in your browser, not on our servers, and it stays until you clear it or change it.

When a retention period ends we delete or irreversibly anonymise the data. Where data exists only inside backups, it is deleted when the backup cycle rolls over.

Your rights

If you are in the EEA, the UK, or another jurisdiction with equivalent law, you have:

• Access — confirmation of whether we hold data about you, and a copy of it;
• Rectification — correction of data that is inaccurate or incomplete;
• Erasure — deletion of data we no longer need. This is not absolute: we cannot delete an invoice we are legally required to keep, and we may need to keep enough to defend a claim;
• Portability — data you provided to us, in a structured, commonly used, machine-readable format, or transferred to another controller where technically feasible;
• Restriction — a pause on processing while a dispute about accuracy or lawfulness is resolved;
• Objection — to processing based on legitimate interests, including profiling. We will stop unless we can show compelling grounds that override your interests; and
• Withdrawal of consent — at any time, for anything we do on the basis of consent. Withdrawal does not make prior processing unlawful.

You also have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We do not make any such decision: nothing on this site profiles you, and no enquiry is accepted or rejected by algorithm.

To exercise any of these rights, email sales@acrylicdisplaymfr.com with enough information for us to identify you. We respond within one month. If a request is unusually complex we may extend that by a further two months, and we will tell you within the first month if we need to.

Complaints

We would rather fix a privacy problem directly than have you escalate it, so please contact us first. If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority — in the country where you live, where you work, or where the alleged infringement took place. In the UK that is the Information Commissioner's Office; in the EU it is your national data protection authority.

Children's privacy

This is a business-to-business manufacturing website. It is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We update this policy when our processing changes — a new processor, a new analytics configuration, or a change in the law. The "last updated" date at the top always reflects the current version. Where a change materially affects how we handle your data, we will say so prominently on this page rather than relying on you to re-read it.

How to contact us

Any privacy question, request or complaint should go to sales@acrylicdisplaymfr.com. Our office hours are Mon–Fri, 09:00–18:00 (GMT+8), and we reply within one business day. Postal enquiries can be sent to the registered address given at the top of this policy.

This policy is governed by the same law as our Terms of Service, and should be read alongside the Cookie Policy.