PRIVACY & COOKIE POLICY

How Falkbuilt Europe, as part of The Torrington Group, collects, uses and protects your personal data, and the cookies used on this website.

Last updated: 3 July 2026

Falkbuilt Europe is part of The Torrington Group, a group of companies which includes Tsunami Axis Ltd, Tsunami Operations Ltd, Tsunami Axis GmbH, Axis@Work Ltd and Falkbuilt Europe. We are committed to upholding our responsibilities under the UK GDPR and the Data Protection Act 2018, and, where it applies, the EU GDPR (Regulation (EU) 2016/679). This policy is written to be jargon-free and in plain language, and explains what personal data we hold, why we hold it, who we share it with, and the choices you have.

1. What data we hold

In the course of our business we hold personal data relating to the following groups of people:

• 1.1 Customer data — names, roles, organisation and contact details, held across our CRM, business management, finance, product information and email systems, so that we can quote for, manage and deliver our work.
• 1.2 Supplier & sub-contractor data — the contact and account details we need to place orders with, pay and co-ordinate our suppliers and sub-contractors.
• 1.3 Employee data — the personal and employment records we are required to keep as an employer.
• 1.4 Office and site visitors — details recorded when people visit our offices or project sites, for security and health-and-safety purposes.
• 1.5 Back-up data — copies of the above, held securely by our IT support company, idash, so that our systems can be recovered.
• 1.6 Website enquiries — when you use our contact form we collect your name, email address, message, and (optionally) your company, so that we can respond to your enquiry. The enquiry is delivered to our hello@falkbuilteurope.com inbox via our email provider (see Data processors).
• 1.7 Newsletter subscribers — if you sign up to the Falkbuilt Europe newsletter we collect your email address, with your consent, to send you our updates. You can unsubscribe at any time.

2. Lawful basis

Data protection law requires us to have a lawful basis for processing personal data. The six available bases are consent, contract, legal obligation, vital interests, public task and legitimate interests. We rely on:

• Customers — the performance of our contract with you, and our legitimate interest in managing and developing our business relationship.
• Suppliers & sub-contractors — the performance of our contract with you, and our legitimate interest in managing our supply chain.
• Employees — the performance of your employment contract and our legal obligations as an employer.
• Website enquiries — our legitimate interest in responding to a message you send us, and/or taking steps at your request before entering into a contract.
• Newsletter — your consent, given by ticking the opt-in box when you subscribe. You can withdraw this consent at any time by unsubscribing.

3. Data processors

We use trusted third parties to process personal data on our behalf, under data processing agreements. They fall into the following categories:

• IT service providers (idash) — develop, maintain and back up our systems.
• Website hosting (Vercel) — hosts this website and runs the form-handling functions.
• Transactional email (Resend) — delivers contact-form enquiries to our inbox. Email is dispatched from within the EU (Ireland); Resend stores account data and logs in the United States.
• Newsletter / CRM (HubSpot) — manages newsletter subscriptions; based in the United States.
• DNS (Cloudflare, via idash) — resolves our domain; configured DNS-only and does not proxy your browsing.
• Email / mailbox (Microsoft 365) — hosts the hello@falkbuilteurope.com mailbox that receives enquiries.

International transfers. Some of these providers are based in the United States, so personal data may be transferred outside the UK/EEA. Where that happens, we rely on appropriate safeguards — such as the UK International Data Transfer Agreement (IDTA) or the EU Standard Contractual Clauses — as set out in each provider's data processing terms.

4. Keeping your data secure

We take appropriate technical and organisational measures to keep personal data secure and to protect it against unauthorised access, loss or misuse. Our systems are managed by our in-house IT function, supported by our IT consultants (idash), and access to personal data is restricted to those who need it to do their job.

5. Keeping your data relevant

We keep personal data only for as long as it is needed for the purpose it was collected, or to meet our legal and contractual obligations. We take reasonable steps to keep the data we hold accurate and up to date, and to remove or correct information that is no longer relevant.

6. Cookies & similar technologies

Falkbuilt Europe's website is built to keep tracking to a minimum:

• We self-host our fonts and videos, so simply loading the site does not call any third-party font or media networks.
• We use no third-party analytics or advertising cookies by default — there is no Google Analytics, Google Ads, LinkedIn or similar tracking on this site.
• A consent/preference record is stored when you make a choice in our cookie banner, so that we can remember it. This is strictly necessary. It is not a cookie: your choice is held in your browser's local storage under the key fbe_cookie_consent, stays on your own device, and remains until you clear your browser storage.
• Embedded videos use YouTube's privacy-enhanced (youtube-nocookie) mode and load only when you click to play. If you choose to play a video, YouTube (Google) may then set its own cookies; that is governed by Google's privacy policy.
• You can manage or block cookies in your browser settings; see aboutcookies.org or allaboutcookies.org. Blocking some cookies may affect how parts of the site work.

7. Data requests

You have the right to ask for a copy of the personal data we hold about you. We will respond within one month, free of charge. You also have the right to ask us to correct inaccurate data (rectification), to delete it (erasure), to restrict or object to how we use it, and to receive it in a portable format (data portability). To exercise any of these rights, please contact our Data Manager (see Data Manager). If you are unhappy with how we handle your data, you also have the right to complain to the Information Commissioner's Office (ICO), ico.org.uk.

8. Deleting data

You can ask us to delete the personal data we hold about you where we no longer have a lawful reason to keep it. We will action such requests unless we are required to retain the data to meet a legal or contractual obligation, in which case we will explain why.

9. Data breaches

In the unlikely event of a personal data breach, we will assess the risk to those affected and, where the law requires it, report the breach to the Information Commissioner's Office within 72 hours and notify the individuals concerned without undue delay.

10. Buying or selling data

We will not sell your data. If the business, or part of it, is bought or sold, personal data may be transferred as part of that transaction; in that event it would remain protected by this policy and by data protection law.

11. Cookies used on this site

On a standard visit, this site sets no cookies at all. Your cookie choice is stored in your browser's local storage (not a cookie), and no analytics or advertising cookies are used. The only third-party cookies that can appear are those set by YouTube, and only if you actively choose to play an embedded video.

12. Data Manager

Our appointed Data Manager is Shaun Maroney. For any question about this policy, or to make a data request, please contact him at enquiries@thetorringtongroup.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), ico.org.uk.