Privacy Policy

Last updated: June 2026

1. Introduction

TOSEV Ltd ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and services. We are registered in England and Wales as a limited company and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

TOSEV Ltd is the data controller responsible for your personal data. Our contact details are:

  • Company Name: TOSEV Ltd
  • Company Registration Number: 16928368
  • Registered Office: 124 City Road, London, EC1V 2NX
  • Email: enquiries@tosev.co.uk

3. What Data We Collect

We collect and process the following types of personal data:

3.1 Information You Provide

  • Name and contact details (email address)
  • Project details and specifications for engraving services
  • Design files and artwork you submit
  • Correspondence and communications with us
  • Payment information (processed by third-party payment providers)

3.2 Information Automatically Collected

  • Device and browser information (IP address, browser type, operating system)
  • Usage data (pages visited, time spent on site, referring URLs)
  • Cookies and similar tracking technologies (see our Cookie Policy)

4. Legal Basis for Processing

We process your personal data under the following lawful bases:

  • Legitimate Interest: Responding to enquiries and quote requests
  • Contract Performance: Fulfilling agreed engraving projects and services
  • Legal Obligation: Compliance with tax, accounting, and business regulations
  • Consent: Marketing communications (where applicable and with your explicit consent)

5. How We Use Your Data

We use your personal data for the following purposes:

  • Responding to quote requests and project enquiries
  • Communicating about your engraving projects
  • Processing and fulfilling orders
  • Providing customer support and service
  • Improving our website and services
  • Complying with legal and regulatory requirements
  • Preventing fraud and ensuring security

6. Data Retention

We retain your personal data for the following periods:

  • Quote Requests: 2 years from last contact
  • Completed Projects: 7 years (required for tax and accounting purposes under UK law)
  • Marketing Consent: Until you withdraw consent or 3 years of inactivity
  • Website Analytics: 26 months (Google Analytics default)

After these periods, your data will be securely deleted or anonymized unless we have a legal obligation to retain it longer.

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data (subject to legal obligations)
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a portable format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent for marketing or cookies at any time

To exercise any of these rights, please contact us at enquiries@tosev.co.uk. We will respond within one month of your request.

8. Cookies and Tracking

We use cookies and similar technologies to improve your experience on our website. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Secure servers and hosting infrastructure
  • Regular security assessments and updates
  • Limited access to personal data on a need-to-know basis
  • Staff training on data protection practices

10. Third-Party Service Providers

We may share your data with trusted third-party service providers who assist us in operating our business:

  • Website Hosting: Vercel (hosting and deployment services)
  • Email Services: Resend (contact form email delivery)
  • Analytics: Google Analytics 4 (with IP anonymization enabled)
  • Payment Processing: (payment provider to be determined for future implementation)

All third-party providers are required to maintain appropriate data protection standards and only process your data as instructed by us.

11. International Data Transfers

Some of our service providers may be located outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the UK government.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new "Last Updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us & Complaints

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

  • Email: enquiries@tosev.co.uk

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: