Privacy Policy – AB Works

Effective date: 1 October 2026
Last reviewed: 1 October 2026

1. Introduction

AB Works respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, request a quotation, or use our services.

AB Works provides services relating to boatbuilding, boat repairs and restorations, and specialist engineering and project consultancy.

This policy applies to information collected through our website, by email, telephone, in person, and through other business communications.

We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable privacy and electronic communications legislation.

Who we are

The organisation responsible for your personal information is:

Business name: AB Works
Business address: Nottigham UK
Email:
Website: https://www.ab-works.co.uk

For the purposes of data protection legislation, AB Works acts as the data controller for the personal information described in this policy, except where we expressly act on behalf of another organisation.

2. Personal Information We Collect

We only collect personal information that is reasonably necessary for our business activities and the operation of our website.

Depending on how you interact with us, we may collect the following categories of information.

2.1 Contact and identification information

This may include your name, email address, telephone number, postal address, business name, and other contact details you choose to provide.

2.2 Enquiries and correspondence

When you contact us, request a quotation, or discuss a potential project, we may collect the contents of your communications, details of your requirements, information about the services you are interested in, and records of correspondence.

2.3 Boat, project and technical information

When discussing or undertaking a project, we may collect information about boats, components, materials, dimensions, specifications, photographs, drawings, repair requirements, project schedules, budgets and other technical information relevant to the work.

Where photographs, drawings or project records identify an individual, they may constitute personal information. We treat confidential technical and commercial information appropriately, although not all such information is personal data.

2.4 Transaction and payment information

If you purchase services from us, we may retain quotations, invoices, payment records and information required for accounting purposes.

Where payments are processed by a third-party payment provider, payment card details are handled in accordance with that provider’s arrangements. We do not intentionally collect or retain full payment card details unless this is necessary for a specific, appropriately secured payment process.

2.5 Website and technical information

When you visit our website, certain technical information may be collected, depending on the website configuration and services in use. This may include your IP address, browser type, device information, pages visited, referring website, access times and server logs.

Cookies and similar technologies may also collect information about website usage, as explained in Section 7.

2.6 Information obtained from other sources

Where necessary for a project or business relationship, we may receive relevant information from a customer, their authorised representative, a project partner or another third party. Where required by law, we will provide the applicable privacy information.

Please do not provide personal information about another individual unless you have an appropriate reason and authority to do so.

3. How We Use Your Personal Information

We may use your personal information for the following purposes:

Responding to enquiries: To answer questions, discuss potential work and provide requested information.
Quotations and contracts: To prepare estimates, quotations, proposals and agreements.
Delivering services: To plan, undertake and manage boatbuilding, repair, restoration, engineering and consultancy projects.
Project administration: To coordinate work, communicate with customers and suppliers, maintain records, and manage project delivery.
Payments and accounting: To issue invoices, process payments, manage accounts and meet tax and financial record-keeping requirements.
Business communications: To provide updates about your enquiry or project and respond to requests.
Website operation: To maintain website functionality, security and performance.
Business improvement: To understand and improve our services and website where appropriate and lawful.
Legal obligations: To comply with applicable laws and respond to lawful requests from relevant authorities.
Dispute resolution: To establish, exercise or defend legal claims where necessary.

We will not use personal information for purposes that are incompatible with the purposes explained in this policy without providing any additional information or obtaining consent where legally required.

4. Our Lawful Bases for Processing

Under the UK GDPR, we must have a lawful basis for processing personal information. Depending on the circumstances, we rely on the following bases:

Contract or steps before entering into a contract

We use relevant information to prepare quotations, respond to requests for proposed work, enter into agreements and fulfil our contractual obligations to customers.

Legitimate interests

We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests. These interests may include responding to general business enquiries, managing business relationships, maintaining records, securing our website and improving our services.

Legal obligation

We may retain or disclose information where necessary to comply with legal obligations, including applicable tax, accounting and other regulatory requirements.

Consent

Where required, we rely on your consent for particular activities, such as the use of non-essential cookies or certain forms of electronic marketing. You can withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

The applicable lawful basis depends on the particular information and purpose. Where we rely on legitimate interests, we will consider and balance those interests against your rights and freedoms.

5. Sharing Your Personal Information

We do not sell your personal information to third parties.

We may share relevant information with the following categories of recipients where necessary and lawful:

Website hosting and technical providers: To host, maintain, secure and support our website.
Email and communications providers: To receive, send and manage business correspondence.
Professional advisers: Such as accountants, solicitors and other advisers where required.
Suppliers, subcontractors and project partners: Where sharing is necessary to quote for, coordinate or deliver agreed work.
Payment and financial service providers: Where required to process transactions or administer payments.
IT, security and analytics providers: Where these services are used to maintain website security or analyse website performance.
Public authorities and legal representatives: Where disclosure is required by law or is necessary to establish, exercise or defend legal claims.

We take reasonable steps to ensure that third parties handling personal information on our behalf are subject to appropriate confidentiality, security and data protection obligations.

Where information is shared with an independent third party, that party may be responsible for its own processing activities and privacy information.

6. International Transfers

Some of the service providers used by AB Works may store or process personal information outside the United Kingdom.

Where personal information is transferred internationally, we will ensure that the transfer complies with applicable data protection requirements. Depending on the circumstances, this may involve an applicable adequacy regulation or decision, appropriate safeguards such as approved contractual clauses, or another legally permitted transfer mechanism.

You may contact us using the details in Section 12 if you would like further information about relevant international transfers and safeguards.

This section applies only where such transfers take place.

7. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support website functionality, security, user preferences and, where enabled, website analytics or other optional services.

Cookies are small files stored on your device. Similar technologies may also store information on or access information from your device.

Cookies may be categorised as follows:

Strictly necessary cookies: Required for essential website functions or services you have requested.
Preference cookies: Used to remember settings or preferences, where applicable.
Analytics cookies: Used to understand how visitors use the website, where analytics services are enabled.
Third-party cookies or technologies: Used by external services integrated into the website, where applicable.

We will provide appropriate information about the cookies and similar technologies actually used on our website.

Where consent is required, non-essential cookies and similar technologies will not be activated before you have given valid consent. You can change or withdraw your preferences through the website’s cookie settings, where provided.

Changing your browser settings may also allow you to block or delete cookies, although this may affect some website functions.

For further information, please refer to our [Cookie Policy or Cookie Settings](INSERT LINK TO YOUR COOKIE POLICY OR COOKIE SETTINGS, IF APPLICABLE).

8. How Long We Retain Your Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including satisfying legal, accounting, contractual and reporting requirements.

Retention periods depend on the type of information and the circumstances.

General enquiries: Normally retained for as long as necessary to respond and manage the enquiry, followed by deletion when no longer required.
Quotations and project records: Retained for the duration of the relevant business relationship and for an appropriate period afterwards, where needed for administration, contractual obligations or potential disputes.
Invoices and financial records: Retained for the periods required by applicable tax and accounting legislation.
Website logs and security records: Retained for a period appropriate to website security, troubleshooting and operational needs.
Marketing preferences and consent records: Retained as necessary to administer preferences and demonstrate compliance with applicable requirements.

We may retain information for longer where required by law or where necessary to establish, exercise or defend legal claims.

When information is no longer required, we will take reasonable steps to delete it securely or anonymise it.

9. How We Protect Your Information

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include access controls, appropriate account security, software updates, secure storage and limiting access to information to those who need it for legitimate business purposes.

No method of internet transmission or electronic storage can be guaranteed to be completely secure. We therefore cannot guarantee absolute security, but we take reasonable steps to protect the information we hold.

If a personal data breach occurs, we will assess it and take the action required by applicable data protection legislation, including notifying the relevant authority or affected individuals where legally required.

10. Your Data Protection Rights

Subject to applicable legal requirements and exemptions, you may have the following rights in relation to your personal information:

Right of access: To request a copy of the personal information we hold about you.
Right to rectification: To request correction of inaccurate or incomplete information.
Right to erasure: To request deletion of your information in certain circumstances.
Right to restrict processing: To request that we limit how we use your information in certain circumstances.
Right to data portability: To receive certain information in a commonly used, machine-readable format or request its transfer to another organisation where the legal conditions apply.
Right to object: To object to processing based on legitimate interests and to direct marketing.
Right to withdraw consent: Where we rely on consent, you can withdraw it at any time.
Rights relating to automated decision-making: To the extent applicable, you have rights concerning certain decisions made solely by automated means that have legal or similarly significant effects.

These rights are not absolute and may be subject to legal conditions or exemptions.

To exercise a right, please contact us using the details in Section 12. We may need to verify your identity before responding.

We will respond within the period required by applicable data protection legislation.

You will not normally have to pay a fee for a request. A reasonable fee may be charged, or a request refused, where the law permits this, for example in the case of manifestly unfounded or excessive requests.

11. Marketing Communications

We may use your contact details to communicate with you about an existing enquiry, quotation, project or business relationship.

We will only send direct marketing communications where permitted by applicable data protection and electronic marketing laws. Where consent is required, we will obtain it before sending marketing communications.

You can opt out of marketing emails at any time by using an unsubscribe link where available or contacting us at .

Opting out of marketing will not prevent us from sending necessary service-related communications, such as messages about an existing project, outstanding invoices or contractual arrangements.

We will respect your marketing preferences and maintain appropriate records of objections and opt-outs.

12. Contacting AB Works and Making a Complaint

If you have any questions about this Privacy Policy, wish to exercise your data protection rights or have concerns about how we use your personal information, please contact:

AB Works
Email:
Website: https://www.ab-works.co.uk
Postal address: Nottingham, UK

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator, if you believe your personal information has been handled unlawfully.

ICO website: https://ico.org.uk/
ICO helpline: 0303 123 1113

We encourage you to contact us first so that we can try to address your concerns, although you are entitled to complain directly to the ICO.

13. Third-Party Websites and Services

Our website may contain links to external websites or services. Those websites operate under their own privacy policies and practices.

AB Works is not responsible for the privacy practices or content of external websites. We recommend reviewing their privacy information before providing them with personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, services, technology or legal obligations.

The latest version will be published on our website, together with its effective or last-updated date.

Where required by law, we will provide additional information or notify affected individuals about significant changes before introducing new uses of their personal information.

15. Automated Decision-Making

AB Works does not currently intend to make decisions about individuals solely through automated processing that produce legal effects or similarly significant effects.

If our practices change, we will update this policy and provide any additional information required by law.

This Privacy Policy should be read alongside any applicable Cookie Policy and other privacy information provided when you submit information to AB Works.