Who is responsible for your information
Exall Group Limited, trading as FlashFab, company number 11236726. Registered office: Unit 32A, Boyton Hall Farm, Roxwell, Chelmsford CM1 4LN. We are the data controller for everything described here. Email [email protected] or ring 01245 905540.
What we collect, and why
| What | Why | Our lawful basis |
|---|---|---|
| Your name, email, phone number and delivery address | To make your flashing, deliver it, and talk to you about it | Performing our contract with you |
| What you ordered — the profile, dimensions and material | To make it, and to answer questions about it afterwards | Performing our contract with you |
| A photograph of your sketch, if you upload one | To read the dimensions off it, and so the works can see what you meant | Performing our contract with you |
| Payment confirmation | To take payment and keep the records HMRC requires | Contract, and our legal obligation to keep records |
| Which advert brought you here, if you accepted cookies | To know which advertising is worth paying for | Your consent, which you can withdraw at any time |
We never see your card details. They go straight to Stripe and are never on our systems.
What happens to your sketch
If you photograph a sketch, the image is stored in our own private storage and sent to Anthropic — an AI company — so their software can read the dimensions off it. Anthropic process it on our instructions to give us back a reading, and we have contractual terms with them covering that. Your photograph is not used to train anyone’s models.
Nothing that software produces is treated as your order. You confirm every figure yourself before anything is made — the drawing you approve is the record, not the reading.
If you would rather no image left our systems, do not upload one: pick a profile from the list and type the dimensions instead. It is the same product either way.
Who else handles it
- Stripe — takes the payment and holds the order details attached to it.
- Amazon Web Services — stores sketches and order drawings, in their London region.
- Postmark — sends your confirmation email.
- Anthropic — reads uploaded sketches, as described above.
- Google — analytics and advertising measurement, only if you accepted cookies. See our cookie policy.
- The fabricator who makes your flashing — they receive your order, your drawing, your sketch if you sent one, and the delivery address, because they make it and send it.
Some of these are outside the UK. Where they are, transfers are covered by the UK addendum to the standard contractual clauses or an equivalent safeguard.
How long we keep it
Order records, including your drawing and any sketch, for seven years — HMRC require six, and a flashing outlives that. Advertising cookies for 90 days. If you ask us to delete something we are not required to keep, we will.
What you can ask for
A copy of what we hold, a correction, deletion, a restriction on what we do with it, or a portable copy. You can object to processing and withdraw consent for cookies whenever you like. Email [email protected] and we will reply within a month.
If we get it wrong you can complain to the Information Commissioner at ico.org.uk — though we would rather you told us first.
Questions about any of this: [email protected] or contact us.