Privacy Policy

This Privacy Policy explains how GT Laser Ltd uses personal information when you visit this website, contact us or discuss manufacturing work with us. It reflects the website services operating on 4 October 2026.

Who we are

GT Laser Ltd is the controller of the personal information described here. We are registered in England and Wales under company number 10197596. Our registered office is 18 Frank Brookes Road, Cheltenham, England, GL51 0UW. You can contact us at office@gtlaser.co.uk.

Information we use

When you visit the website, the hosting, content delivery and security services may process your network address, browser and device information, request time, pages requested, referrer, security events and cookie choice. If you allow optional traffic measurement, it also uses visit identifiers and page-use information.

When you contact us directly, we may receive your name, organisation, contact details, message and any drawings, artwork, specifications or other files you choose to send. When we discuss or carry out work, we may also use quotation, order, delivery, payment, correspondence and production information, including information supplied by your employer or another authorised contact.

Please send only information relevant to the enquiry or job. Tell us before sending information that needs an NDA, restricted access or other special handling.

Why we use information and our lawful bases

To deliver and secure the website: our legitimate interests in providing a reliable service, preventing misuse, investigating security events and protecting GT Laser and website visitors.
To answer business enquiries and prepare quotations: our legitimate interests in receiving relevant manufacturing enquiries, assessing requirements and managing prospective business relationships.
To take steps requested by an individual before a contract and to perform that contract: contract necessity where the person is contracting with us in their own name.
To manage agreed business work and communicate with customer representatives: our legitimate interests in performing the agreed job, controlling specifications and maintaining the customer relationship.
To keep records required by tax, accounting or other law and make required disclosures: legal obligation.
To establish, exercise or defend a specific legal claim: our legitimate interests in protecting our legal rights. A documented legal hold may override routine deletion for the relevant material.
To remember and respect your cookie choice: our legitimate interests in operating the website’s privacy controls and recording your preference. The preference cookie is used only for that purpose and is treated as strictly necessary to provide and remember the privacy choice you request.
To run optional GoDaddy traffic measurement: your consent. You can refuse or withdraw this choice without affecting access to the website.

We do not treat a manufacturing enquiry as consent to unrelated marketing.

Cookies and browser storage

The website uses a first-party cookie named gtl_cookie_consent for up to six months to remember whether you accepted analytics or chose necessary storage only. WordPress may use short-lived browser storage to check emoji support. Signed-in administrators receive WordPress authentication cookies. These items support a requested feature, security or the operation of the privacy control.

If you accept analytics, GoDaddy traffic measurement may set _tccl_visit for about 30 minutes, _tccl_visitor for about 12 months and _scc_session for about 20 minutes. These support visit measurement and related telemetry. They are blocked before consent. Choosing necessary storage only removes them, and the Cookie choices button lets you change your decision.

The reviewed public website does not use Google Analytics, Google Tag Manager, Meta Pixel or advertising cookies. The Smush content delivery network serves approved images but did not set browser storage in the anonymous production audit.

Current website forms

The public Request a Quote and Send Your Files workflows are currently closed and do not accept website submissions. Microsoft SharePoint is not receiving public website uploads. Before either workflow is activated, GT Laser will complete its separate security and processor checks and update the collection notice where necessary. The approved live retention period for a future website RFQ record and its uploaded files is 90 days, including failed or incomplete transfers; backups, recycle bins, email and records kept for another lawful purpose can have a different lifecycle.

Who receives information

Authorised GT Laser personnel use information only where needed for their work. GoDaddy supplies the production hosting infrastructure, server and security telemetry, and the current business email entry point. GoDaddy also supplies optional traffic measurement when you consent. WPMU DEV services support Defender website security, Smush image delivery and Snapshot backups. The current Snapshot configuration stores scheduled backups in WPMU DEV cloud storage for up to 50 days. Professional advisers, delivery providers and other suppliers may receive the limited information needed for an agreed job or legal duty.

We do not sell personal information. We do not publish customer artwork, drawings, job files or product photographs merely because they were supplied for an enquiry or order.

International processing

Some suppliers and their subprocessors use infrastructure outside the UK. GoDaddy’s data processing terms apply the UK-US Data Bridge, EU standard contractual clauses and the UK International Data Transfer Agreement as appropriate to the destination and processing. For any other restricted transfer, GT Laser must use an applicable UK adequacy regulation or approved contractual safeguard and complete the required assessment. Contact us for information about the safeguard relevant to your information.

How long we keep information

Cookie choices and optional analytics identifiers expire as described above. WPMU DEV scheduled backups are retained for up to 50 days. Hosting and security logs are kept according to the provider’s service and security retention settings and only while needed to operate the service, investigate an incident or meet a legal requirement.

Direct enquiries, quotations, orders, correspondence and production records are kept for as long as needed to answer the enquiry, perform the agreed work, support legitimate repeat-production needs, meet tax or accounting duties, and deal with a specific complaint or legal claim. We review continuing need and restrict access. A deleted live record may remain in a restricted backup until that backup expires.

Security

We use access controls, WordPress security controls, encrypted HTTPS connections and backups intended to protect the website and business records. No internet transmission or storage system can be guaranteed completely secure. Contact us before sending material that requires special security or contractual handling.

Your right to object

Where we rely on legitimate interests to use your personal information, you have the right to object to that processing. If you object, we will stop the processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims. You can object by emailing office@gtlaser.co.uk.

Your rights

Depending on the processing and circumstances, you may have rights to access, correct, erase or restrict personal information, receive a portable copy, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing.

Email office@gtlaser.co.uk to exercise a right. We may make proportionate identity checks and will explain any lawful exception. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint/.

Automated decisions

GT Laser does not use website enquiries for decisions based solely on automated processing that have legal or similarly significant effects, and does not profile people through the enquiry or order process. Automated security controls may identify and block suspected abuse, but they do not decide whether GT Laser will accept a manufacturing job.

Changes to this policy

We will update this policy when the website or our processing changes and will bring material new uses to people’s attention where required. Last updated: 4 October 2026.