DFS Composites Limited (“DFS”, “we”, “us” or “our”) is the controller of the personal data described in this policy. It explains how we use personal data when you visit dfscomposites.com, contact us, request or download a portfolio, apply for a role through Odoo Recruitment, or communicate with us as a customer, prospect, supplier or business partner.
DFS Composites Limited | Company no. 09863604 | Unit 15 Faraday Business Park, Spitfire Way, Lee-on-the-Solent, Hampshire, PO13 9GW, United Kingdom | info@dfscomposites.com | www.dfscomposites.com
We process personal data under the UK GDPR, the Data Protection Act 2018 and, where relevant, PECR and the EU GDPR
Depending on how you interact with us, we may collect:
Please do not include special category data (for example health, ethnicity or religious information) or criminal-offence data unless it is relevant and requested. If recruitment or legal requirements make such processing necessary, we will use an additional lawful condition and appropriate safeguards.
We collect information directly from you through forms, applications, email, telephone and other business communications; automatically through our website, cookies and analytics tools; and, where appropriate, from recruitment agencies, referees, affiliated companies, service providers, public registers or other lawful public sources. If you provide another person’s details, you should ensure that you are authorised to do so.
Our website may use strictly necessary cookies for core functionality, security and consent management, and optional analytics or functional cookies. Non-essential cookies, including Google Analytics 4 cookies, are used only after valid consent. You can accept, reject or change your choices through the cookie banner or cookie settings and can also remove or block cookies in your browser. Withdrawal does not affect earlier lawful processing. Blocking essential cookies may affect website operation.
Google Analytics 4 helps us measure traffic and interactions, such as pages viewed, session activity, referral source, downloads, device/browser information and IP-derived approximate location. Google may process this information outside the UK. Please see our separate Cookie Policy for the current cookie names, providers, purposes and durations.
We may send proportionate business-to-business communications about relevant DFS products or services where permitted by law. Where consent is required, it will be optional and separate from a portfolio request. Every marketing message will provide an unsubscribe method. We may keep a minimal suppression record so that we continue to respect your opt-out.
We do not sell personal data. We may share it only where necessary with:
Service providers acting for us are subject to appropriate contractual, confidentiality and security requirements. Some recipients may act as separate controllers under their own privacy notices.
Because DFS operates internationally and uses global service providers, personal data may be accessed or processed outside the United Kingdom, including through affiliated operations, Odoo or Google. Where a restricted transfer is made, we use a lawful mechanism such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or another permitted safeguard or exception. We also assess and apply supplementary protections where appropriate. You may contact us for further information about relevant safeguards.
These periods may be shortened or extended according to the purpose, sensitivity, legal requirements, disputes or claims. When data is no longer required, we securely delete, anonymise or dispose of it.
DFS Composites uses appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, misuse, alteration, disclosure or unauthorised access. These measures may include encryption in transit, access controls, role-based permissions, multi-factor authentication where appropriate, secure backups, monitoring, vulnerability management, staff confidentiality obligations and supplier due diligence.
DFS Composites also holds Cyber Essentials certification, demonstrating that recognised cybersecurity controls are in place to help protect its systems and information against common cyber threats.
Although no system can be guaranteed to be completely secure, we regularly review our security measures, investigate suspected incidents and notify the ICO and affected individuals where required by law.
Depending on the circumstances and applicable law, you may have the right to:
These rights are not absolute and exemptions may apply. To exercise a right, email info@dfscomposites.com. We may ask for information to verify your identity and will respond within the period required by law, normally one month.
If you have any concerns about how DFS Composites collects, uses or protects your personal data, please contact us so that we can investigate and try to resolve the matter.
Privacy concerns and complaints may be submitted at any time through our published email address or website contact forms. These channels are available for submissions at all times, although enquiries are reviewed and responded to during our normal business hours.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk/make-a-complaint or telephone 0303 123 1113. If the EU GDPR applies, you may also contact the relevant supervisory authority in the EEA country where you live or work, or where the issue occurred.
Our website and services are intended for business users and are not directed at children. We do not knowingly collect children’s data through the activities described in this policy. We do not make solely automated decisions that produce legal or similarly significant effects in the processing covered by this policy. If this changes, we will provide the information required by law.
We may update this policy to reflect changes in law, our services, website functionality or how we process personal data. The latest version will be published on our website with its effective date. Material changes will be highlighted or communicated where appropriate.
Questions, rights requests and privacy concerns should be sent to:
DFS Composites Limited
Unit 15 Faraday Business Park
Spitfire Way
Lee-on-the-Solent
Hampshire, PO13 9GW
United Kingdom
Email: info@dfscomposites.com
This policy should be read with our Cookie Policy and any specific privacy information provided at the point where data is collected.