Last updated: March 2026
1. Who We Are
Trident Canvas is a marine canvas and upholstery business based at Mercury Yacht Harbour, Satchell Lane, Hamble-le-Rice, Southampton SO31 4HQ. We are the data controller for the personal data you provide to us.
If you have any questions about this policy or how we handle your data, you can contact us at:
- Email: [email protected]
- Phone: 023 8104 4000
- Post: Trident Canvas, Mercury Yacht Harbour, Satchell Lane, Hamble-le-Rice, Southampton SO31 4HQ
2. What Data We Collect
We may collect and process the following personal data:
- Your name and contact details (email address, phone number, postal address) when you enquire about our services, request a consultation or submit the contact form on our website
- Details about your vessel (boat type, name, marina location) relevant to providing our services
- Correspondence and communications between us
- Technical data such as your IP address, browser type and operating system when you visit our website (collected automatically via server logs and cookies)
3. How We Use Your Data
We use your personal data for the following purposes:
- To respond to your enquiries and provide quotations
- To carry out and manage the services you have requested
- To communicate with you about your project, including progress updates and appointment scheduling
- To maintain our business records and accounts
- To improve our website and services
4. Lawful Basis for Processing
Under the UK General Data Protection Regulation (UK GDPR), we rely on the following lawful bases to process your personal data:
- Contract: Processing is necessary for the performance of a contract with you, or to take steps at your request before entering into a contract (e.g. providing a quotation)
- Legitimate interests: Processing is necessary for our legitimate business interests, such as responding to enquiries, maintaining customer records and improving our services, where these interests do not override your rights
- Consent: Where you have given us specific consent, for example by submitting our contact form. You may withdraw consent at any time by contacting us
- Legal obligation: Where we are required to process data to comply with a legal obligation, such as tax and accounting requirements
5. Contact Form
Our website contact form is processed through Formspree, a third-party form handling service. When you submit the form, your data is transmitted to Formspree and forwarded to us by email. Formspree processes data in accordance with their own privacy policy. We do not store your form data on our website server.
6. Cookies
Our website uses only essential cookies required for the basic functioning of the site. We do not use advertising cookies or third-party tracking cookies.
Where our website embeds third-party content (such as Google Maps), those services may set their own cookies. Please refer to the respective providers' cookie policies for further information.
7. Who We Share Your Data With
We do not sell, trade or rent your personal data to third parties. We may share your data with:
- Our hosting provider (Hostinger) for website operation
- Formspree for processing contact form submissions
- Our accounting software provider (FreeAgent) for invoicing and financial records
- HM Revenue & Customs or other authorities where required by law
All third-party providers we use are required to handle your data securely and in accordance with applicable data protection legislation.
8. How Long We Keep Your Data
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Enquiry data: Deleted within 12 months if no contract is entered into
- Customer project data: Retained for the duration of the project plus 6 years to comply with tax and legal requirements
- Financial records: Retained for 6 years as required by HMRC
9. Your Rights
Under the UK GDPR, you have the following rights in relation to your personal data:
- Right of access: You can request a copy of the personal data we hold about you
- Right to rectification: You can ask us to correct any inaccurate or incomplete data
- Right to erasure: You can ask us to delete your personal data where there is no compelling reason for us to continue processing it
- Right to restrict processing: You can ask us to limit how we use your data
- Right to data portability: You can request that we transfer your data to another organisation in a structured, commonly used format
- Right to object: You can object to our processing of your data where we are relying on legitimate interests
To exercise any of these rights, please contact us using the details in Section 1. We will respond to your request within one month.
10. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or damage. This includes secure email, password-protected systems and limiting access to your data to those who need it to carry out their work.
11. Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
We would appreciate the opportunity to address your concerns before you contact the ICO, so please get in touch with us first.
12. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.