Privacy Policy
Who We Are
Gibbon-Brooks Ltd, trading as F Sharp, is a professional blade sharpening service based in Hailsham, East Sussex. We are registered in England and Wales.
We are the data controller for the personal data collected through our website, contact form, email communications, and service operations.
We are registered with the Information Commissioner's Office (ICO) in accordance with our obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller: Graeme Gibbon-Brooks, Gibbon-Brooks Ltd t/a F Sharp, Hailsham, East Sussex. Email: hello@fsharpblades.co.uk
What Data We Collect
| Category | Data Collected | How Collected |
|---|---|---|
| Identity Data | Name | Contact form, email, telephone |
| Contact Data | Email address, telephone number, collection and delivery address | Contact form, email, booking process |
| Transaction Data | Details of services purchased, payment confirmation records | Shopify Payments at point of purchase |
| Service Data | Details of blades submitted, condition notes, BESS scores, job records | Collection process, workshop records |
| Communications Data | Content of emails and messages sent to us | Email (Google Workspace), contact form |
| Technical Data | IP address, browser type, pages visited, time on site | Shopify analytics, cookies |
We do not collect special category data and we do not knowingly collect data from individuals under the age of 18.
Payment Data
Payment card details are processed directly by Shopify Payments (operated by Stripe Payments Europe Ltd). We do not store or have access to your full card number or CVV. Shopify Payments is PCI DSS compliant.
How We Use Your Data
| Purpose | Data Used |
|---|---|
| Responding to enquiries and booking requests | Identity, Contact, Communications |
| Arranging collection and return of blades | Identity, Contact |
| Performing the sharpening service and maintaining job records | Identity, Contact, Service |
| Processing payment and issuing receipts | Transaction (via Shopify Payments) |
| Maintaining business and financial records | Identity, Contact, Transaction |
| Improving our website and service | Technical (anonymised where possible) |
| Complying with legal obligations | All categories as required |
We do not use your data for automated decision-making, profiling, or unsolicited marketing.
Legal Basis for Processing
| Processing Activity | Lawful Basis |
|---|---|
| Providing the sharpening service | Contract — necessary to perform the contract with you |
| Responding to enquiries | Legitimate interests — responding to direct communications |
| Processing payment | Contract — necessary to complete the transaction |
| Maintaining business and financial records | Legal obligation — required under UK company and tax law |
| Website analytics | Legitimate interests — improving our service |
Who We Share Data With
We do not sell, rent, or trade your personal data. We share data only where necessary to operate the service.
| Third Party | Purpose | Location |
|---|---|---|
| Shopify Inc. | Website platform, order management, payments | USA (adequacy measures in place) |
| Stripe Payments Europe Ltd | Payment processing via Shopify Payments | Ireland / EEA |
| Google LLC (Workspace) | Business email communications | USA (Standard Contractual Clauses in place) |
| FormSubmit | Contact form forwarding to our email | Data forwarded to our email only |
How Long We Keep Your Data
| Data Category | Retention Period | Reason |
|---|---|---|
| Transaction and financial records | 7 years | HMRC requirement |
| Service job records | 3 years | Service quality and dispute resolution |
| Enquiry data (no transaction) | 12 months | Legitimate interest in follow-up |
| Email communications | 3 years | Business records and dispute resolution |
| Website analytics data | Up to 26 months | Shopify default; anonymised where possible |
Your Rights
Under UK GDPR you have the following rights. We will respond to all requests within one calendar month.
To exercise any right: hello@fsharpblades.co.uk
Cookies
Our website uses cookies to support functionality and analytics via the Shopify platform.
| Type | Purpose | Set By |
|---|---|---|
| Essential | Session management, cart, security | Shopify |
| Analytics | Understanding how visitors use the site | Shopify Analytics |
| Preference | Remembering your settings | Shopify |
You can control cookies through your browser settings. See Shopify's Cookie Policy for full detail.
Data Security
We take reasonable technical and organisational measures to protect your personal data. Access is restricted to authorised personnel. Email is conducted via Google Workspace with encryption in transit and at rest. Payments are handled by Shopify Payments (PCI DSS compliant). Our website operates over HTTPS.
In the event of a personal data breach likely to risk your rights and freedoms, we will notify the ICO within 72 hours and affected individuals without undue delay, as required by UK GDPR.
Changes to This Policy
We may update this Privacy Policy from time to time. The effective date at the top of this page will be updated accordingly. For material changes we will take reasonable steps to notify you.
Contact & Complaints
Graeme Gibbon-Brooks
Gibbon-Brooks Ltd t/a F Sharp, Hailsham, East Sussex
Email: hello@fsharpblades.co.uk
Phone: 07523 106496
Right to Complain
If you are not satisfied with how we have handled your data, you may lodge a complaint with the Information Commissioner's Office (ICO).
ICO website: ico.org.uk · ICO helpline: 0303 123 1113
We would appreciate the opportunity to resolve concerns directly before you contact the ICO.