Your information

Privacy policy

Last updated: 25 October 2026

Who we are

Robert Duma trading as Signmasta is responsible for the personal information described in this notice. Our address is 555 High Street, Sandyford, Stoke-on-Trent, ST6 5PB, United Kingdom. For privacy questions or requests, email signmasta@gmail.com or call 07999 140775.

Information we use

When you contact us, request a quote or place an order, we use the information you provide: your name, business name, contact and delivery details, messages, project specifications, artwork, photographs, approvals and order or invoice details. Artwork and photographs may contain personal information. Please share only information needed for your project and make sure you are entitled to provide it.

This website directs enquiries to email, telephone or WhatsApp. It does not provide a Signmasta customer login or take card details through an online checkout. Our hosting services process technical information such as IP addresses, request times and browser details to deliver and protect the website.

Why we use information and our lawful bases

• Enquiries, quotes and orders: to respond to your request, prepare artwork, supply products and communicate about your order. Where you are our customer, this is necessary to take steps at your request before a contract or perform our contract with you. When dealing with someone on behalf of a business, we rely on our legitimate interests in managing that business relationship.
• Business administration and repeat work: our legitimate interests in maintaining appropriate customer records, retrieving artwork for repeat orders and resolving queries or disputes. We balance these needs against your rights and minimise the information retained.
• Tax and accounting: to comply with legal obligations.
• Website delivery and security: our legitimate interests in running a reliable, secure website and preventing misuse.
• Optional embedded content: your consent before loading Google Maps or our Elfsight customer reviews widget. You can withdraw this through Cookie settings.

An enquiry does not automatically subscribe you to promotional emails. If we ask for consent for a separate use, we explain that use when we ask. You can withdraw consent without affecting the lawfulness of processing before withdrawal.

Who may receive information

Information may be handled by providers supporting our email, communications, website hosting and business administration, and by professional advisers or authorities when necessary. Where a job requires a production or delivery supplier, we share only the details needed to fulfil it.

If you ask us to help arrange installation, we may share relevant contact and job details with TOM’s Building. It is an independent business and is responsible for information you provide directly to it. We do not send your details to it simply because you browse this website.

This version of our website is hosted through OpenAI Sites and its hosting infrastructure. Email is handled through Gmail. WhatsApp, Facebook and Instagram links take you to services operated by Meta. Google Maps and Elfsight reviews are optional embeds, controlled through our cookie settings. These providers have their own privacy notices: OpenAI, Google, WhatsApp and Elfsight.

International processing

Some service providers operate internationally and may process information outside the UK. UK data protection rules require appropriate protection for restricted transfers, such as an applicable adequacy decision or approved contractual safeguards. Contact us if you would like information about the providers and safeguards relevant to your enquiry or order.

How long we keep information

• Enquiries that do not become orders: normally 12 months after our last substantive contact.
• Customer artwork and associated production files: normally 5 years after the last order. We review any longer retention where the artwork is still needed for repeat work, and remove personal information that is no longer necessary.
• Tax and accounting records: for the statutory period. For self-employed records this is normally at least 5 years after the relevant 31 January tax-return submission deadline, with longer retention where another legal requirement or HMRC enquiry applies.
• Other order correspondence: while needed to deliver the job and deal with aftercare, queries or legal claims. Relevant evidence may be kept longer for an unresolved dispute; this does not justify retaining unrelated files.
• Cookie choices: 180 days on your device, unless you clear them sooner.

These periods guide our reviews rather than guaranteeing deletion on an exact day. We delete or anonymise personal information when it is no longer needed. Hosting and third-party service records are also subject to those providers’ retention arrangements.

Your rights

Depending on the circumstances, you can request access to your personal information, correction, deletion, restriction of use or a portable copy. You can object to processing based on legitimate interests and to direct marketing. These rights are not absolute; for example, we may need to retain tax records. Contact us using the details above. We normally respond within one month; we may need to verify your identity, and the law allows extra time in some cases.

You can raise concerns with us and complain to the Information Commissioner’s Office (ICO), the UK data protection regulator.

Cookies and other websites

Read our cookie policy for details of device storage and optional embeds. External websites operate under their own policies. We update this notice when relevant practices change and show the revision date above.