skip to Main Content
01366 500295
Open: Mon to Fri 8.30am - 4.30pm & Sat 9am - 12pm. Closed Bank Holidays


(Janet, Christopher and Paul Stocking)



Privacy Policy


Thomas B. Bonnett is a Hardware Store and Bespoke Ironworks.

This privacy notice explains how we use and store any personal

information we collect about you & how we observe your

privacy rights.


What information do we collect about you?


We only record personal data that is relevant to the service you require from us; so only a name & contact number &/or email address will be needed for things such as:

– ordering you specific non-stock items/contacting you when a product becomes available.

– when you enquire about jobs that the workshop engineers do.

If the service you require includes either delivery or on-site work then we will also ask for your invoice address &/or delivery address.


How will we use & store your information?


Your data will be stored & used in one of three ways:


Initial enquiries or stock orders for collection in store

  • Names, contact numbers & email addresses will be written in a book which is only accessible to those staff who need to process your order.
  • Workshop enquiries are recorded on a ‘current jobs’ sheet, which is passed securely only between those staff who need to process your job. Only a name or reference is displayed for engineers to select current jobs, all personal data is kept securely in a folder/filing cabinet.


When your job requires an invoice

  • Your data will be transferred onto our accounts system – Quickbooks Online (an approved cloud computing system), where it is stored securely and only accessed by those staff who need to process your invoice, and only shared with our accountant at the end of each financial year.
  • Paper copies of our accounts are stored securely and only for as long as we are legally obliged to.


When you require delivery or work carried out on-site

  • Your details will be shared only with engineers who need to come to your address, and printouts will be shredded when no longer required.
  • We occasionally need to share your details with a third party. This would only be if necessary to carry out your job (such as if gate automation was requested, extra ground works are needed for installation to be possible, or we need to use a delivery service for larger items/extra supplies applicable to your job. If a third party is involved, we will always inform you of who this is, in advance if possible, so you have the opportunity to raise any concerns, or ask any questions you have, regarding the sharing of your data.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.


How long do we store your information?


For stock orders and enquiries/job quotes that you do not tell us to go ahead with we shall keep your details for 90 days, after which we shall delete/shred & securely dispose of everything we hold, unless you instruct us otherwise.


For all invoiced jobs we will store information for 6 years from the end of the financial year they were carried out in, as we are required to by law, after which we shall delete/shred & securely dispose of everything we hold, unless you instruct us otherwise.


Your legal rights


You have rights under data protection laws in relation to your personal data.

These include the right to:

  • request access to your personal data
  • request correction of your personal data
  • request erasure of your personal data
  • object to processing of your personal data
  • request restriction of processing your personal data
  • request transfer of your personal data.

If you wish to exercise any of the rights set out above, please contact us.


Website –


We take the privacy of our website visitors and service users very seriously and are committed to the protection and security of personal data from our website visitors and customers.

Our website incorporates privacy controls which affect how we will process your personal data. By using the privacy controls, you can specify whether you would like to receive any direct marketing communications and limit the publication of your information.


We use cookies on our website and will ask you to consent to our use of cookies when you first visit our website where you can opt in and opt out.

We may process information about your use of our website using our analytics tracking system for the purposes of analysing website use. This may include:

  • IP address;
  • geographical location;
  • browser type and version;
  • operating system and referral source;
  • length of visit, page views and website navigation paths;
  • timing, frequency and pattern of your website use.


The lawful basis for this processing is our legitimate interests in monitoring and improving our website and services.

The tracking system we use is Google Analytics and data is never shared with any third party.

We do not use your personal data for any marketing purposes including direct marketing.

You can request a copy of the information we have on you here: Data Access Request

You can request us to delete your information via the contact form on the contact page

Social Media Platforms


  • Communication, engagement and actions taken through external social media platforms that this website and its owners participate on are custom to the terms and conditions as well as the privacy policies held with each social media platform respectively.
  • Users are advised to use social media platforms wisely and communicate / engage upon them with due care and caution in regard to their own privacy and personal details. This website nor its owners will ever ask for personal or sensitive information through social media platforms and encourage users wishing to discuss sensitive details to contact them through primary communication channels such as by telephone or email.
  • This website shows a social share buttons which links directly from our web pages to the social media platform in question i.e. Facebook. Users are advised before using such social sharing buttons that they do so at their own discretion and note that the social media platform may track and save your request to share a web page respectively through your social media platform account and we take no responsibility for external websites. We have a link to their Privacy Policy below should you wish to read that.


Resources and Further Information



How to contact us


Please contact us if you have a question about our privacy policy or information we hold about you


  • By email:
  • Or write to us at: FAO The Data Protection Officer, Thomas B. Bonnett. Lynn Rd, Stoke Ferry, Norfolk. PE33 9SW


You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.


Last updated May 25th 2018