Privacy

Privacy Notice

Last updated: 11 November 2026

Who we are

Hammer and Anvil is a blacksmith and metalwork business at Unit 19, Abercorn Industrial Estate, Abercorn Street, Paisley PA3 4AA. Hammer and Anvil is operated by Douglas Keir. We are responsible for the personal information you send us through this website.

What we collect

When you send an enquiry we receive the details you type in: your name, your email address, the type of project, the town or postcode area of the job and your message, and — only if you choose to give them — your phone number and whether a morning or afternoon call suits you best. If you pressed Enquire next to a particular service, we also receive the name of that service.

If you add photos or sketches, your browser first resizes them and saves them as JPEG images, which also removes hidden information stored in photos, such as where they were taken. Please only attach images you’re happy for us to see, and avoid including people or anything personal you don’t need to share.

We do not use advertising or analytics cookies, and we don’t track you around the web.

Why we use it, and on what basis

• Replying to your enquiry, preparing a quote and, if you go ahead, arranging and carrying out the work. We use your details because you have asked us to (steps taken at your request before entering into a contract), and then to carry out the work we agree with you (performance of a contract).
• Keeping the enquiry form secure and keeping enquiries that don’t lead to work for up to 12 months, so we can pick up the conversation if you get back in touch. This is in our legitimate interests in running a secure website and handling enquiries properly.
• Keeping accounting and tax records for work we carry out. We do this to meet our legal obligations.

We never sell your details or add you to a mailing list.

How your enquiry reaches us

Your enquiry is checked by a small program on our web host, Cloudflare, and sent by Cloudflare’s email service to the workshop’s Gmail inbox. The email contains everything you entered in the form, any images you attached (as email attachments), a reference number and the time it was received.

The website does not keep an archive of enquiries or images. Cloudflare processes them in order to check and deliver them, and the copy we keep is the email in our Gmail inbox.

To stop the same enquiry being sent twice (for example after a double-click), the reference number and a scrambled, one-way fingerprint of the submission are kept for 24 hours and then deleted automatically. They cannot be used to read your enquiry.

To stop spam, the form uses Cloudflare Turnstile, which checks that a real person is sending it. To block repeated automated submissions, a scrambled (one-way hashed) version of your IP address is kept for no more than 20 minutes and then deleted automatically. It is not used for anything else.

Services we use

• Cloudflare hosts the website, runs the spam check and delivers enquiry emails.
• Google (Gmail) provides our email inbox, where your enquiry and any images you attached are kept as described below.
• Google Maps. The map on the Contact page only loads if you press “Show map”; Google may then set its own cookies. The directions links open Google Maps on Google’s own site.

Processing outside the UK

Cloudflare and Google run services from data centres in many countries, including the United States, so your information may be processed outside the UK.

• Cloudflare states that, for transfers from the UK, it relies on the UK Extension to the EU-U.S. Data Privacy Framework and on standard contractual clauses with the UK Addendum (Cloudflare’s GDPR information).
• Google states that, for UK data, it relies on UK adequacy regulations, the UK Extension to the EU-U.S. Data Privacy Framework and, where needed, standard contractual clauses (Google’s data transfer frameworks).

How long we keep it

We review unsuccessful enquiries monthly and delete those whose last meaningful contact was more than 12 months ago, or sooner where they are no longer needed.

If your enquiry leads to a job, we keep the enquiry and related details for as long as we need them to carry out the work and deal with any follow-up, and keep the accounting and tax records the law requires for the period it requires.

The duplicate-protection record described above is deleted automatically after 24 hours.

Your rights

Depending on the circumstances, you have the right to ask for a copy of the information we hold about you, to ask us to correct it or delete it, to ask us to restrict or stop using it, and in some cases to receive it in a portable format. Some of these rights only apply in certain situations; for example, the right to object applies where we rely on our legitimate interests.

To make a request, send a message through the contact form saying what you’d like. If you’re unhappy with how we’ve handled your information you can complain to the Information Commissioner’s Office.