Privacy Policy

Last updated: 6th March 2026

Who we are

This website is operated by Crux Wheels Ltd, trading as Core Mechanical Design. We are registered in Wales (Company No: 12732033). Our registered office is Pump House, Sigingstone, Cowbridge, Wales, CF71 7LP.

Our website address is: https://coremech.design

If you have any questions about this privacy policy or how we handle your personal data, you can contact us at:

Email: [email protected]
Telephone: +44 (0)330 0430601

What data we collect and why

We collect personal data in the following ways:

Contact form enquiries

When you submit an enquiry through our contact form (powered by WPForms), we collect your name, company name, and email address. We use this information to respond to your enquiry and to discuss potential projects with you. The legal basis for this processing is our legitimate interest in responding to business enquiries directed to us.

Free project consultation bookings

When you book a free project consultation through our website, you are directed to Google Calendar. Any data you provide during the booking process is handled by Google in accordance with their own privacy policy. We use the information you provide solely to arrange and conduct your consultation.

Blog comments

If you leave a comment on our blog, we collect the data shown in the comment form, along with your IP address and browser user agent string. Your IP address and browser information are collected to help with spam detection.

If you leave a comment, the comment and its associated data are retained indefinitely so that we can recognise and approve follow-up comments automatically.

An anonymised version of your email address (known as a hash) may be provided to the Gravatar service to check whether you use it. If your comment is approved, your Gravatar profile picture will be visible to the public alongside your comment. The Gravatar service privacy policy is available at: https://automattic.com/privacy/

Cookies

Our website uses cookies. These are small text files stored on your device that help the site function correctly and allow us to understand how visitors use the site.

Essential cookies: We use cookies that are necessary for the website to function, including session cookies set by WordPress and security cookies set by our Wordfence security plugin. These do not require your consent as they are essential to the operation of the site.

Comment cookies: If you leave a comment on our blog, you may opt in to saving your name, email address, and website in cookies. These are for your convenience so that you do not have to re-enter your details when leaving further comments. These cookies last for one year.

Cloudflare cookies: Our website is served through Cloudflare, which may set cookies for security and performance purposes. For more information, see Cloudflare’s privacy policy at: https://www.cloudflare.com/privacypolicy/

Google reCAPTCHA: Our contact form uses Google reCAPTCHA v2 to prevent spam submissions. This service may set cookies and collect data including your IP address and browsing behaviour. This data is processed by Google in accordance with their privacy policy at: https://policies.google.com/privacy

Third-party services

Our website uses the following third-party services that may collect data:

Google Fonts: We load fonts from Google’s servers, which means Google may receive your IP address when you visit our site. See Google’s privacy policy for details.
Google Calendar: Used for booking project consultations. Data entered is processed by Google.
Cloudflare: Provides security and performance services for our website. Cloudflare may process your IP address and other connection data.
Wordfence: Provides website security. Wordfence may log IP addresses and other connection data to protect the site from malicious activity.

Embedded content from other websites

Pages on this site may include embedded content (such as videos or other media). Embedded content from other websites behaves in the same way as if you had visited that website directly. These third-party websites may collect data about you, use cookies, embed additional tracking, and monitor your interaction with the embedded content.

How long we retain your data

Contact form submissions are retained for as long as necessary to deal with your enquiry and any resulting business relationship. Blog comments and their associated data are retained indefinitely, as described above.

We review retained data periodically and delete data that is no longer needed.

Your rights

Under UK data protection law, you have the following rights regarding your personal data:

Right of access – You can request a copy of the personal data we hold about you.
Right to rectification – You can ask us to correct any inaccurate or incomplete data.
Right to erasure – You can ask us to delete your personal data in certain circumstances.
Right to restrict processing – You can ask us to limit how we use your data.
Right to data portability – You can request that we provide your data in a structured, commonly used, machine-readable format.
Right to object – You can object to our processing of your data where we rely on legitimate interest as our legal basis.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.

Where your data is sent

Data submitted through our contact form is stored on our web server. Blog comments may be checked through an automated spam detection service. Some third-party services described above (such as Google and Cloudflare) may transfer data outside the UK. These providers maintain appropriate safeguards for international data transfers.

How we protect your data

We take reasonable measures to protect your personal data, including the use of SSL encryption across our website, security monitoring through Wordfence, and access controls to limit who can view personal data.

Complaints

If you believe we have not handled your personal data properly, we would appreciate the chance to address your concerns. Please contact us at [email protected] in the first instance.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Website: https://ico.org.uk
Telephone: 0303 123 1113

Changes to this policy

We keep this privacy policy under regular review. Any updates will be published on this page. We encourage you to check this page periodically.

Privacy Policy – Core Mechanical Design