Privacy & Cookies

1. Information we use

We receive the contact, billing and delivery information you provide, such as your name, email, telephone, address, company and VAT details. We also handle messages, drawings and attachments, part specifications, quantities, order revisions, order records and payment references. Files and filenames may contain personal or confidential information; include only what is needed for the job.

Our website and infrastructure process technical information such as IP addresses, request times, browser information and security logs. Order drafts and files can also be saved locally in your browser so you can continue later. A local draft is not the same as a submitted request.

2. Purposes and legal bases

We use your enquiry, files and order details to prepare an order at your request and perform a contract with you (GDPR Article 6(1)(b)). If you act for a business, our legitimate interest in handling that business relationship supports processing your professional contact details (Article 6(1)(f)). Required fields are needed to prepare or fulfil the request; without them we may be unable to proceed.

We keep invoices and other required records, and verify tax treatment where necessary, to comply with legal obligations (Article 6(1)(c)). EU business VAT checks may send the VAT identifier to the European Commission’s VIES service and relevant tax administrations.

Our legitimate interests support proportionate security, abuse prevention, troubleshooting, evaluating our service and the establishment or defence of legal claims (Article 6(1)(f)). We consider the effect on your rights and limit processing to what is necessary. We do not use advertising trackers or create visitor profiles.

3. Aggregate website statistics

We count successful requests for a small set of public pages. Each request increments a daily total for that page and, where available, country. When a quote step is displayed, the browser also sends its number to count daily totals by country, retained for up to 400 days. This message contains no drawing files or contact details.

If Cloudflare proxying and country information are enabled, Cloudflare derives an approximate country from the network IP address and supplies a country code with the page request.

4. Who receives information

Access is limited to people who need the information for their work and providers needed to run the service: hosting and storage, email delivery, IT support, payment banks, accounting advisers, delivery carriers and manufacturing partners where needed for your order. They receive only the information needed for their role. Authorities may receive information where law requires it. We do not sell personal data or give customer designs to advertisers.

5. Processing outside the EEA

Some infrastructure providers may process data outside the European Economic Area, including in the United States. Where required, a transfer must rely on a valid adequacy decision covering the recipient or appropriate safeguards such as the European Commission’s Standard Contractual Clauses, with additional measures where necessary. Contact us for details or a copy of the applicable safeguards.

6. How long we keep information

Enquiries and unpaid orders, including their files, are eligible for deletion 12 months after the latest customer or staff activity or order expiry, whichever is later. Production drawings and stored geometry for paid orders are eligible for deletion 24 months after fulfilment completion.

Bookkeeping evidence is kept for at least 11 years from the end of the relevant financial year; fiscalised e-invoice originals for six years after the issue year ends. Written consumer complaints are kept for at least one year from receipt. A documented legal claim or other lawful retention requirement may delay deletion. Deleted database information may remain in automated backups for up to seven days. If a backup is restored, required deletions are reapplied.

Aggregate page counters cover a rolling 400-day period.

Technical error and security logs are retained for as long as necessary to investigate errors or security incidents or meet a legal obligation.

7. Your rights

Subject to the conditions in data-protection law, you may request access, correction, deletion, restriction or portability of your personal data. You may object to processing based on legitimate interests and withdraw consent at any time. We may need proportionate information to verify your identity; we will not routinely ask for a copy of your identity document.

Contact us using the privacy contact details on this page. We normally respond within one month. If a lawful extension is necessary, we explain it within that month. Some records must remain where law requires retention or where needed for legal claims.

You may complain to the Croatian Personal Data Protection Agency (AZOP), at azop.hr, or to the supervisory authority in the EEA country where you live, work or believe a breach occurred. You do not have to contact us first.

8. Automated quoting and security

Software analyses drawings and calculates estimates using geometry, material, quantity, delivery and tax information. Our team reviews every request before a price becomes payable. You can ask us to explain or review a calculation. This is not advertising or credit profiling.

We use access controls and other appropriate safeguards for customer information. Your private order link grants access to its contents; keep it confidential. Do not send sensitive personal information that is unrelated to your part or order.

Cookie Policy

We use browser storage for security, forms and your saved order draft. We do not use advertising or analytics cookies. Our aggregate page counters do not read or write browser storage.

1. Necessary cookies

The session cookie (_alpnox_first_stage_session) supports security and session state for up to eight hours in production. The alpnox_language cookie remembers your language for up to one year. These are first-party functional cookies, not analytics cookies.

2. Saved order drafts and files

The order form uses IndexedDB to save one draft, including the files and details you enter, on your own device. This lets you continue after leaving the page. Temporary file transfer between the homepage and order form also uses browser storage. A saved draft is not a submitted request.

A submitted draft can remain on your device so you can return to it. It is cleared when its order is paid, declined or rejected, unless a newer draft has replaced it. You can clear it yourself, and your browser may remove site data. Take care on shared devices.

Saved drafts do not expire automatically. Temporary file transfers expire after one hour. Expired files are removed on the next access.

3. Controlling browser storage

You can use your browser settings to remove or block cookies and site storage. Removing all site data may sign you out or delete your saved order and local drawings. Blocking necessary storage may prevent forms, sign-in or draft recovery from working.