Legal
Privacy policy
Last updated: 7 October 2026.
Who controls your data
DXF Manufacturing Limited, trading as DXF Machinery, operates dxfmachinery.com and dxfmachinery.co.uk. It is the controller for enquiries, visit requests and dealer applications submitted through this website, including requests from the European Economic Area. DXF Manufacturing Limited is registered in England and Wales under company number 12455731. The registered office is Heywood Wharf, Mucklow Hill, Halesowen, West Midlands, England, B62 8DJ.
Enquiries and visits
This website does not take payments or online purchases. We use the details you submit to respond, confirm a visit, prepare a quotation or review a dealer application. The form sends the message to DXF. It does not email a dealer, look up a dealer, or send a shorter copy. A dealer application is reviewed by DXF. It is not passed to an existing dealer as a sales enquiry, and sending it does not appoint the applicant. Form messages are delivered through Brevo to the sales team.
Authorised dealers
Mantech UK Ltd is the authorised dealer for the United Kingdom. This notice does not publish a company number, registered office or privacy-policy address for Mantech UK Ltd. The website does not email Mantech UK Ltd.
If a member of DXF staff later refers an enquiry, they email only the contact details, the enquiry information and any location you provided that are needed to respond. They do not forward unrelated email history or attachments. The referral is to answer the enquiry and progress a possible sale. It does not authorise unrelated marketing.
Where Mantech UK Ltd handles the enquiry and any sale as its own business, it is an independent controller and provides its own privacy notice. DXF Manufacturing Limited remains responsible for collecting the enquiry and for disclosing it. Mantech UK Ltd’s privacy notice does not replace this one. DXF’s copy follows DXF’s schedule. Mantech UK Ltd sets and explains the period for its own records. Mantech UK Ltd should give you its privacy information at its first communication, and no later than one month after receiving the information, unless a valid exception applies.
If a dealer is later appointed for another area, we will tell you which company received your enquiry once that company has been selected. Enquiries are not sent to a separate Polish company.
Lawful basis
We use legitimate interests to handle the enquiry, visit request or dealer application you send, and for a later email from a member of staff to the authorised dealer for your area. The interest is answering that request. Where a dealer covers the area, the interest is letting that dealer respond to it.
The form is not a contract with you. If you send an enquiry for a business and you are not the person who would sign a purchase, we do not treat the form as a contract with you. You can object by emailing sales@dxfmachinery.com. An objection stops a referral that has not yet been sent. The form is not used for unrelated marketing.
Website measurement
This website does not send page views, form use, or phone and email clicks to a collection service. Allowing analytics in the cookie settings does not start that collection. No Google Analytics or Google Tag Manager container is loaded.
Security checks
The form worker reads the connection address to check Cloudflare Turnstile and stores a hash of that address for one minute to limit repeated submissions. The sales message does not include the address. Cloudflare can still receive the connection as the host of the request. The Turnstile check runs from challenges.cloudflare.com. On this website it does not set a cookie and it does not write to this website’s browser storage. The check result is placed in the form field cf-turnstile-response and is sent with the form.
Suppliers and transfers
Cloudflare hosts this website and runs the form security check. Where personal information is transferred to Cloudflare in the United States, that transfer uses Cloudflare’s certification under the UK Extension to the EU-US Data Privacy Framework. Cloudflare’s processing terms also provide UK contractual clauses if that certification is not available. That safeguard applies to the transfer to Cloudflare in the United States. A transfer to another country needs its own safeguard.
Brevo sends the form message to the DXF sales recipients. Brevo is established in the European Economic Area, and that delivery uses the UK adequacy regulations for the EEA. Brevo may use providers in the United States and India. Onward transfers to those countries use Brevo’s processing terms. They are separate from the EEA adequacy regulations.
A dealer’s address does not show where Cloudflare or Brevo process information. The sales mailbox receives the message after Brevo delivers it.
Your rights
Depending on applicable law, you may request access, correction, deletion, restriction or portability, or object to processing. The privacy inbox is sales@dxfmachinery.com. People in the European Economic Area use the same address.
Retention
Accounting and tax records follow the statutory retention period. An enquiry, visit request, dealer application or ordinary email is not kept for that period by default. A message that only repeats the same enquiry does not extend the period. A reply that continues the discussion can. A record kept for a dispute, incident or legal obligation is kept for that reason and reviewed.
Brevo keeps the send log for every sender for one month and then deletes it. Brevo does not keep a preview of the message. The copy in the DXF sales mailbox is kept for 12 months after the last substantive message.