Last updated: 30 October 2026

This privacy notice explains how Cyklop Needham Limited (“we”, “us” or “our”) uses personal information through needhamlaser.com and our related enquiries, sales, sample testing, servicing and marketing. It explains your choices and rights under UK data protection law.

1. Who is responsible for your information?

Cyklop Needham Limited is the controller responsible for the personal information covered by this notice. Needham Laser is a brand of Cyklop Needham Limited. If a different Cyklop company is responsible for a separate transaction or service, we will identify it and provide the relevant privacy information.

For privacy enquiries or to exercise your rights, email info@needhamlaser.com with “Privacy enquiry” in the subject, call 01948 662629, or write to Cyklop Needham Limited, Waymills Industrial Estate, Whitchurch, Shropshire, SY13 1TT, United Kingdom.

This website is intended for business users. We do not knowingly collect personal information from children.

2. Information we collect

• Contact and business details: name, employer, job title, email address, telephone number, business address and delivery address.
• Enquiry and customer records: form submissions, correspondence, meeting and call notes, quotations, demonstrations, sample-marking requirements, equipment, purchases, service records and feedback.
• Application information: information you supply about components, materials, drawings, mark content, production requirements and sample arrangements. Where these contain personal information, this notice applies to that information.
• Transaction information: orders, invoices, payment status and account administration details, depending on your payment arrangements.
• Technical and campaign information: IP address, device and browser information, pages viewed, referring sites, campaign identifiers, UTM parameters, advertising click identifiers and events such as submitting an enquiry.
• Preferences and engagement: consent records, subscriptions, opt-outs and, where tracking is enabled and permitted, email opens, link clicks and identified website visits.

Not all information is collected on every occasion. Please avoid sending sensitive personal information through enquiry forms or sample files unless specifically requested with an explanation of how it will be handled.

3. Where information comes from

We collect information when you contact us, complete a form, request sample testing, attend an exhibition, arrange a demonstration, buy equipment or request service and support. Website technologies also collect technical and usage information, subject to applicable consent requirements.

We may receive business contact information from referrals, distributors, other Cyklop companies and public professional sources such as company websites. When we obtain personal information indirectly, we provide the required privacy information, including its source, normally within one month or at our first communication or disclosure if earlier, unless a legal exception applies.

4. Why we use information and our lawful bases

• Enquiries, quotations, sample tests and demonstrations: legitimate interests in responding to business requests and developing customer relationships. Where you personally are entering a contract, taking steps at your request before entering that contract may apply instead.
• Orders, installation, training, servicing and support: performance of a contract where you personally are a party; otherwise legitimate interests in fulfilling our agreement with your organisation.
• CRM records, enquiry assignment and follow-up: legitimate interests in providing effective sales and customer service.
• Accounting, tax and regulatory requirements: compliance with legal obligations. Establishing or defending legal claims may involve legitimate interests.
• Hosting, security and troubleshooting: legitimate interests in operating and protecting our website and business, and legal obligations where applicable.
• Direct marketing: consent where required; otherwise legitimate interests in promoting relevant business products and services, subject to the rules and choices below.
• Optional analytics, session recording, advertising tracking and linking tracked activity to contacts: consent where required. Advertising cookies and similar device access require consent. Essential service and security functions are treated separately.

Where we rely on legitimate interests, we must balance our interests against your rights and reasonable expectations. You can ask for more information or object. Reading or accepting this privacy notice is not itself consent to marketing or optional tracking.

5. Enquiries, HubSpot and follow-up

Our website uses WordPress hosting and related services. We use HubSpot for forms and customer relationship management. Information you submit may be stored against contact and company records, assigned to the relevant team and used to create opportunities, tasks and follow-up communications.

Where tracking is enabled and the necessary permission has been obtained, website visits and email interactions may be associated with your HubSpot contact record. Identification may occur after a form submission or a visit through a tracked email link. This helps our team understand your interests and respond to relevant enquiries.

Submitting an enquiry allows us to respond and discuss the relevant products, sample testing or services. It does not automatically provide consent to unrelated promotional emails.

6. Marketing and your choices

We may send relevant business marketing to contacts at limited companies and other corporate subscribers where permitted by law, using legitimate interests where appropriate. You can object to direct marketing using your personal information at any time.

For sole traders, certain partnerships and other individual subscribers, promotional emails and texts require consent unless all conditions of the applicable soft opt-in are met. These include obtaining details during a sale or negotiations for a sale, promoting our own similar products or services, and offering an opt-out when collecting details and in every marketing message.

Unsubscribe through a marketing email or contact info@needhamlaser.com. We may retain limited suppression information to respect your choices. Opting out does not prevent necessary order, warranty, service appointment or account communications; these must not be used to bypass a marketing opt-out.

We use HubSpot and Brevo to manage relevant contact lists and communications. Synchronisation between these systems supports our own communications and does not authorise providers to market their own services to you.

7. Cookies, analytics and advertising

Cookies, pixels, tags and similar technologies can operate website features, remember preferences, understand usage and measure campaigns. Strictly necessary technologies support functions such as security and recording privacy choices. Optional analytics and advertising technologies have different purposes and are subject to applicable consent requirements.

Our website and campaigns use services including HubSpot, Google Analytics, Google Ads and OpenAI Ads. Depending on the page configuration and your choices, these services may process device and browser information, IP address, page addresses, campaign or click identifiers, timestamps and enquiry-conversion events. Where contact matching or synchronisation is enabled, contact identifiers may also be shared with the relevant advertising platform to match enquiries to advertising interactions. Hashed identifiers remain personal information.

Hotjar is installed to help understand website use. Where enabled and permitted, its heatmaps and session recordings can collect page interactions such as mouse movements, clicks, scrolling and technical information. Such recordings represent website interactions rather than video from your camera. The information collected depends on the configured recording and masking settings.

Website testing tools may compare page versions and measure interactions to improve usability and conversion. Optional testing or recording technologies that require consent must not operate before that consent has been obtained.

Enquiry handling, promotional emails and advertising tracking are separate choices. We must not treat continued browsing or submitting an enquiry as consent to optional tracking. Advertising cookies and similar technologies require prior consent. Withdrawing consent must stop future consent-based tracking; it does not make earlier lawful processing unlawful.

Use the website’s cookie banner or cookie settings control, where provided, to review and change your choices. You can also contact us if you cannot access the controls or need help withdrawing consent. Browser settings can block or remove cookies, although this may affect features. Blocking cookies alone does not necessarily withdraw other permissions you have given.

Provider information is available from Automattic/WordPress.com, HubSpot, Google, OpenAI, Hotjar and Brevo. Contact us for details of technologies and retention periods relevant to a particular page.

8. Who we share information with

• Website hosting, CRM, email, IT support and security providers, including WordPress.com/Automattic, HubSpot and Brevo.
• Analytics, recording, testing and advertising providers, including Google, Hotjar and OpenAI where their services are used, subject to the applicable choices and lawful bases.
• Delivery, installation, engineering and support partners where needed to fulfil your request or contract.
• Other Cyklop companies where necessary for relevant sales support, administration, IT services or group reporting.
• Professional advisers, insurers, banks, payment providers and authorities where needed for business or legal obligations.
• Parties involved in a proposed or completed business sale or reorganisation, subject to appropriate protections.

Providers acting as processors must handle information under appropriate contractual terms and instructions. Some recipients, including regulators, professional advisers and advertising platforms for their own stated purposes, may act as independent controllers. Roles depend on the activity and applicable terms. We do not sell your personal information or provide it to unrelated businesses for their own direct marketing without your specific consent.

9. International transfers

Some suppliers and Cyklop companies may store, access or process information outside the United Kingdom. A restricted transfer requires a valid mechanism under UK data protection law.

Depending on the recipient and arrangement, this may be UK adequacy regulations; the UK Extension to the EU–US Data Privacy Framework for an eligible recipient with active certification covering the relevant information; or appropriate safeguards such as the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses, with the required transfer assessment. The mechanism must apply to the particular transfer; using a supplier does not automatically establish this.

Contact us for information about destinations and safeguards relevant to your information, including how to obtain a copy of applicable safeguards.

10. How long we keep information

• Enquiries and unsuccessful quotations: while needed to handle the request and a reasonable follow-up period, considering the sales cycle, last meaningful interaction and any continuing business need.
• Customer, equipment and service records: while needed for the relationship, installation, support, servicing, warranties and contractual responsibilities, and afterwards for applicable legal obligations or claims.
• Accounting and transaction records: for applicable statutory accounting and tax periods and any longer period needed for a dispute or investigation.
• Marketing records: while the relevant consent or other lawful basis remains valid and the information remains relevant. An objection or withdrawal ends the corresponding marketing use.
• Suppression and consent records: limited information needed to demonstrate preferences and avoid re-adding someone who opted out.
• Technical, recording, analytics and advertising data: according to technology expiry, configured platform retention and the continuing need for the stated purpose. Periods vary by provider and record type.

We delete or anonymise information when it is no longer needed. You can ask for the retention period or criteria applicable to a particular record.

11. Security

We use appropriate technical and organisational measures to protect personal information and limit access to people and providers who need it for their work. We handle suspected breaches and notify affected people and the regulator where legally required.

12. Your rights

Depending on the circumstances, you can request access, correction, erasure, restriction of processing or a portable copy of information. You can object to processing based on legitimate interests and withdraw consent where we rely on it. Some rights are subject to conditions and exemptions.

Your right to object to direct marketing using your personal information is absolute. Once you object, we must stop that use, including related profiling.

Contact us using the details in section 1. We may need to verify your identity. We normally respond within one month, subject to lawful extensions and other applicable rules. Requests are normally free; a fee or refusal is possible only where the law permits. Legal obligations or claims may require us to retain some information despite an erasure request.

13. Complaints and changes

You can raise a concern with us or complain directly to the Information Commissioner’s Office at ico.org.uk/make-a-complaint/. You do not have to contact us first.

We review this notice when our activities or legal requirements change and bring material changes to your attention where required. The date above identifies this version. Other websites linked from this site have their own privacy notices.