Privacy Policy.

EnerTherm Engineering Ltd ("we", "us", "our") is a UK-registered engineering consultancy specialising in industrial thermal solutions, energy auditing, and process optimisation. Registered Address: 9 Commerce Road, Lynch Wood, Peterborough, PE2 6LR, United Kingdom Office Address: Allia Future Business Centre, London Road, Peterborough PE2 8AN, United Kingdom Email: info@enertherm-engineering.com Phone: +44 (0) 1733 666 701 For any questions regarding this policy or your personal data, please contact our Data Protection Officer at the above email address.

We collect personal information when you interact with our website and services. This may include: Contact Information — name, email address, phone number, company name, and job title when you submit enquiry forms, request quotations, or register for our client portal. Newsletter & Marketing — email address when you subscribe to our newsletter or marketing communications. Website Usage — IP address, browser type, operating system, pages visited, time spent on pages, and referral sources through analytics tools. Client Portal — account credentials (email and encrypted password), uploaded documents, and activity logs when you use our secure engineering document library. Email Engagement — when you receive our marketing emails, we may collect open/click data, approximate geographic location (country/city level from IP), and email client information to improve our communications. Cookies — small text files stored on your device to enhance your browsing experience and provide analytics. See Section 8 for full details.

We use your personal data for the following purposes: Service Delivery — to respond to enquiries, provide quotations, fulfil contracts, and deliver engineering services. Communication — to send project updates, technical documentation, and respond to your questions. Marketing — to send newsletters and marketing emails where you have given consent. You can unsubscribe at any time via the link in every email. Website Improvement — to analyse site usage patterns, improve content and navigation, and ensure our website functions correctly. Security — to protect our systems, prevent fraud, and maintain the security of our client portal and services. Legal Compliance — to meet our obligations under applicable laws and regulations.

Under the General Data Protection Regulation (GDPR), we process your data on the following legal bases: Consent — for marketing communications and newsletter subscriptions. You may withdraw consent at any time. Legitimate Interest — for website analytics, service improvement, and business development where your rights are not overridden. Contractual Necessity — to fulfil our obligations where we have a contract or pre-contractual relationship with you. Legal Obligation — where required to comply with UK law or regulatory requirements.

We will not sell or rent your personal information to third parties. We will not share your information with third parties for their own marketing purposes. We may share data with: Service Providers — trusted third-party services that help us operate our website and deliver services, including email delivery (Resend), web hosting, and analytics providers. These providers process data on our behalf under strict contractual obligations. Legal Requirements — where required by law, regulation, or legal process, or to protect the rights, property, or safety of our company, clients, or others. Business Transfers — in the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction.

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it, including: - HTTPS encryption across our entire website - Encrypted password storage using industry-standard hashing - Secure, access-controlled client portal with session management - Regular security reviews of our systems and processes While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to following best practices.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected: Enquiry & Contact Data — retained for up to 3 years after your last interaction with us, unless an ongoing business relationship exists. Client Portal Accounts — retained for the duration of the business relationship and up to 2 years after account inactivity. Marketing & Newsletter — retained until you unsubscribe or request removal. Website Analytics — aggregated analytics data is retained indefinitely; individual IP-level data is retained for up to 26 months. Email Engagement Data — retained for the duration of the associated marketing campaign plus 12 months.

Our website uses cookies and similar technologies: Essential Cookies — required for the website to function correctly, including session management and security tokens. Analytics Cookies — we use Google Analytics to understand how visitors use our website. This collects anonymised data about pages visited, time on site, and navigation patterns. No personally identifiable information is collected through analytics. Security Cookies — Cloudflare Turnstile is used on our forms to prevent spam and abuse. This may set cookies to verify legitimate visitors. You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.

Under the GDPR and UK data protection law, you have the following rights: Right of Access — request a copy of the personal data we hold about you. Right to Rectification — request correction of inaccurate or incomplete data. Right to Erasure — request deletion of your personal data where there is no compelling reason for continued processing. Right to Restrict Processing — request that we limit how we use your data. Right to Data Portability — request your data in a structured, machine-readable format. Right to Object — object to processing based on legitimate interests or for direct marketing purposes. Right to Withdraw Consent — where processing is based on consent, you may withdraw it at any time. To exercise any of these rights, please contact us at info@enertherm-engineering.com. We will respond to your request within one month.

Your information may be transferred to and processed in countries outside the United Kingdom where our service providers operate. Where this occurs, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of every website you visit.

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be posted on this page with a revised effective date. We encourage you to review this page periodically.

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): Website: https://ico.org.uk Phone: 0303 123 1113 We would appreciate the opportunity to address your concerns directly before you contact the ICO — please reach out to us at info@enertherm-engineering.com.