Privacy Policy.

EnerTherm Engineering Ltd ("we", "us", "our") is a company registered in England and Wales, operating as an engineering consultancy specialising in industrial thermal solutions, energy auditing, and process optimisation. Registered Address: 9 Commerce Road, Lynch Wood, Peterborough, PE2 6LR, United Kingdom Office Address: Allia Future Business Centre, London Road, Peterborough PE2 8AN, United Kingdom Company Registration Number: 08817927 Email: info@enertherm-engineering.com Phone: +44 (0) 1733 666 701 We are the data controller for the personal data described in this policy. We are registered with the Information Commissioner's Office (ICO) as a data controller under registration number ZB115812, and pay the annual data protection fee required by the Data Protection (Charges and Information) Regulations 2018. We are not required to appoint a statutory Data Protection Officer. For any question about this policy or your personal data, contact us at the email address above and it will reach the person responsible for data protection.

We collect personal information when you interact with our website and services. This may include: Contact Information — name, email address, phone number, company name, and job title when you submit enquiry forms, request quotations, or register for our client portal. Newsletter & Marketing — email address when you subscribe to our newsletter or marketing communications. Website Usage — IP address, browser type, operating system, pages visited, time spent on pages, and referral sources through analytics tools. Client Portal — account credentials (email and encrypted password), uploaded documents, and activity logs when you use our secure engineering document library. Email Engagement — when you receive our marketing emails, we may collect open/click data, approximate geographic location (country/city level from IP), and email client information to improve our communications. Cookies — small text files stored on your device to enhance your browsing experience and provide analytics. See Section 8 for full details.

We use your personal data for the following purposes: Service Delivery — to respond to enquiries, provide quotations, fulfil contracts, and deliver engineering services. Communication — to send project updates, technical documentation, and respond to your questions. Marketing — to send newsletters and marketing emails where you have given consent. You can unsubscribe at any time via the link in every email. Website Improvement — to analyse site usage patterns, improve content and navigation, and ensure our website functions correctly. Security — to protect our systems, prevent fraud, and maintain the security of our client portal and services. Legal Compliance — to meet our obligations under applicable laws and regulations.

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we process your data on the following legal bases: Contractual Necessity (Article 6(1)(b)) — when you submit an enquiry, quotation request, or calculator request, we process your details to respond and to take steps at your request prior to entering into a contract. We do not ask for your consent for this, because consent is not the applicable basis. Legitimate Interest (Article 6(1)(f)) — for website analytics, service improvement, security, and business development, where our interests are not overridden by your rights and freedoms. Consent (Article 6(1)(a)) — for marketing communications and newsletter subscriptions only. Consent is given by a clear affirmative action, never by a pre-ticked box, and you may withdraw it at any time. Legal Obligation (Article 6(1)(c)) — where required to comply with UK law or regulatory requirements.

We will not sell or rent your personal information to third parties. We will not share your information with third parties for their own marketing purposes. We may share data with: Service Providers — trusted third-party services that help us operate our website and deliver services, including email delivery (Resend), web hosting, and analytics providers. These providers process data on our behalf under strict contractual obligations. Legal Requirements — where required by law, regulation, or legal process, or to protect the rights, property, or safety of our company, clients, or others. Business Transfers — in the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction.

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it, including: - HTTPS encryption across our entire website - Encrypted password storage using industry-standard hashing - Secure, access-controlled client portal with session management - Regular security reviews of our systems and processes While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to following best practices.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected: Enquiry & Contact Data — retained for up to 3 years after your last interaction with us, unless an ongoing business relationship exists. Client Portal Accounts — retained for the duration of the business relationship and up to 2 years after account inactivity. Marketing & Newsletter — retained until you unsubscribe or request removal. Website Analytics — aggregated analytics data is retained indefinitely; individual IP-level data is retained for up to 26 months. Email Engagement Data — retained for the duration of the associated marketing campaign plus 12 months.

Our website uses cookies and similar technologies: Essential Cookies — required for the website to function correctly, including session management and security tokens. Analytics Cookies — we use Google Analytics to understand how visitors use our website. This collects anonymised data about pages visited, time on site, and navigation patterns. No personally identifiable information is collected through analytics. Security Cookies — Cloudflare Turnstile is used on our forms to prevent spam and abuse. This may set cookies to verify legitimate visitors. You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.

Under the UK GDPR and the Data Protection Act 2018, you have the following rights: Right of Access — request a copy of the personal data we hold about you. Right to Rectification — request correction of inaccurate or incomplete data. Right to Erasure — request deletion of your personal data where there is no compelling reason for continued processing. Right to Restrict Processing — request that we limit how we use your data. Right to Data Portability — request your data in a structured, machine-readable format. Right to Object — object to processing based on legitimate interests or for direct marketing purposes. Right to Withdraw Consent — where processing is based on consent, you may withdraw it at any time. To exercise any of these rights, please contact us at info@enertherm-engineering.com. We will respond within one month of receiving your request, as required by the UK GDPR. There is no charge for making a request.

Your information may be transferred to and processed in countries outside the United Kingdom where our service providers operate. Where this occurs, we rely on one of the transfer mechanisms permitted by the UK GDPR: an adequacy decision made by the UK Government, or the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, together with a transfer risk assessment where required.

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of every website you visit.

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be posted on this page with a revised effective date. We encourage you to review this page periodically.

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO): Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Website: https://ico.org.uk Phone: 0303 123 1113 We would appreciate the opportunity to address your concerns directly before you contact the ICO — please reach out to us at info@enertherm-engineering.com. Contacting us first does not affect your right to complain to the ICO at any time.