Privacy Policy

Introduction W&H Engineering LTD (“we”, “our”, “us”) is committed to protecting the privacy and security of personal information. This Privacy Policy explains how we collect, use, store and disclose personal data when you visit and use our website and when you contact us. By using our website or providing us with your personal information, you accept the practices described in this policy.

Information we collect We may collect the following categories of personal data:

• Contact information: W&H Engineering LTD - 30 Progress Road Leigh-on-Sea Essex SS9 5LE Contact number: 01702 525266 Email: sam.mason@whengineering.co.uk.

• Enquiry and project details: information you provide when requesting a quote, making an enquiry, ordering services or discussing projects.

• Technical information: IP address, browser type and version, operating system, device identifiers and pages visited on our site (collected through server logs and cookies).

• Marketing preferences: your preferences for receiving communications from us.

• Financial information: where required to provide services (for example, bank details or payment information) — handled securely and only as needed.

How we collect information

• Information you provide directly: when you complete contact forms, email us, call us, request a quote, submit documents or otherwise communicate with us.

• Automated collection: through cookies and similar technologies when you browse our website and through server logs.

• Third parties: from service providers, business partners or publicly available sources when necessary and lawful.

Use of personal data We use personal data for the following purposes:

• To respond to enquiries and provide services, quotes, invoices and customer support.

• To manage client relationships and carry out project work.

• To process payments and prevent fraud.

• To operate, maintain and improve our website, products and services.

• To send administrative messages and service-related communications.

• To send marketing communications where you have given consent or where we have a legitimate interest (subject to your right to object).

• To comply with legal and regulatory obligations.

Legal bases for processing Where applicable under data protection law (including the UK GDPR), we rely on the following legal bases:

• Consent: where you have given clear consent for us to process your personal data for a specific purpose.

• Contract: processing necessary to perform a contract with you or to take steps at your request prior to entering into a contract.

• Legitimate interests: processing necessary for our legitimate interests (for example, business administration, security, and improving our website), balanced against your rights and freedoms.

• Legal obligation: processing necessary to comply with a legal obligation.

Cookies and similar technologies We use cookies and similar technologies to collect technical and usage information. Cookies help us improve website functionality, performance and user experience. You can manage or disable cookies through your browser settings, though this may affect the functionality of the site.

Data sharing and disclosure We may share personal data with:

• Service providers and subcontractors who perform services on our behalf (for example, hosting providers, IT support, payment processors and professional advisers).

• Third parties where required by law, regulation or to respond to legal processes.

• In connection with the sale, transfer or reorganisation of all or part of our business, subject to appropriate safeguards.

• Parties where you have given consent to the disclosure.

We require third-party processors to protect personal data and to use it only for permitted purposes. Where we transfer personal data outside the UK, we will ensure appropriate safeguards are in place.

Data security We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration and disclosure. Measures include secure systems, access controls and staff training. No system is completely secure; we cannot guarantee absolute security of information.

Data retention We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to meet legal and regulatory obligations, to resolve disputes and to enforce our agreements. Retention periods vary depending on the nature of the data and the reason for processing.

Your rights Subject to applicable law, you may have the right to:

• Access the personal data we hold about you.

• Correct inaccurate or incomplete information.

• Request erasure of your personal data (in certain circumstances).

• Restrict or object to processing of your personal data.

• Request portability of your personal data where processing is based on consent or contract and is carried out by automated means.

• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights or for enquiries about your personal data, contact us at sam.mason@whengineering.co.uk or by post to the address above. We may need to verify your identity before responding to requests. We will respond within applicable statutory timescales