Privacy Policy

GDPR - Privacy Notice

DAN'S ENGINEERING Ltd takes the protection of your data seriously.

This Privacy Notice explains how we collect, use, and protect any personal information you provide through this website or in the course of our business.

We comply with the UK General Data Protection Regulation, the Data Protection Act 2018, and the Data (Use and Access) Act 2025 (DUAA).
The DUAA strengthens your rights over how your data is accessed, used, and shared.

We may update this policy periodically.

Who we are

Business / traders name:
Dan's Engineering Ltd

Website:
www.dansengineering.co.uk

Address:
Dan's Engineering Ltd
Unit 19 Small Industries Estate, River Lane, Bridgwater, Somerset TA7 0AA.

Data Controller: J Puddy, enquiries@dansengineering.co.uk

What information do we collect?

The following types of personal information may be collected, stored, and used:

Information - such as your name, address, phone number, email address, job title - that you send us when you use our services, complete a contact form, sign up to our newsletter or mailing list or make a purchase etc.
Information - such as your name, address, phone number, email address, job title - provided by you in any communications that you make with us by email or phone

We do not use third party tracking software but our server may automatically collect standard Internet log information and details of visitor behaviour patterns such as the browser type, IP address, referring site, and the date and time of each visit. Our hosting provider may provide this data to us which we would only use to see how many visitors we receive to various parts of the website and to assess the effectiveness of any other forms of advertising we may undertake. We do not use this information to identify anyone.

How do we use personal information?

Information we collect helps us understand your needs, keep in contact (if required) and provide you with a better service, and in particular for the following reasons:

Administering our website and business.
We may use the information to improve our products and services.
We may periodically send promotional emails about new products, special offers or other information which we think you may find interesting.
From time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone, fax or mail.
Sending statements, invoices, and payment reminders to you, and collecting payments from you;
Sending you our email newsletter, if you have requested it (you can inform us at any time if you no longer require the newsletter);
Legal obligations (eg prevention of fraud)
In line with the Data (Use and Access) Act 2025, we record and review how personal data is used within our systems (Dropbox, Microsoft 365, Evalu8 etc.) to ensure data-use transparency and lawful access.
We do not use your information for automated decision-making or profiling.

Legal basis for processing your information

We may legally process the information we have about you because:

We have a contract with you
It is in our legitimate interest to respond to enquiries concerning the services we provide.
You have given us permission to do so
We must provide services to you after you have purchased something from us
To comply with the law.
We also rely on DUAA 2025 S.12 where the Act permits the lawful use of personal data for operational, safety, and regulatory compliance purposes.

When do we share personal data?

Any personal information collected via the web site is treated confidentially and only used for the purposes of conducting our normal business operations and communicating with and providing services to existing and potential customers.

We may disclose your personal information to any of our employees, insurers, professional advisers, agents, suppliers, or subcontractors as reasonably necessary for the purposes set out in this policy.

We may also disclose your personal information if we are required to by law or in order to establish, exercise, or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk).

We maintain a Third-Party Data Register identifying all service providers who access or store data on our behalf (e.g. Dropbox Inc., Microsoft 365), together with their security certifications and data-processing agreements.

Security of your personal information.

We will take reasonable technical and organizational precautions to prevent the loss, misuse, unauthorised access of, or alteration of your personal information.

We will store all the personal information you provide on secure (password- and firewall-protected) servers and computers.

Please be aware that the transmission of information over the Internet is inherently insecure, and we cannot guarantee the security of data sent over the internet.

All electronic systems are monitored under our Data Use and Access Policy 2025 with access logging and role-based permissions reviewed annually.

How long will you keep my personal information?

We will not retain your personal information for longer than necessary. We will keep your personal information:

For as long as required by law.
Until we no longer have a valid reason for keeping it.
For as long as contractual obligations require us to.
Until you request us to stop using it.

We will take all reasonable steps to securely dispose / delete your data after we no longer need it. Retention periods are defined in our FPC Manual, available on request from the Data Controller.

Your rights

Under the GDPR (General Data Protection Regulation) you have the following rights to access and control Your personal data:

Access to personal information
– you have the right to request a copy of the information that we hold about you.
Correction and deletion
– you have a right to ask us to correct data that we hold about you that is inaccurate or incomplete or request we completely delete all information that we hold about you.
Withdrawal of consent (if processing data on condition of consent)
- If you have given us your consent to process your data but change your mind later, you have the right to withdraw your consent at any time,
Data portability
– you have the right to have the data we hold about you transferred to another organisation.
Restriction of processing and objection
– you have the right to object to or restrict certain types of processing such as direct marketing.
The right to lodge a complaint with the Information Commissioner’s Office

Under the Data (Use and Access) Act 2025, you also have the right to:
• Request details of how your data is used, accessed, or shared (Data-Use Access Request)
• Request that access controls be reviewed if you believe data has been misused
• Receive a clear explanation of any automated or AI-assisted data use affecting you.

You can exercise most of your other rights by emailing:
enquiries@dansengineering.co.uk
or by writing to the above address.

The only reasons we may deny requests regarding objections to processing of personal data is if we can show compelling legitimate grounds for the processing, which override your interest, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims.

If you are concerned about how your data has been used, you may submit a Data Use & Access Complaint Form (available on request) email enquiries@dansengineering.co.uk.
We will acknowledge your complaint within 5 working days and aim to respond within 30 days.
If you are unsatisfied with our response, you may contact the Information Commissioner’s Office at https://ico.org.uk/concerns

How we use cookies

Cookies are small text files that are downloaded and stored on your computer when you visit a website. Most websites use them but the information they contain varies from website to website. They can used for example to enable a website to remember your preferences, remember what you have put in your shopping basket, or count the number of visitors to each web page.

This website's use of Cookies is restricted to essential use only. We only use those Cookies which are necessary for the proper basic functioning of the software that powers the site. No personally identifiable information is stored within those Cookies and we do not use them to try to identify or track visitors.

We do not use any third party Cookies or third party analytical software.

For more information on Cookies and how to control and manage them please visit this link

Links to other websites

Our website may contain links to other websites. This privacy policy only applies to this website, so if you follow a link to another website you should read their own privacy policies.