legal

Privacy

Effective date: [INSERT DATE] · Last updated: [INSERT DATE]

Template notice. This document is a starting point. Review it with a solicitor before publishing, and complete every [BRACKETED] field with your details.

1. Who we are

This policy describes how Dusk Engineering Services Ltd (“we”, “us”, “our”) collects and processes personal data through this website (duskengineering.services).

We are a company registered in England and Wales, company number [COMPANY NUMBER], registered office [REGISTERED ADDRESS]. We are the data controller for personal data collected through this site.

For any privacy-related question, contact us at privacy@duskengineering.services.

2. What we collect

We only collect the information you send us directly:

• Contact form submissions: name, email address, company name, and the message you write.
• Email correspondence: anything you include when you email us.

We do not use analytics cookies, tracking pixels, or advertising trackers on this site. The site sets no cookies of its own.

3. Why we use it, and our legal basis

We use the information you provide to reply to your enquiry, discuss the work you are asking about, and (if we go on to work together) fulfil the resulting contract.

The lawful bases we rely on under UK GDPR are:

• Legitimate interests: replying to enquiries from prospective clients and running our consultancy.
• Contract: performing any engagement we agree with you.
• Legal obligation: keeping records we are required by law to keep (for example, tax records).

4. Who we share it with

We do not sell personal data. We share it only with providers that help us run the business:

• [EMAIL PROVIDER, e.g. Fastmail, Google Workspace] — hosts our email.
• [SITE HOST, e.g. Cloudflare Pages, Vercel] — serves this website.
• [ACCOUNTING SOFTWARE, e.g. Xero, FreeAgent] — used only for clients we invoice.

Each processor is bound by a data-processing agreement and processes data only on our instructions.

5. International transfers

Some of the providers listed above are based outside the UK. Where personal data leaves the UK, we rely on adequacy decisions or the International Data Transfer Agreement (IDTA) issued by the ICO.

6. How long we keep it

• Enquiries that do not lead to work: deleted after 12 months.
• Client records: retained for 7 years after the last engagement ends, to satisfy tax and accounting requirements.

7. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete data where there is no good reason for us to keep it.
• Object to processing based on legitimate interests.
• Ask for your data in a portable format.
• Withdraw any consent you have given.

Email privacy@duskengineering.services to exercise any of these. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

8. Changes

If we change this policy, we will update the “Last updated” date above. Material changes will be notified to active clients by email.

---