Last Updated: 7 October 2026
Aurex Engineering Limited is committed to protecting personal information and handling it responsibly in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy explains how Aurex Engineering Limited collects, processes, stores, protects, and manages personal information and the rights individuals have in relation to their personal data.
1. Data Protection Commitment
We recognise the importance of protecting personal information and are committed to processing personal data fairly, lawfully, transparently, and securely.
We aim to ensure that personal information is:
- Processed lawfully, fairly, and transparently
- Collected for specific and legitimate purposes
- Limited to what is necessary
- Accurate and kept up to date where required
- Retained only for as long as necessary
- Protected against unauthorised access, loss, misuse, or disclosure
2. Who We Are
Aurex Engineering Limited
Company Number: 17471299
Registered Office: Office 1869 85 Dunstall Hill, Wolverhampton, United Kingdom, WV6 0SR
Email: info@aurexengineering.co.uk
Telephone: [Insert Phone Number]
For data protection enquiries, please contact us using the details above.
3. Personal Data We May Process
Depending on your relationship with us, we may process:
- Name and job title
- Company or organisation name
- Email address
- Telephone number
- Business address
- Project and contractual information
- Information contained within project drawings and documents
- Correspondence and communications
- Quotation and invoicing information
- Website and technical information
- Information required to provide our services
- Other information voluntarily provided to us
We aim to collect only personal information that is relevant and necessary for the purpose for which it is processed.
4. How We Collect Personal Data
We may obtain personal information through:
- Website contact and enquiry forms
- Email and telephone communications
- Requests for quotations
- Project documents and drawings
- Client and supplier communications
- Contracts and project agreements
- Business enquiries
- Website cookies and analytics technologies, where applicable
- Other legitimate business interactions
5. Lawful Bases for Processing
We process personal information only where there is a valid lawful basis under applicable data protection legislation.
Depending on the circumstances, this may include:
Contract
Where processing is necessary to enter into or perform a contract with you.
Legitimate Interests
Where processing is necessary for our legitimate business interests, provided that those interests do not override your fundamental rights and freedoms.
Legal Obligation
Where processing is necessary to comply with a legal or regulatory requirement.
Consent
Where you have voluntarily provided consent for a specific processing activity.
Where we rely on consent, you may withdraw that consent at any time.
6. Purpose of Processing
We may process personal information to:
- Respond to enquiries
- Prepare quotations and proposals
- Provide engineering and technical services
- Manage client and supplier relationships
- Deliver project-related services
- Communicate about ongoing projects
- Process invoices and payments
- Maintain business records
- Improve our services and website
- Manage security and prevent fraud
- Comply with legal and regulatory obligations
- Resolve disputes and protect our legal rights
7. Data Minimisation
We only seek to collect personal information that is relevant and necessary for the purpose for which it is required.
We do not intentionally collect excessive personal information where it is not required for our business or service delivery.
8. Accuracy of Personal Data
We take reasonable steps to ensure that personal information we hold is accurate and, where necessary, kept up to date.
If you believe information we hold about you is incorrect or incomplete, you may contact us and request that it is corrected.
9. Data Retention
We retain personal information only for as long as necessary for the purposes for which it was collected.
Retention periods may depend on:
- The nature of the information
- The purpose for which it was collected
- Contractual requirements
- Legal and regulatory obligations
- Accounting and financial requirements
- The need to establish or defend legal claims
- Legitimate business requirements
When personal information is no longer required, we will securely delete, anonymise, or dispose of it where appropriate.
10. Data Security
We take reasonable technical and organisational measures to protect personal information against:
- Unauthorised access
- Accidental loss
- Destruction
- Alteration
- Misuse
- Unauthorised disclosure
Security measures may include appropriate access controls, secure systems, password protection, restricted access, secure communications, and internal procedures for handling personal information.
However, no electronic system or method of transmission can be guaranteed to be completely secure.
11. Sharing Personal Data
We do not sell personal information.
Where necessary, personal information may be shared with trusted third parties, including:
- Employees and authorised personnel
- IT and hosting providers
- Software and technology providers
- Professional advisers
- Accounting and financial service providers
- Project-related service providers
- Legal or regulatory authorities where required
We aim to ensure that third parties handling personal information on our behalf provide appropriate safeguards and process information only for legitimate purposes.
12. International Data Transfers
Some service providers we use may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer complies with applicable UK data protection requirements and that appropriate safeguards are used where required.
13. Individual Data Protection Rights
Under applicable data protection law, individuals may have the right to:
- Access their personal information
- Request correction of inaccurate information
- Request deletion of personal information
- Request restriction of processing
- Object to certain processing activities
- Request data portability where applicable
- Withdraw consent where processing is based on consent
These rights are subject to applicable legal conditions and exemptions.
Requests should be submitted using our contact details provided in this policy.
14. Data Subject Requests
If you wish to exercise your data protection rights, please contact us with sufficient information to identify you and the nature of your request.
We may need to verify your identity before providing access to or making changes to personal information.
We will handle valid requests in accordance with applicable legal requirements.
15. Marketing Communications
We may use business contact information to communicate with existing or potential clients about our services where permitted by applicable law.
Where consent is required, we will obtain appropriate consent before sending marketing communications.
You may request to stop receiving marketing communications at any time.
16. Data Breaches
We maintain procedures for identifying, investigating, and responding to personal data breaches.
Where a breach creates a risk to individuals’ rights and freedoms, we will assess the incident and take appropriate action in accordance with applicable data protection requirements.
Where legally required, we will notify the Information Commissioner’s Office (ICO) and affected individuals within the applicable timeframe.
17. Cookies and Tracking Technologies
Our website may use cookies and similar technologies for essential functionality, analytics, performance, and other purposes.
Where required, non-essential cookies will be used in accordance with applicable consent requirements.
For further information, please refer to our Cookie Policy.
18. Data Protection Responsibilities
Aurex Engineering Limited is responsible for implementing appropriate measures to protect personal information processed as part of our business activities.
Employees, contractors, and authorised individuals who have access to personal information are expected to:
- Handle information responsibly
- Keep personal information confidential
- Use information only for legitimate purposes
- Follow applicable security procedures
- Report suspected data breaches or security incidents promptly
19. Confidentiality
We treat client, project, and business information as confidential where appropriate.
Personal information and confidential project information will only be accessed, used, or shared where necessary for legitimate business purposes or where otherwise permitted or required by law.
20. Children’s Data
Our services are intended primarily for businesses and professional users.
We do not knowingly collect personal information from children through our website or services.
21. Third-Party Services
Our website and business operations may use third-party platforms and service providers.
Where these providers process personal information on our behalf, we take reasonable steps to ensure appropriate data protection and security arrangements are in place.
Third-party services may have their own privacy policies and terms, which users should review where applicable.
22. Complaints
If you have concerns about how Aurex Engineering Limited processes your personal information, please contact us first so that we can investigate and address your concerns.
You also have the right to make a complaint to the UK’s data protection supervisory authority:
Information Commissioner’s Office (ICO)
Website: [Insert ICO Website Link]
Further information about data protection rights and complaints is available from the ICO.
23. Policy Reviews and Updates
We may review and update this policy periodically to reflect changes in our business activities, technology, legal requirements, or data protection practices.
The latest version will be published on our website with the relevant “Last Updated” date.
24. Contact Us
For questions regarding this GDPR & Data Protection Policy or the way we handle personal information, please contact:
Aurex Engineering Limited
Email: info@aurexengineering.co.uk
Telephone: [Insert Phone Number]
Registered Office: Office 1869 85 Dunstall Hill, Wolverhampton, United Kingdom, WV6 0SR
Company Number: 17471299
