Who this covers
This notice explains how Apex Renewable Engineering Ltd ("Apex", "we") handles personal data in connection with this website and with enquiries. Apex is the data controller. Contact: dba@aprengineering.co.uk, or by post to the registered office, 24 Alexander Drive, Perth PH2 9FG.
This website
The site is static. It sets no cookies, runs no analytics, and loads no third-party scripts or fonts. The web host records standard server logs (IP address, page requested, browser type, time) for security and capacity purposes, retained for a short period and not used to identify visitors. Videos are embedded from YouTube's privacy-enhanced domain and load nothing from YouTube until you press play; from that point YouTube's own privacy policy applies.
Enquiries and clients
If you email or call, we hold your name, contact details, and whatever you tell us about your project or asset, in order to respond and, if we go on to work together, to deliver the engagement. The lawful basis is the steps taken at your request before entering a contract, and then the contract itself; for keeping records after an engagement, legitimate interest and legal obligation (accounting records, professional insurance requirements).
Enquiry data that does not lead to an engagement is deleted within twelve months. Engagement records are retained for six years after completion, or longer where a dispute or insurer requires it. Data is stored on systems in the UK and EU and is not sold or shared with anyone except professional advisers and service providers bound by confidentiality, or where the law requires.
Your rights
Under UK GDPR you can ask what personal data we hold about you, ask for it to be corrected or deleted, object to processing, or complain to the Information Commissioner's Office (ico.org.uk). Email dba@aprengineering.co.uk for any of these.