How we use personal information.

Information we may collect

This may include your name, job title, organisation, business contact details, enquiry or work requirement, correspondence, meeting notes and information needed for supplier onboarding or delivery of agreed work.

For relevant business-to-business contact, we may also record publicly available professional details, where they came from, why the organisation may be relevant and the history of our contact.

How and why we use it

We may use information to:

• respond to enquiries and discuss potential work;
• assess scope, competence, availability and site access;
• prepare quotations, contracts, RAMS and work records;
• manage suppliers, clients and professional relationships;
• contact organisations about relevant engineering support where there is a reasonable business connection;
• meet legal, safety, insurance and accounting obligations;
• protect our systems, website and business.

Depending on the circumstances, our lawful basis is taking steps towards or performing a contract, complying with a legal obligation, or our legitimate interests in running and developing the business. You can object to direct marketing at any time.

Sharing and international processing

We do not sell personal information. We may share only what is necessary with service providers supporting website hosting, email, IT, document storage and business administration, as well as professional advisers, insurers, clients or authorities where the work or law requires it.

Some service providers may process information outside the UK. Where required, we use providers and contractual safeguards intended to protect that information.

Retention and opt-outs

Routine enquiries are normally reviewed or deleted within 24 months of the last meaningful contact. Unresponsive business-development records are reviewed within 12 months. Contract, safety, insurance and financial records may be kept longer where the law or a legitimate business need requires it.

If you ask us not to contact you, we may keep the minimum information needed on a suppression record so that your request continues to be respected.

Cookies

The website may use cookies that are strictly necessary for hosting, security or access control. We do not currently add analytics, advertising cookies or marketing pixels. If that changes, we will update this notice and request consent where required.

Your rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction or transfer of your information, and you may object to processing based on legitimate interests. Contact engineering@spray-haus.co.uk. You can also complain to the UK Information Commissioner’s Office at ico.org.uk.