Privacy Policy

Last Updated: 18.03.26

1. Introduction

Engineering is Easy Ltd (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit www.engineeringiseasy.ai and engage with our services.

We are the data controller responsible for your personal data. We take this responsibility seriously and process your data lawfully, fairly, and transparently.

Please read this policy carefully. If you do not agree, please do not use our website or services.

2. Data Controller Information

Company Name: Engineering is Easy Ltd

Registered in: England and Wales

Company Number: 16113960

Registered Address: 23 Westfield Park, Bristol. BS6 6LT

Data Protection Contact: Chief Operations Officer

Contact Email: info@engineeringiseasy.ai

3. Legal Framework

This policy complies with:

  • UK GDPR  primary UK data protection law
  • Data Protection Act 2018  UK implementation
  • PECR 2003 – electronic communications and cookies
  • EU GDPR  where we process EU residents’ data

4. Information We Collect

4.1 Information You Provide

  • Identity Data: Name, title, job title
  • Contact Data: Email, phone, business address
  • Professional Data: Company, industry, project requirements
  • Enquiry Data: Messages via contact form or email
  • Contract Data: Information for service delivery

4.2 Automatic Collection

  • Technical Data: IP address, browser, device, timezone
  • Usage Data: Pages visited, time spent, navigation paths
  • Cookie Data: See our Cookies Policy

4.3 Third-Party Sources

We may receive data from LinkedIn, referrals, or public business information.

5. How We Use Your Data

  • Responding to enquiries: Answer your questions and requests
  • Service delivery: Provide consultancy services
  • Contract management: Manage relationship, invoicing, payment
  • Service communications: Project updates, administrative notices
  • Website improvement: Analyse usage to improve functionality
  • Marketing (with consent): Send relevant updates if opted in
  • Legal compliance: Meet legal obligations, protect rights
  • Business administration: Records, quality assurance, planning

6. Lawful Basis for Processing

We process data based on:

Purpose 

Lawful Basis 

Responding to enquiries 

Legitimate Interest 

Providing services 

Contract Performance 

Service communications 

Contract Performance 

Website analytics 

Legitimate Interest 

Marketing communications 

Consent 

Legal compliance 

Legal Obligation 

Legitimate Interest: We balance our interests against your rights. Our interests include operating our business and improving services.

Consent: You can withdraw consent anytime by contacting us or using unsubscribe links.

7. Data Retention

Data Type 

Retention Period 

Enquiries (no engagement) 

2 years from last contact 

Client project data 

7 years after completion 

Contract/billing records 

7 years (legal requirement) 

Marketing consent 

Until withdrawn + 1 year 

Analytics data 

26 months 

Correspondence 

6 years 

After retention expires, data is securely deleted or anonymised.

8. Data Sharing

8.1 Service Providers

IT support, hosting, analytics (Google Analytics), email, cloud storage.

8.2 Professional Advisers

Lawyers, accountants, auditors, insurers where necessary.

8.3 Legal Requirements

Government, regulators, law enforcement where required by law.

8.4 Business Transfers

In connection with mergers, acquisitions, or asset sales.

We do not sell your personal data.

9. International Transfers

Data may be transferred outside UK/EEA. We ensure safeguards including:

  • Transfers to countries with adequacy decisions
  • Standard Contractual Clauses

Contact us for details on safeguards used.

10. Data Security

  • Encryption: TLS/SSL in transit, encryption at rest
  • Access controls: Need-to-know basis
  • Authentication: Strong passwords, MFA where appropriate
  • Monitoring: Security assessments, vulnerability scanning
  • Training: Staff data protection training
  • Incident response: Breach detection and reporting procedures

 

No transmission is 100% secure. We cannot guarantee absolute security.

11. Your Rights

  • Access: Request a copy of your data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion in certain circumstances
  • Restrict processing: Limit how we use data
  • Portability: Receive data in structured format
  • Object: Object to processing, including marketing
  • Withdraw consent: At any time where consent applies

 

Contact info@engineeringiseasy.ai. We respond within one month. We may verify your identity. Most requests are free.

12. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or significant effects.

13. Children’s Data

Our services are for businesses and professionals. We do not knowingly collect data from under-18s.

14. Cookies

See our separate Cookies Policy for details on cookies and how to manage them.

15. Complaints

Contact us first at info@engineeringiseasy.ai. If unsatisfied, you may complain to:

  • UK: ICO – www.ico.org.uk  0303 123 1113
  • EU: Your local supervisory authority

16. Changes

We may update this policy. Material changes will be notified on our website or by email. Check the Last Updated date.

17. Contact Us

Email: info@engineeringiseasy.ai

Attention: Chief Operations Officer (Data Protection)

Address: 23 Westfield Park, Bristol. BS6 6LT

We aim to respond within 5 working days.