Privacy Policy

Enginuity Precision Limited (trading as EPL)

Last Updated: November 2025

Enginuity Precision Limited, trading as EPL (“EPL”, “we”, “us”, and “our”) is committed to protecting your privacy. This Privacy Policy (“Policy”) explains our privacy practices regarding personal information that we collect, store, share and use.

Regarding the General Data Protection Regulation

The UK GDPR gives more rights to you as an individual and more obligations to organisations holding your personal data. EPL is committed to being transparent about how it collects and uses your personal data, and to meeting its data protection obligations.

This Policy is published so you can be made aware of the rights you have in relation to the information we hold on you and the legal basis on which we are using it.

Your Rights

As a data subject under the UK GDPR, you have a number of rights. Subject to any exemptions provided by law, you can:

Access and obtain a copy of your data on request;
Require the organisation to change incorrect or incomplete data;
Require the organisation to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing;
Object to the processing of your data where we are not required by overriding law/regulation as legitimate legal grounds for processing; and
Withdraw consent where processing is based on consent.

If you would like to exercise any of these rights, please contact us at info@epl.engineering

Gathering of Personally-Identifying Information

Certain visitors using our services choose to interact with us in ways that require us to gather personally-identifying information.

The amount and type of information that we gather depends on the nature of the interaction. For example, we ask visitors who contact us through our website to provide their name and email address. Those who engage in business transactions with us for engineering services are asked to provide additional information, including the necessary personal and business information required to process those transactions and deliver our services.

In each case, we collect such information only insofar as is necessary or appropriate to fulfill the purpose of the visitor’s interaction with us. We do not disclose or process personally-identifying information other than as described below. Visitors can always refuse to supply us with their personally-identifying information, with the caveat that it may prevent them from engaging in certain website-related activities or from receiving our services.

What Information We Collect

This Policy tells you what to expect when we collect personal information. It applies to information we collect about:

Visitors to our website
People who contact us through the site’s contact forms
People who contact us via email or telephone
Job applicants and potential employees
Our clients and their authorised representatives
Suppliers and business partners

Visitors to Our Website

When someone visits epl.engineering we may make use of third-party services such as Google Analytics to collect information and details of visitor behavior patterns in order to enhance visitor experience with more meaningful content.

The collected information which is passed from your browser to these services may include:

(a) Your geolocation data, such as city, region, and country
(b) Technical information such as your browser, Operating System, screen resolution
(c) Visiting pages, duration, and navigation paths

The above information is only processed in a way which does not identify anyone. We do not make, and do not allow third-party services to make, any attempt to find out the identities of those visiting our website. From time to time, we may release non-personally-identifying information in the aggregate, e.g., by publishing a report on trends in the usage of our website.

Along with the above services, we also make use of cookies for various reasons, ranging from core site functionality to analytics.

For more information on our use of cookies please see the respective section below.

People Who Contact Us Through Our Website

When someone contacts us via the contact forms found on our site or by email, we collect their name, email address, phone number (if provided), company name (if provided), and any inquiry message. This information is collected in order to be able to communicate with the visitor in regards to their inquiry and to provide requested information about our engineering services.

This information is stored securely in our email systems and may be retained for as long as necessary to respond to the inquiry and maintain records of our business communications.

Job Applicants

As part of any recruitment process, we collect and process personal data relating to job applicants.

What information do we collect?

We collect a range of information about the applicant. This includes:

The applicant’s name, address and contact details, including email address and telephone number;
Details of the applicant’s qualifications, professional memberships, skills, experience and employment history;
Information provided in CVs, cover letters, application forms, or collected through interviews or other forms of assessment.

We may also collect personal data about the applicant from references supplied by former employers upon the applicant’s approval.

Applicant data will be stored securely on our internal systems.

Why does Enginuity Precision Limited process applicant’s personal data?

Processing data from job applicants allows us to manage the recruitment process, assess and confirm a candidate’s suitability for employment and decide to whom to offer a job.

For future employment opportunities of which the applicant may be better suited (in case of an unsuccessful application), the applicant’s personal data may remain on file for a period of no more than 12 months after which it will be destroyed. We will ask the applicant’s consent before data is stored for this purpose, and the applicant may withdraw consent at any time.

Who has access to applicant’s data?

Applicant information will only be shared internally for the purposes of the recruitment process. This includes members of our management team, interviewers involved in the recruitment process, and individuals directly involved in hiring decisions.

We will not share applicant data with third parties except where required by law or with the applicant’s explicit consent.

How does Enginuity Precision Limited protect applicant data?

We take the security of applicant data seriously. We have internal policies and controls in place to ensure that the applicant data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by our employees in the proper performance of their duties.

The applicant is under no statutory or contractual obligation to provide these data to us during the recruitment process. However, if the applicant chooses not to provide this information, we may not be able to process the application properly or at all.

Our Clients

When you engage EPL for our services, we collect and process personal data necessary to provide those services.

What client information do we collect?

We collect information including:

Name and contact details (email, phone, address)
Company name and business details
Job title and role
Billing and payment information
Project-specific technical information
Communications and correspondence related to projects

Why do we process client data?

We use the above mentioned personal data in order to:

Identify and fulfill service agreements and project requirements
Process payment information and provide clients with invoices and project documentation
Communicate with our clients regarding projects, deliverables, and services
Maintain records in accordance with our ISO9001 quality management system
Comply with legal, accounting, and regulatory obligations
Provide technical support and respond to inquiries

Where do we store client data?

Client personal data are stored securely on our internal systems and infrastructure. We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage.

Payment information is processed through secure payment systems that comply with industry standards. EPL Engineering does not store complete credit card numbers on our systems.

Client data required for accounting and invoicing purposes are stored on our accounting systems. Client data may also be securely backed up for disaster recovery purposes according to our business continuity procedures.

How long do we retain client data?

We retain client data for as long as necessary to:

Fulfill contractual obligations
Comply with legal and regulatory requirements (typically 6 years from the end of the accounting period for financial records in accordance with UK tax law)
Maintain professional records in line with engineering standards and professional indemnity insurance requirements
Resolve disputes or enforce our agreements

Lawful Basis for Processing Personal Data

We process personal data based on the following lawful bases under UK GDPR:

Contract performance: To deliver engineering services and fulfill contractual obligations
Legitimate interests: To manage our business operations, respond to inquiries, improve services, and maintain professional relationships
Legal obligation: To comply with accounting, tax, professional, and regulatory requirements
Consent: For marketing communications and where specifically required by law

Sharing of Personal Data

Enginuity Precision Limited does not sell, rent, or trade personal data. We may share personal data with:

Sub-contractors and suppliers: Where necessary to deliver our services, under strict confidentiality and data protection agreements
Professional advisors: Including accountants, solicitors, and insurers, under confidentiality obligations
Regulatory bodies: Where legally required or for professional compliance purposes
Third-party service providers: For IT services, hosting, payment processing, and other business support functions, under appropriate data processing agreements

Enginuity Precision Limited discloses potentially personally-identifying and personally-identifying information only to those of its employees, contractors and affiliated organisations that (i) need to know that information in order to process it on Enginuity Precision Limited’s behalf or to provide services, and (ii) that have agreed not to disclose it to others.

Some of those employees, contractors and affiliated organisations may be located outside of your home country; by using Enginuity Precision Limited’s services, you consent to the transfer of such information to them.

International Transfers

If we transfer personal data outside the UK, we ensure adequate safeguards are in place through:

UK adequacy decisions
Standard Contractual Clauses (SCCs)
Appropriate technical and organisational measures

Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

Secure password-protected systems and encrypted data storage
Access controls based on need-to-know principles
Regular security assessments and updates
Staff training on data protection and confidentiality
Secure backup and disaster recovery procedures

Enginuity Precision Limited takes all measures reasonably necessary to protect against the unauthorised access, use, alteration or destruction of potentially personally-identifying and personally-identifying information.

Data Breach Notification

In the event of a data breach likely to result in risk to your rights and freedoms, we will notify you and the Information Commissioner’s Office (ICO) within 72 hours as required by UK GDPR.

Marketing Communications

If you are a client and have supplied your email address, we may occasionally send you an email to tell you about our services, engineering insights, industry updates, or important business information. We expect to keep this type of email to a minimum.

You can opt out of marketing communications at any time by:

Following the unsubscribe instructions in any marketing email
Contacting us at info@epl.engineering

Please note that you cannot opt out of essential service communications related to active projects or contractual obligations.

Cookies

A cookie is a string of information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the website each time the visitor returns. Our website uses cookies to help us identify and track visitors, their usage of our website, and their website access preferences.

What are cookies?

Cookies are small data files that are placed on your computer or mobile device when you visit a website. Cookies are widely used by online service providers in order to make their websites or services work, or to work more efficiently, as well as to provide reporting information.

Cookies set by the website owner (in this case, EPL) are called “first-party cookies”. Cookies set by parties other than the website owner are called “third-party cookies”. Third-party cookies enable third-party features or functionality to be provided on or through the website (such as analytics and interactive content).

Why do we use cookies?

We use first-party and third-party cookies for several reasons:

Essential cookies: Required for technical reasons for our website to operate
Performance cookies: Enable us to track and improve website performance and user experience
Analytics cookies: Help us understand how visitors use our website to improve content and functionality

The specific types of cookies served through our website and the purposes they perform are described in further detail below.

Strictly Necessary Cookies

These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms.

You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.

Performance Cookies

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site.

All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know if you have visited our site, and will not be able to monitor its performance.

Cookies may include those from services such as:

Google Analytics (_ga, _gid, _gat)
Other analytics services as implemented

How can I control cookies?

You have the right to decide whether to accept or reject cookies.

Browser Controls: You can set or amend your web browser controls to accept or refuse cookies. If you choose to reject cookies, you may still use our website though your access to some functionality may be restricted. As the means by which you can refuse cookies through your web browser controls vary from browser-to-browser, you should visit your browser’s help menu for more information.

Do Not Track: Some Internet browsers include the ability to transmit “Do Not Track” or “DNT” signals. Since uniform standards for “DNT” signals have not been adopted, our website does not currently process or respond to “DNT” signals.

How often will we update cookie information?

We may update the above information from time to time in order to reflect changes to the cookies we use or for other operational, legal or regulatory reasons. Please re-visit this Policy regularly to stay informed about our use of cookies and related technologies.

Retention of Personal Data

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, including:

Active business relationships: Duration of relationship plus 6 years (in line with UK limitation periods)
Financial and accounting records: 6 years from end of accounting period (HMRC requirement)
Project records: In accordance with professional standards and insurance requirements
Marketing data: Until consent is withdrawn or data becomes outdated
Job applicant data: 12 months maximum (with consent) or immediately upon request

Privacy Policy Changes

Although most changes are likely to be minor, we may change this Policy from time to time, and in our sole discretion. We encourage visitors to frequently check this page for any changes to stay informed about how we are protecting the personal information we collect.

Information regarding the last update date will be displayed at the top of this Policy. If you are an active client, we may also notify you of significant changes via email. Your continued use of our services after any change in this Policy will constitute your acceptance of such change.

Contact Information

If you have any questions about this Privacy Policy or our data protection practices, please contact us:

Enginuity Precision Limited (trading as EPL)
Email: info@epl.engineering
Telephone: +44 (0) 7886821082

For data protection enquiries specifically, please mark your correspondence “Data Protection Query”.

Last Updated: November 20-