Privacy Policy

Last updated: 4 April 2026. This policy explains how Innovate Engineer Ltd (“we”, “us”, “our”) collects, uses, and protects personal information when you use innovate.engineer. We are the data controller for the purposes of UK GDPR and the Data Protection Act 2018.

1. Who we are

Innovate Engineer Ltd is a private limited company registered in England & Wales, company number 13687318. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. Questions about this policy or your personal data should be directed to privacy@innovate.engineer. We have not appointed a statutory Data Protection Officer because we are not required to under UK GDPR Article 37, but the privacy contact above receives and handles all data protection enquiries.

2. Personal data we collect

Contact form submissions: name, email address, company name (optional), and the content of your message. Submitted via Fluent Forms and emailed to info@innovate.engineer. We do not store form submissions in the site database beyond the operational log required by the form plugin.
Email correspondence: any information you include when you contact us directly.
Technical data: IP address, browser type, device type, referring page, and pages visited. Collected via server logs and, where you consent, cookies.
Cookie and analytics data: only where you give consent via the cookie banner. See section 6.

3. How we use your data and lawful basis

To respond to enquiries — lawful basis: legitimate interest (UK GDPR Article 6(1)(f)) in responding to business contact.
To deliver services you have engaged us for — lawful basis: performance of a contract (Article 6(1)(b)).
To maintain site security and prevent fraud — lawful basis: legitimate interest in operating a secure service.
For analytics and site improvement — lawful basis: consent (Article 6(1)(a)), withdrawable at any time via the cookie banner.
To comply with legal obligations — lawful basis: legal obligation (Article 6(1)(c)).

4. Data retention

Contact enquiries: retained for 24 months from last contact, then deleted.
Client records (where you become a client): retained for 7 years from end of engagement to satisfy UK accounting and statutory limitation periods.
Server access logs: rotated and deleted after 30 days.
Analytics data: aggregated only, retained up to 14 months.

5. Who we share data with (sub-processors)

We use a small number of third-party service providers to operate this site and our business. Each is bound by a data processing agreement (where applicable) and processes data only on our instructions:

Email hosting and delivery — handles inbound contact form submissions and outbound correspondence (UK/EU hosted).
Website hosting — Cast Iron CAD Ltd infrastructure, UK-based.
Fluent Forms (WPManageNinja LLC) — contact form plugin. Data stored locally on our server; plugin does not transmit data to vendor.
Google Analytics 4 (Google LLC) — only if you consent. Data transferred to Google servers including outside the UK/EU under Standard Contractual Clauses and the UK Addendum. IP addresses are anonymised.
Complianz — cookie consent plugin. Consent records stored locally.

6. International data transfers

Where personal data is transferred outside the UK or European Economic Area (EEA) — notably for Google Analytics — we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses and the UK adequacy mechanism where applicable. Details available on request.

7. Cookies

We use a minimum set of cookies. Strictly necessary cookies (session, security, consent record) are set without consent, as permitted under PECR regulation 6(4). All other cookies — including analytics, marketing, and embedded third-party content — are set only after you give explicit, informed consent via the cookie banner. You can change or withdraw consent at any time by clicking “Cookie settings” in the footer. Consent is requested again after 12 months, or sooner if our cookie categories change.

8. Your rights

Under UK GDPR you have the right to: access your personal data, correct inaccurate data, request deletion (“right to be forgotten”), restrict processing, object to processing based on legitimate interest, request portability of data, and withdraw consent at any time. To exercise any of these rights, email privacy@innovate.engineer. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

9. Contact form specific disclosure

When you submit the contact form on innovate.engineer/contact: (i) your submission is emailed to info@innovate.engineer and stored in the Fluent Forms submissions log for up to 24 months, (ii) we use this data solely to respond to your enquiry, (iii) we do not share it with third parties except as set out in section 5, and (iv) you may request deletion at any time via the email address above.

10. Changes to this policy

We will post any changes to this policy on this page with an updated “Last updated” date. Material changes will be announced via the site and, where we have your email, by direct notice.