Privacy Policy

LRW Engineering Associated Ltd (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal data securely and in accordance with UK data protection law, including the UK GDPR and the Data Protection Act 2018.

This policy explains what personal data we collect, why, how we use it, who we share it with, and the rights you have.

Who we are

LRW Engineering Associated Ltd is a company registered in England and Wales (company number 11413981).

Registered address: Nordic House, Brunleys, Kiln Farm, Milton Keynes, MK11 3EW
Email: [email protected]
Telephone: 01908 110997

We are the data controller responsible for your personal data.

What we collect

When you contact us through our website, or by email or phone, we may collect your name, company name, email address, telephone number, and the content of any message you send.

When you visit our website, we and our service providers may automatically collect limited technical and usage data, such as your IP address, browser type and version, device information, the pages you view and how you interact with the site. This is collected through cookies and similar technologies (see Cookies below).

How we use your data, and our legal basis

Purpose	Lawful basis
Responding to and managing your enquiries	Legitimate interests (responding to people who contact us); or steps prior to entering a contract where you enquire about our services
Providing, performing and improving our services	Performance of a contract / legitimate interests
Maintaining, securing and troubleshooting our website and IT systems	Legitimate interests (keeping our systems secure and working)
Website analytics and understanding how visitors use our site	Consent (given via our cookie banner)
Complying with legal and regulatory obligations	Legal obligation

Where we rely on legitimate interests, our interest is in operating, securing and growing our business and responding to those who contact us. We balance this against your rights and only process data where it is proportionate to do so.

Where we rely on consent (for example, non-essential cookies), you can withdraw it at any time.

Cookies

Our website uses cookies and similar technologies. Strictly necessary cookies are required for the site to function and do not need your consent. Other cookies, including analytics cookies (e.g. Google Analytics) and cookies set by embedded content such as maps and fonts, are only set where you give consent through our cookie banner. You can change or withdraw your cookie preferences at any time via [link to cookie settings].

Who we share data with

We do not sell your personal data. We may share it with:

Trusted service providers who support our website, hosting, IT, email, analytics and business operations, acting on our instructions;
Professional advisers (such as accountants or legal advisers) where necessary;
Authorities or other third parties where we are required to do so by law.

International transfers

Some of our service providers, for example providers of website analytics, fonts, maps and content delivery, are based outside the UK, including in the United States. Where we transfer personal data outside the UK, we ensure an appropriate safeguard is in place, such as the provider being covered by UK adequacy regulations (e.g. the UK Extension to the EU-US Data Privacy Framework), or by Standard Contractual Clauses together with an International Data Transfer Agreement or Addendum.

How long we keep your data

We keep personal data only for as long as necessary for the purpose for which it was collected, or to meet legal, accounting or regulatory requirements. Enquiry correspondence is typically retained for up to 24 months after our last contact, unless a longer period is required; data relating to client engagements is retained in line with our contractual and statutory obligations.

Your rights

Under UK data protection law you have the right to:

access a copy of your personal data;
ask us to correct inaccurate or incomplete data;
ask us to delete your data (the “right to erasure”);
ask us to restrict how we use your data;
object to processing based on our legitimate interests;
data portability, where applicable;
withdraw consent at any time where we rely on it.

To exercise any of these rights, please contact us at [email protected]. We will respond within one month.

Automated decision-making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

Complaints

If you have any concerns about how we handle your personal data, please contact us first so we can try to resolve them. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. This version was last updated on 1 June 2026.