Privacy Policy

This notice explains how HK Engineering Ltd handles personal information submitted through this website, collected when you use it, or held in our staff portal and business records.

Who is responsible for your information?

HK Engineering Ltd (company number 14548676) is responsible for the personal information described here. Contact us at Crown Chambers, 7 Market Place, Melksham, SN12 6ES, email operations@hkengineeringltd.co.uk or call 01225 791848.

What we collect and where it comes from

• Enquiries and service work: Your name, email, telephone number, selected service and the message you submit through our contact or callback forms. We may also receive business contact and service details when you contact us by phone or email, or when your organisation contacts us about work.
• Website use: Technical information such as your IP address and request details may be processed to serve and secure the website. If you agree to analytics, we may collect website and interaction data such as pages visited and contact-link or form events. We do not send the contents of your enquiry to website analytics.
• Staff portal: For staff users, the portal holds account and employment records. These can include contact details, dates of birth, emergency contacts and next of kin, payroll and tax details, right-to-work information, leave and sickness records, training, appraisals, disciplinary records and documents uploaded to the portal. Some of this is sensitive information, including health data. Staff web-push subscriptions are stored if a staff member opts in to notifications.

Why we use it and our legal grounds

• To respond to enquiries and discuss or deliver services: our legitimate interests in handling enquiries and managing business relationships, or taking steps towards or performing a contract.
• To manage employment, pay, leave, safety and staff access: performing employment contracts, complying with legal obligations, and our legitimate interests in administering and securing the business. Where special-category data such as health information is involved, we process it only where an additional legal condition applies, such as employment-law obligations.
• To maintain site security and prevent misuse: our legitimate interests in protecting our systems and users.
• To measure website use with optional analytics: your consent where cookies or similar non-essential technologies are used. You can change your choice at any time using Cookie preferences in the footer.

We do not use a website enquiry as consent to send you marketing emails.

Who receives information

We share information with staff who need it to handle your enquiry or administer our operations. Providers involved in the website include Replit (hosting), our PostgreSQL database provider for staff portal data, and Twilio SendGrid, which receives contact-form details so it can deliver the enquiry to our inbox and is also used for staff notifications. If you enable analytics, Google Analytics may receive website usage information. Our hosting and delivery providers may use infrastructure outside the UK; where UK data protection rules require a transfer mechanism, we must put appropriate safeguards in place. We may also disclose information when required by law.

How long we keep information

We keep enquiry correspondence and business records for as long as needed to respond, provide services and meet applicable legal or accounting requirements. Staff records are kept according to the type of record and applicable employment and legal obligations. The cookie choice is stored in your browser until you change it or clear your browser data. For any particular record, you can request the applicable retention criteria by contacting operations@hkengineeringltd.co.uk. We do not apply one period to every category of personal information.

Security

We use access controls for staff records and security measures appropriate to the data held. No internet service can guarantee absolute security. If you send us sensitive information through an enquiry form, please be aware it is delivered to us by email.

Your rights

Under UK data protection law, depending on the circumstances, you may ask to access or correct your personal data, have it erased, restrict its use, object to its use, or receive a portable copy. You can withdraw consent at any time without affecting processing already carried out. Contact operations@hkengineeringltd.co.uk to make a request. You can also complain to the Information Commissioner's Office (ICO).

Cookies and browser storage

The staff portal uses an essential sign-in cookie, hk.sid, which lasts up to seven days unless you sign out or it expires. This supports staff authentication. The site also stores your cookie choice in your browser under hk-cookie-consent; preferences such as theme and dismissed notices may be stored locally on your device.

If configured and you select Accept Analytics, Google Analytics loads and may set analytics cookies to measure website use. It does not load through our consent banner if you select Essential only. Site event analytics, where available, record actions such as a contact button click or form submission, not the form contents. We have not implemented advertising or cross-site marketing cookies in this website.

Use Cookie preferences in the footer to change your choice. Rejecting optional analytics does not prevent normal website access; staff sign-in still requires its essential cookie. Your browser settings can also clear existing cookies and local storage. Third-party sites linked from ours have their own policies.

Changes to this notice

We will update this page when our practices change and show the date of the latest revision above.

This page describes the website's observed data flows; it is general information, not legal advice. A qualified data-protection adviser should review it against our full business practices.