Ventosus UK Ltd – Privacy Policy

Ventosus UK Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, store, process, and look after your personal data when you visit our corporate website, interact with us as a business lead, or partner with us on energy infrastructure projects.

This policy is designed to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the regulatory guidance issued by the Information Commissioner’s Office (ICO)

1. Important Information and Who We Are

Ventosus UK Ltd is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or wish to exercise your legal rights, please contact our data compliance team:

Full Name of Legal Entity: Ventosus UK Ltd (Company Number: 17288768)Email Address: info@ventosus-uk.comPostal Address: 124 City Road, London, EC1V 2NXTelephone Number: +44 207 689 8307You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.2. The Data We Collect About YouBecause we operate strictly as a business-to-business (B2B) corporate entity, we do not intentionally collect data on retail consumers. We may collect, use, store, and transfer different kinds of personal data about professional partners, corporate representatives, and prospective clients, which we have grouped together as follows:Identity Data: Includes first name, last name, job title, and the corporate entity you represent.Contact Data: Includes corporate email address, business postal address, and telephone numbers.Technical Data: Includes your internet protocol (IP) address, browser type and version, time zone setting, operating system, and platform used to access our corporate website.Usage Data: Includes information about how you use our website, engineering project portfolios, and resources.Marketing and Communications Data: Includes your preferences in receiving corporate industry updates or project evaluations from us.3. How We Collect Your Personal DataWe use different methods to collect data from and about you, including:Direct Interactions: You may give us your Identity and Contact Data by filling in contact forms on our website, subscribing to our project updates, or communicating with us by phone, email, or post.Automated Technologies: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and similar technologies (see Section 5).Third Parties or Publicly Available Sources: We may receive corporate contact data from professional networks (e.g., LinkedIn) or public registries (e.g., UK Companies House) when verifying business partnerships.4. How and Why We Use Your Personal DataWe will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:Legitimate Interests: Where it is necessary for our legitimate corporate business interests (or those of a third party) and your interests and fundamental rights do not override those interests. This includes responding to design consult inquiries, managing B2B partnerships, and maintaining our website security.Performance of a Contract: Where we need to perform an engineering project or partnership contract that we are about to enter into or have entered into with your organisation.Legal Obligation: Where we need to comply with a legal or regulatory obligation in the UK (such as corporate tax recording or health and safety engineering logs).Purpose/ActivityType of DataLawful Basis for ProcessingTo respond to queries submitted via our website contact formIdentity, ContactLegitimate Interests (To respond to corporate sales and project design inquiries)To manage our B2B commercial relationship or project partnershipsIdentity, Contact, UsagePerformance of a Contract or Legitimate Interests (To operate infrastructure contracts)To administer and protect our website and IT infrastructureTechnical, UsageLegitimate Interests (To ensure security, prevent cyber threats, and troubleshoot issues)To send corporate engineering updates or industry insightsIdentity, Contact, MarketingLegitimate Interests (B2B corporate marketing—you can opt out at any time)We do not rely on consent as a legal basis for processing your corporate data, other than in relation to non-essential website tracking cookies. You have the right to withdraw consent to cookies at any time.5. CookiesOur website uses cookies to distinguish you from other users. This helps us provide you with a smooth experience when you browse our site and allows us to improve our corporate portal. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. For detailed information, please see our dedicated Cookie Policy.6. Disclosures of Your Personal DataWe do not sell, rent, or trade your corporate information to third parties. We may share your personal data with the following specific categories of third parties to achieve the purposes outlined in Section 4:Service Providers: IT infrastructure providers, secure cloud storage platforms, and website hosting providers acting as processors.Project Stakeholders: Approved sub-contracted engineering technicians, grid network operators, or regulatory bodies (e.g., Ofgem) strictly when necessary to deliver infrastructure design goals.Professional Advisers: Lawyers, bankers, auditors, and insurers providing consultancy or legal services.Legal Authorities: HM Revenue & Customs and other regulatory bodies in the UK if required by law.7. International Data TransfersWe store and host your personal data within the United Kingdom. In the limited circumstances where our corporate software providers process data outside the UK (for example, US-based cloud infrastructure), we ensure a similar degree of protection is afforded to it by ensuring UK Standard Contractual Clauses (SCCs) or International Data Transfer Agreements (IDTAs) are formally in place.8. Data SecurityWe have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed. In addition, we limit access to your personal data to those employees, project engineers, and contractors who have a legitimate business need to know.We have put in place procedures to deal with any suspected personal data breach and will notify you and the ICO where we are legally required to do so.9. Data RetentionWe will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or professional engineering reporting requirements.Prospective Leads: Data from general website inquiries is retained for 2 years following last contact.Contracted Energy Partners: Personal data associated with engineering infrastructure contracts is retained for 7 years post-contract completion to meet UK tax and corporate liability standards.10. Your Legal RightsUnder UK data protection laws, you have specific rights in relation to your personal data:Request access to your personal data (commonly known as a “data subject access request”).Request correction of the personal data that we hold about you.Request erasure of your personal data where there is no good reason for us continuing to process it.Object to processing of your personal data where we are relying on a legitimate interest.Request restriction of processing of your personal data.Request the transfer of your personal data to you or to a third party.Right to withdraw consent at any time where we are relying on consent to process your data.If you wish to exercise any of these rights, please contact us at info@ventosus-uk.com. We respond to all legitimate requests within one calendar month free of charge.