Last Updated: December 27, 2025
1. Introduction
Ashmit Engineering Ltd ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website ashmitenggconsultancy.com or use our services.
Company Details:
Ashmit Engineering Ltd
Company Registration Number: 09572438
Registered in England and Wales
Email: mail@ashmitenggconsultancy.com
For any data protection queries, please contact us at the email address above.
2. Information We Collect
We collect the following types of information:
Information You Provide to Us
- Contact Form Data: Name, email address, phone number, company name, and message content when you submit our contact form
- Email Communications: Information you provide when communicating with us via email
- Service Requests: Details about your industrial automation requirements and project specifications
Information Collected Automatically
- Analytics Data: Via Google Analytics 4, including pages visited, time spent, browser type, device information, and general location (country/city level)
- Cookie Data: Information stored in cookies (see Cookies Policy section below)
- Technical Information: IP address, browser type, operating system, referring URLs, and access times
3. How We Use Your Information
We use the information we collect for the following purposes:
- Responding to Inquiries: To answer your questions and provide information about our services
- Service Delivery: To provide industrial control systems services, support, and consultancy
- Communication: To send service updates, technical information, and respond to your requests
- Website Improvement: To analyze website usage and improve user experience
- Marketing: With your consent, to send information about our services (you can opt out at any time)
- Legal Compliance: To comply with applicable laws and regulations
- Security: To protect against spam, fraud, and security threats using Google reCAPTCHA v3
4. Legal Basis for Processing (GDPR)
Under GDPR, we process your personal data on the following legal bases:
- Consent: When you submit contact forms, subscribe to updates, or accept cookies
- Contractual Necessity: To perform services you have requested or contracted
- Legitimate Interests: To analyze website usage, improve our services, and send relevant business communications
- Legal Obligations: To comply with UK laws and regulations
6. Third-Party Services
We use the following third-party services that may collect and process your data:
Google Services
- Google Analytics 4: Web analytics and traffic measurement
- Google Tag Manager: Tag management system
- Google reCAPTCHA v3: Spam and bot protection for contact forms
- Google Maps: Location services displaying our office locations
- Privacy Policy: Google Privacy Policy
WhatsApp Business
- WhatsApp Chat Integration: Direct messaging for customer support
- Data Shared: Your WhatsApp number and messages you send to us
- Privacy Policy: WhatsApp Privacy Policy
Email Service Providers
- SMTP Email Delivery: Gmail or custom SMTP servers for sending/receiving emails
- Data Shared: Email addresses and message content from contact forms
Hosting Services
- Firebase Hosting (Google Cloud): Website hosting and content delivery
- Location: Google Cloud infrastructure (multi-region)
7. Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy:
- Contact Form Submissions: 3 years from last contact
- Email Communications: Duration of business relationship plus 7 years for legal compliance
- Analytics Data: 26 months (Google Analytics 4 default retention)
- Cookie Consent Records: 12 months
- Client Project Data: As per contractual agreements and legal requirements
After the retention period, we securely delete or anonymize your data in accordance with GDPR requirements.
8. Your Rights (GDPR)
Under GDPR, you have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data
- Right to Restrict Processing: Request limitation of how we use your data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or for direct marketing
- Rights Related to Automated Decision-Making: We do not use automated decision-making or profiling
How to Exercise Your Rights
To exercise any of these rights, please contact us at mail@ashmitenggconsultancy.comwith "Data Protection Request" in the subject line. We will respond within 30 days of receiving your request.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ICO complaints page
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted
- Secure Form Submission: Contact forms use HTTPS and reCAPTCHA v3 protection
- Secure Email Transmission: Email communications use encrypted protocols
- Access Controls: Limited access to personal data on a need-to-know basis
- Regular Updates: Security patches and updates applied to systems
- Secure Hosting: Firebase Hosting with Google Cloud security infrastructure
While we use reasonable efforts to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
10. International Data Transfers
Your data may be transferred to and processed in countries outside the UK and European Economic Area (EEA), including:
- India: Our India office for project coordination and support services
- United States: Google services (Analytics, Tag Manager, Firebase, reCAPTCHA, Maps) operate from the US
When transferring data internationally, we ensure adequate safeguards are in place:
- Google services comply with GDPR and use Standard Contractual Clauses (SCCs)
- Internal data sharing follows strict data protection policies
- Contractual obligations with third-party processors ensure GDPR-level protection
11. Children's Privacy
Our website and services are not directed at children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately so we can delete it.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. The "Last Updated" date at the top of this page indicates when the policy was last revised.
We encourage you to review this policy periodically. If we make material changes, we will notify you by email (if you have provided your email address) or through a notice on our website.
13. Contact Information
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Ashmit Engineering Ltd
Email: mail@ashmitenggconsultancy.com
Website: Ashmit Engineering Ltd
For general inquiries, you can also use our Contact Page.