This policy explains what personal data we collect through our website, aquamain.com, why we use it, who we share it with, and your rights. Last updated: 9 November 2026.
Who we are
Aquamain (UK) Ltd is the controller of the personal data described in this policy. We are registered in England and Wales, company number 05248553, at Unit 22, Evercreech, Shepton Mallet, Somerset BA4 6NA. We are registered with the Information Commissioner’s Office, registration number ZA303318.
You can contact us about your personal data at info@aquamain.com or on 01749 345842.
What this policy covers
It covers visiting the site, using our contact and careers forms, emailing us through the addresses shown on the site, and the marketing emails we send to business contacts.
What we collect and why
| When | What we collect | Why | Lawful basis | How long we keep it |
|---|---|---|---|---|
| You visit the site | Your IP address and basic technical details of your request, logged by our hosting provider | To deliver the site and keep it secure | Legitimate interests | As set by our hosting provider, GitHub |
| You visit the site | Pages viewed, the site you came from, browser and device type, and country, collected without cookies | To understand how the site is used and improve it | Legitimate interests | Held by Cloudflare in summary form; it does not identify you |
| You send the contact form | First name, last name, email, company, the service you’re interested in, and your message | To reply to your enquiry and, if you ask, prepare a quotation | Legitimate interests, or steps before entering a contract | 2 years from our last contact if no work follows. If you become a customer, 6 years after the work ends. |
| You send the careers form | First name, last name, email, phone number, area of expertise, your message and your CV | To consider you for current or future roles | Your consent, given when you tick the box on the form | 6 months from when we receive it, unless you join us or agree to us keeping it longer |
| You send either form | Your IP address | To stop the forms being misused (spam and repeat submissions) | Legitimate interests | Deleted automatically after 2 days |
| You email us directly | Whatever you include in your email | To reply and deal with your request | Legitimate interests | As for contact form enquiries |
Please don’t include sensitive information, such as health details, in your CV or message unless it’s relevant to your application. You can withdraw your consent for us to keep your CV at any time by emailing info@aquamain.com.
What we don’t do
Our website sets no cookies and shows no advertising. We don’t sell your data or pass it to other companies for their own marketing. We don’t make decisions about you by automated means.
Marketing emails
We sometimes send emails about our services and news to business contacts who have enquired with us or worked with us. We do this because it is in our legitimate interests to keep in touch with the businesses we work with.
You can stop these emails at any time, free of charge, by replying to ask us to stop or by emailing info@aquamain.com. We’ll then keep your email address on a do-not-contact list, only so that we don’t email you again.
Who we share it with
We use a small number of service providers to run the website and handle form submissions. They act on our instructions and may only use your data to provide their service to us.
| Provider | What they do for us | Where |
|---|---|---|
| GitHub, Inc. | Hosts the website | United States |
| Cloudflare, Inc. | Receives form submissions, applies the anti-spam limits, and provides cookie-free website analytics | United States, global network |
| Resend | Delivers form submissions to our email | United States |
| Microsoft | Provides our email (Microsoft 365), where enquiries and CVs are received and kept, and from which we send marketing emails | Microsoft’s cloud services |
Form submissions are not stored on the website itself. They are passed straight to our email at info@aquamain.com (careers) or info@aquamain.com and sales@aquamain.com (enquiries).
We may also share personal data where the law requires it, or to protect our legal rights.
Transfers outside the UK
Some of our providers are based in the United States, so your data may be transferred there. GitHub, Cloudflare, Resend and Microsoft are each certified under the UK Extension to the EU-US Data Privacy Framework. UK law recognises this as giving your data an adequate level of protection.
Cookies
Our website does not use cookies. Our Cookie Policy explains this in more detail, including how our analytics works without them.
Keeping your data secure
The website is served only over an encrypted connection (HTTPS), and the forms send your details over that encrypted connection. Our forms only accept submissions made from our own website. Access to our email is limited to the staff who need it.
If a personal data breach is likely to put your rights at risk, we will report it to the Information Commissioner’s Office within 72 hours of becoming aware of it. If it is likely to put you at high risk, we will tell you directly without undue delay.
Your rights
Under UK data protection law you have the right to:
- be told how your data is used, which is what this policy is for
- get a copy of the personal data we hold about you
- have inaccurate data corrected
- have your data deleted
- restrict how we use your data
- object to us using your data on the basis of legitimate interests
- withdraw your consent at any time, where we rely on it
- receive your data in a portable format, where this applies
To use any of these rights, email info@aquamain.com. We’ll respond within one month. It’s free in most cases.
If you’re unhappy with how we’ve handled your data, please contact us first. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint or 0303 123 1113.
Links to other websites
Our website links to our LinkedIn page. LinkedIn and any other site we link to have their own privacy policies, which apply once you go there.
Changes to this policy
We’ll update this policy when the way we handle personal data changes. The date at the top shows when it was last updated.