Privacy Policy

1. Who we are (controller)

This website is operated by Timsons Engineering Ltd, a company registered in England and Wales (company number 9125170), with its registered office at Water Street, Kettering, Northamptonshire, NN16 0JR, United Kingdom (“Timsons”, “we”, “us”). Our works and correspondence address is Bath Road, Kettering, Northamptonshire, NN16 8NQ, United Kingdom.

Timsons is the data controller for personal data collected through this website. Timsons is part of the Magnum group of companies; where data is shared within the group, this is explained in section 6.

Contact: giovanni.piazza@timsonsengineering.com (Attn: Privacy Officer).

2. What personal data we collect

• Contact and enquiry data — name, company, email address, phone number, country, and the contents of your message, when you use our contact forms or email us.
• Demo and meeting bookings — name, email, and scheduling details when you book a meeting through Calendly.
• Marketing preferences — whether you have opted in to receive marketing from us.
• Technical and usage data — IP address, browser type, device information, pages visited, and how you interact with the site, collected via cookies and similar technologies (see our Cookie Policy).
• Business relationship data — records of correspondence, quotes, and orders if you become a customer or supplier.

We do not knowingly collect special category data through this website, and the site is not directed at children.

3. How we use your data, and our legal bases (UK GDPR Article 6)

Purpose	Legal basis
Responding to enquiries and providing quotes	Legitimate interests (responding to a business enquiry you initiated), or steps prior to a contract
Arranging demos and meetings	Steps prior to a contract / legitimate interests
Performing a contract with your company	Contract; legitimate interests where you are a contact at a corporate customer
Sending marketing emails	Consent (withdrawable at any time); or the limited “soft opt-in” under PECR for existing customers, always with an opt-out in every message
Website analytics and improvement	Consent (for non-essential cookies)
Security, fraud prevention, site operation	Legitimate interests (keeping the site and our systems secure)
Complying with law (tax, accounting, export control)	Legal obligation

Where we rely on legitimate interests, we have balanced those interests against your rights and concluded they are not overridden; you can object at any time (section 9).

4. Cookies and similar technologies

We use cookies for essential site functions and — only with your consent — analytics and marketing. Non-essential cookies are set only after you opt in via the cookie banner, and you can change your choice at any time via Cookie settings in the footer. Full details are in our Cookie Policy.

5. Who processes data on our behalf

We use trusted service providers acting as processors under UK GDPR Article 28 contracts:

• Netlify, Inc. (USA) — website hosting and form handling
• HubSpot, Inc. (USA/EU) — CRM and email
• Google LLC (USA) — Google Analytics 4 (only with consent)
• Calendly LLC (USA) — meeting scheduling
• LinkedIn Corporation (USA) — advertising measurement (only with consent)
• IT, security, and professional service providers

6. Sharing within the Magnum group

Timsons is part of the Magnum group. We share personal data with Magnum Digital Solutions Inc (Barrie, Ontario, Canada) and Timsons Inc (USA) where needed to respond to your enquiry (for example, if you are based in the Americas), to provide products and services, or for group administration. Intra-group sharing is governed by a data sharing agreement, and each recipient handles your data consistently with this policy. We never sell personal data.

7. International transfers

We are based in the UK. Some of our processors and group companies are outside the UK:

• Canada — covered by UK adequacy regulations for data subject to PIPEDA.
• USA and elsewhere — transfers are protected by the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, and where applicable the UK Extension to the EU–US Data Privacy Framework for certified recipients.

You can request a copy of the relevant safeguards via giovanni.piazza@timsonsengineering.com (Attn: Privacy Officer).

8. How long we keep your data

• Enquiries that do not become business: up to 2 years after last contact.
• Marketing consent records: for as long as you remain subscribed, plus a record of withdrawal.
• Customer and contract records: 7 years after the end of the relationship (tax and legal requirements).
• Analytics data: per the retention settings described in our Cookie Policy (14 months).

When data is no longer needed, it is deleted or irreversibly anonymised.

9. Your rights

Under UK GDPR (and EU GDPR where it applies) you have the right to: access your data; rectify inaccurate data; erase data; restrict processing; data portability; object to processing based on legitimate interests, and to object to direct marketing at any time (we will stop immediately); and withdraw consent at any time without affecting prior processing.

To exercise any right, contact giovanni.piazza@timsonsengineering.com (Attn: Privacy Officer). We may need to verify your identity. Exercising your rights is free of charge, and we will respond within one month.

Complaints: you can complain to the UK Information Commissioner’s Office (ICO) — ico.org.uk, +44 303 123 1113, or by post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. If you are in the EU/EEA, you may complain to your local supervisory authority. We’d appreciate the chance to resolve your concern first.

10. Security

We apply appropriate technical and organisational measures: encryption in transit (TLS), access controls, least-privilege administration of our marketing tools, and staff awareness. No system is completely secure; if a breach affecting your rights occurs, we will notify the ICO and, where required, you, in line with UK GDPR Articles 33–34.

11. Automated decision-making

We do not make decisions with legal or similarly significant effects about you by automated means.

12. Children’s privacy

This website is aimed at business users. We do not knowingly collect personal data from anyone under 16, and we do not direct marketing at children. If you believe a child has given us personal data, contact giovanni.piazza@timsonsengineering.com (Attn: Privacy Officer) and we will delete it.

13. Third-party links

Our site links to other websites, including magnumds.com. Their privacy practices are governed by their own policies.

14. Changes to this policy

We will post any changes on this page and update the date above. Material changes will be flagged prominently.

15. Contact us

Timsons Engineering Ltd, Water Street, Kettering, Northamptonshire NN16 0JR, United Kingdom · giovanni.piazza@timsonsengineering.com (Attn: Privacy Officer)