Privacy Policy

ACL Engineering Ltd is a controller of your personal data. We respect your data and your privacy is important to us.

This Privacy Notice explains what personal data we collect and how it is used. This notice also explains what rights you have over your personal data and how you can use those rights.

You have the right to object to some of the processing which ACL Engineering carries out. More information about your rights and how to exercise these is set out in the “Your rights” section of this notice.

ACL Engineering Ltd registered address is Anglia House, Sandown Road, Watford, WD24 7UA.

  1. Summary of how we use your data and your rights
  2. Information we collect from you
  3. Information we receive from third parties
  4. How we use information and the legal basis
  5. Data sharing
  6. Cookies and similar technologies
  7. Data retention
  8. Your rights
  9. Contact details

1. Summary of how we use your data and your rights

We use your data to perform our contract with you, to comply with laws and regulations, and for safety and security purposes.

We may contact you to keep you updated on new or more efficient equipment and to remind you when your current equipment is due for service.

We will use your data to comply with laws and regulations. We may use your data to prevent and detect crime, such as fraud.

2. Information we collect from you

We collect information when you contact us requesting a quote or other information and during your contract with us.

  • We keep information you give us directly such as contact details (including name, email, address and telephone number);
  • If there is an incident, we may need to log information about it.

3. Information we receive from third parties

We may receive your contact details from third parties to which you have requested information on the products /services we provide.

We receive information from the following third parties:

  • Atlas Copco
  • KMB

4. How we use information and the legal basis

We are allowed to use your data only if we have a proper reason to do so such as:

  • To fulfil a contract we have with you;
  • When it is in our legitimate interest;
  • When you consent to it; or
  • To comply with the law.

ACL Engineering needs to hold and process personal data relating to its clients in order to keep proper records, monitor payment, performance and contractual obligations.

A legitimate interest is when we have a business or commercial reason to use your data. This involves us making an assessment of when we can rely on our legitimate interests. For more information on this assessment please e-mail us at

We have set out below how and why we may use your personal information and the legal basis we rely on. This is also where we tell you what our legitimate interests are.

When you buy our products and/or services, we use your information to fulfil our contract with you.

We take information to communicate with you, send you goods, perform a service, invoice you and comply with our legal obligations.

To run our business and pursue our legitimate interests, we use your information.

Our legitimate interests include keeping our records up to date, fulfilling our legal, compliance and contractual duties, working out which of our products/services may interest you and telling you about them.

Further details of our legitimate interests:

To comply with law, assess and uphold legal or contractual rights and claims:

  • We may pass your contact details to suppliers and our insurers when necessary (for further details see Data sharing below)
  • We keep records to comply with health and safety legislation, including logging accidents.

When you don’t have a contract with us but have consented to be contacted by us

We may contact you to inform you of our products/services that may interest you and telling you about them.

You can change your mind at any time, just let us know that you no longer want to receive communication from us, by e-mail to or post to: GDPR, Steve Smithard, ACL Engineering Ltd, Anglian House, Sandown Road, Watford, WD24 7UA.

When the law requires us to process your data we will do so.  This can include

  • Legal, compliance, regulatory and investigative purposes, including for HSE, government agencies and law enforcement.

5. Data sharing

When required for compliance with H&S legislations we share your data with our suppliers. We my share your data with HSE.

For some activities ACL Engineering Ltd uses third party service providers.  When these service providers ask for data from you we may share information with them.

We use third party providers for the following services:

  • Insurance
  • Certification and accreditation
  • IT support
  • Credit checks
  • Delivery of products/services

Personal data may be shared with government authorities and/or law enforcement officials for the prevention or detection of crime, if required by law or if required for a legal or contractual claim.

6. Cookies and similar technologies

Our website, apps and marketing emails use cookies and similar technology. Full information is in our Cookie Notice. This includes information on how to adjust your browser settings to accept or reject cookies.

7. Data retention

We always look to keep your data for the minimum time in line with data protection principles and our processes.  We keep your data whilst you are a client and for five years after providing a product/service or quotation.

We may keep your data for longer if we cannot delete it for legal, regulatory or technical reasons.

8. Your rights

You have rights over your personal data.

You can:

  • ask for a copy of your information;
  • ask for information to be corrected;
  • ask for information to be erased or deleted;
  • ask for us to limit or restrict processing;
  • object to us processing your data.  The right to object does not apply if we must process the data to meet a contractual or legal requirement;
  • ask us to send you a copy in a structured digital format or ask for us to send it to another party.

Some rights, however, may be limited. We may be obliged by law or regulation to keep information.  We must respect other people’s privacy as well, which means we may need to redact or remove information where it includes personal data about someone else, even if it is connected to your data.  On occasion there may be a compelling legitimate interest to keep processing data.

If you want a copy of your data, to object to how we use your data, or ask us to delete it or restrict how we use it or, please see ‘Contact details’ below.  To process a request from you, we may need to confirm your identity to ensure we’re accessing the right data.

You have a right to complain to an EU data protection authority.  This can be where you live, work or where the matter occurred. In the UK, the authority is the Information Commissioner’s Office (the “ICO”).

9. Contact details

To exercise any of your rights and for any queries relating to data protection please contact us at

If we make any changes or updates to this notice we will communicate these.

Useful link from ICO explaining GDPR –