Privacy Policy

This policy explains what personal data Beyond Engineering Consulting Ltd (“Beyond Engineering”, “we”, “us”) collects through beyondeng.co.uk and in the course of our consultancy work, why we collect it, and what rights you have over it. It is written to the UK GDPR and the Data Protection Act 2018.

We are the data controller for that information. Beyond Engineering Consulting Ltd is registered in England and Wales, company number 16089491, at 1 Carlton Parade, Preston Road, Wembley, London HA9 8NE. You can reach us at info@beyondeng.co.uk or 020 8058 1485. [TO CONFIRM: ICO registration number, if BEC is registered as a data controller]

What we collect

When you email, call or connect with us

We hold the contents of your correspondence and the contact details it carries, so that we can answer you and keep a record of what was discussed.

When we work with you

On a live commission we hold the names, job titles, email addresses and telephone numbers of the people we deal with at the client, the design team and the wider project team, together with the project correspondence itself. This is business contact information rather than information about your private life.

When you visit the site

This website does not use cookies, analytics or advertising trackers. We do not profile visitors and we do not build a marketing list from site traffic. Our hosting provider keeps standard server logs, which include IP addresses, for security and troubleshooting. The site loads its typeface from Google Fonts, which means your browser makes a request to a Google server and Google receives your IP address in the process. [TO CONFIRM: hosting provider, and whether to self-host the font to remove the Google request]

Why we are allowed to hold it

• To answer an enquiry and quote for work. Article 6(1)(b), because responding to you is a step taken at your request before entering a contract.
• To deliver a commission. Article 6(1)(b) where our contract is with you personally, or Article 6(1)(f) legitimate interests where our contract is with the company you work for and we simply need to reach you to do the job.
• To run and protect the business — keeping records, chasing payment, securing our systems, taking professional advice. Article 6(1)(f) legitimate interests.
• To meet our legal duties such as tax and accounting records. Article 6(1)(c).

This site carries no enquiry form. You contact us by email or telephone, so the only personal data we hold from the website is whatever you choose to put in that message.

We do not send marketing emails to people who have only made an enquiry. If we ever start a newsletter or similar, it will be opt-in and every message will carry an unsubscribe link.

Who else sees it

We do not sell personal data and we do not share it for anyone else’s marketing. It is seen by:

• our own staff, where they need it to do their work;
• Microsoft, which provides the Microsoft 365 email and document services on which our mail and project files are held;
• our accountants, insurers and professional advisers, where relevant;
• on a live project, the other parties to that project — the client, architect, contractor, local authority and assessment bodies such as BREEAM — because the work cannot be delivered otherwise;
• anyone we are legally obliged to disclose to.

Where it is held

Our systems are hosted in the UK and the European Economic Area wherever possible. Some of our suppliers are international and may process data outside the UK; where that happens we rely on UK adequacy regulations or the International Data Transfer Agreement, and we satisfy ourselves that the data is protected to an equivalent standard. [TO CONFIRM: whether any supplier in the list above processes data outside the UK]

How long we keep it

• Enquiries that do not become work: two years from the last contact, then deleted.
• Project records: for the life of the commission and then for the period during which a claim could still be brought against us, which for a contract executed as a deed is twelve years. [TO CONFIRM: retention period, against BEC’s professional indemnity policy]
• Accounting records: six years from the end of the accounting period, as HMRC requires.

Your rights

You have the right to ask us for a copy of the personal data we hold about you, to have it corrected if it is wrong, and in some circumstances to have it deleted or its use restricted. You can object to processing we carry out under legitimate interests, ask for your data in a portable format, and withdraw consent where consent is what we relied on.

Write to info@beyondeng.co.uk and we will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Children

This is a business-to-business website. It is not directed at children and we do not knowingly collect data about anyone under 18.

Changes

If we change this policy we will update the date below. Where the change is significant we will say so on the page.

Last updated 3 September 2026.