top of page

Privacy Policy

Last updated: 3 July 2026

Sandown Engineering Solutions Ltd respects your privacy and is committed to protecting your personal information.

​

This Privacy Policy explains how we collect, use, store and share personal information when you:

  • visit our website;

  • contact us or submit an enquiry;

  • complete our Ideal Customer Profile questionnaire;

  • book a call with us;

  • become a client, supplier or business contact;

  • receive business-to-business communications from us; or

  • interact with our lead generation and outreach services.

 

We process personal information in line with the UK General Data Protection Regulation, the Data Protection Act 2018 and applicable direct marketing and electronic communications rules.

1. Who we are

Sandown Engineering Solutions Ltd provides managed lead generation, prospect research, outreach and qualification services for engineering and manufacturing businesses.

For data protection purposes, Sandown Engineering Solutions Ltd is the data controller where we decide how and why your personal information is used.

​

Company name: Sandown Engineering Solutions Ltd
Company number: 17231018.
Email: info@sandownengineering.com
Website: https://sandownengineering.com

​

Questions about this policy or the use of your information should be sent to the email address above.

2. Personal information we collect

Depending on how you interact with us, we may collect:

​

Information you provide directly

​

  • your name;

  • business email address;

  • telephone number;

  • job title and employer;

  • information entered into a contact or enquiry form;

  • information supplied through the free ICP questionnaire;

  • details about your business, offer, target sectors and ideal customers;

  • appointment and call-booking information;

  • correspondence, feedback and meeting notes;

  • contract, invoicing and payment information; and

  • any other information you choose to provide.

 

Please avoid sending sensitive personal information through our website forms unless it is necessary and we have asked you to provide it.

​

Information collected from business sources

​

When researching organisations and relevant business contacts, we may collect:

  • name;

  • job title;

  • employer;

  • professional contact details;

  • location or territory;

  • publicly available career information;

  • business interests relevant to a campaign;

  • records of professional communications;

  • campaign engagement and response information; and

  • information about the organisation you represent.

 

This information may come from:

  • company websites;

  • professional networking platforms such as LinkedIn;

  • public registers and business directories;

  • industry publications;

  • events and professional networks;

  • our clients;

  • specialist business-data providers; and

  • information previously shared with Sandown.

 

We do not intentionally collect personal information that is unrelated to a person’s professional role.

​

Website and technical information

​

Subject to your cookie choices, we may collect:

  • IP address;

  • browser and device type;

  • pages viewed;

  • referral source;

  • approximate location;

  • date and time of access;

  • form interactions; and

  • cookie and analytics information.

 

Further details should also appear in our Cookie Policy.

3. How we use personal information

We may use personal information to:

  • respond to enquiries and messages;

  • arrange and manage calls or meetings;

  • prepare an initial ICP or market-mapping review;

  • assess whether Sandown’s services are suitable for a business;

  • prepare proposals, contracts and campaign plans;

  • provide and manage our services;

  • research target organisations and relevant decision-makers;

  • run approved business-to-business outreach campaigns;

  • review and qualify responses;

  • pass relevant responses to the client for whom a campaign is being managed;

  • manage client, supplier and partner relationships;

  • provide campaign reports;

  • improve targeting, messaging and service quality;

  • maintain records of communications and preferences;

  • prevent fraud, misuse and security incidents;

  • meet legal, tax and accounting duties;

  • establish, exercise or defend legal claims; and

  • improve our website and understand how it is used.

 

We will not sell your personal information.

4. Our lawful bases

UK data protection law requires us to have a lawful basis for each use of personal information.

 

Contract

We may process information where it is necessary to:

  • take steps at your request before entering into a contract;

  • prepare a proposal;

  • provide services under a contract; or

  • manage payments, delivery and client support.

 

Legitimate interests

We may process information where it is necessary for our legitimate business interests, provided those interests do not override your rights.

 

These interests may include:

  • responding to business enquiries;

  • researching relevant organisations and professional contacts;

  • promoting Sandown’s services to suitable business audiences;

  • running business-to-business campaigns for our clients;

  • managing commercial relationships;

  • improving our services and campaign performance;

  • maintaining accurate records;

  • protecting our website and systems; and

  • establishing or defending legal claims.

 

When relying on legitimate interests, we consider the nature of the information, the context in which it was obtained, the reasonable expectations of the person concerned and the possible effect of the processing.

 

Consent

We may rely on consent where required, including for:

  • optional cookies;

  • certain forms of electronic marketing; and

  • any other activity for which we specifically ask for permission.

 

You may withdraw consent at any time. Withdrawal will not affect processing already carried out lawfully before consent was withdrawn.

 

Legal obligation

We may use information where necessary to comply with legal, regulatory, tax, accounting or law-enforcement duties.

5. Business-to-business outreach

Sandown provides managed outreach services aimed at organisations and professional decision-makers.

 

Where we contact you in a professional capacity, we may use information obtained from public business sources, a client, a business-data provider or previous professional contact.

 

We may process this information because:

  • your role appears relevant to the products or services being discussed;

  • the communication relates to your professional responsibilities;

  • Sandown or its client has a legitimate commercial interest in contacting suitable organisations; and

  • we have considered the likely effect on your privacy.

 

Every outreach message should identify the sender and provide a way to ask that further communications stop.

 

You may object to direct marketing at any time. Once an objection is received, your details may be retained on a suppression list so that your preference can be respected.

6. When Sandown acts for a client

For some lead generation activities, Sandown processes information on behalf of a client.

 

The client may be the data controller because it determines:

  • the campaign purpose;

  • target sectors;

  • target company profile;

  • relevant buyer roles; and

  • how qualified responses will be used.

 

Sandown may act as a data processor when carrying out the client’s instructions. In some circumstances, Sandown may act as an independent controller for its own business administration, compliance, security and service-improvement purposes.

 

Where appropriate, our contracts set out each party’s data protection responsibilities.

7. Free ICP questionnaire

When you request a free Ideal Customer Profile, we may ask for information about:

  • your organisation;

  • your products or services;

  • target sectors;

  • typical customer size;

  • buyer roles;

  • geographic focus;

  • current sales activity;

  • commercial aims; and

  • your contact details.

 

We use this information to review your market, prepare an initial ICP and contact you about the result.

 

Submitting the questionnaire does not require you to purchase Sandown’s services.

8. Booking a call

Our website may link to a third-party scheduling service, such as Calendly.

 

When you book a call, the scheduling provider may collect your name, contact details, time zone, appointment preferences and information you enter into the booking form.

 

That provider processes information under its own privacy terms and may also act as a service provider to Sandown.

9. Who we share information with

We may share personal information where necessary with:

  • clients for whom we manage an approved campaign;

  • website hosting and website-management providers;

  • email and communications providers;

  • booking and calendar providers;

  • customer relationship management systems;

  • campaign and prospect-research platforms;

  • analytics and cookie providers;

  • cloud storage and document providers;

  • accountants, legal advisers and professional consultants;

  • insurers;

  • payment providers;

  • public authorities, courts or regulators where required by law; and

  • a buyer, investor or adviser involved in a proposed business sale, merger or restructuring.

Current providers may include:

  • Wix, for website hosting and website forms;

  • Calendly, for appointment booking;

  • LinkedIn, for professional networking and outreach.

We require service providers to protect personal information and use it only for authorised purposes.

10. International transfers

Some service providers may store or process information outside the United Kingdom.

 

Where personal information is transferred internationally, we take reasonable steps to ensure that an appropriate legal safeguard is used. This may include:

​

  • a UK adequacy regulation;

  • approved contractual clauses;

  • the UK International Data Transfer Agreement;

  • the UK Addendum to approved standard contractual clauses; or

  • another safeguard allowed by data protection law.

11. How long we retain information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, contractual, tax and accounting requirements.

 

Our intended retention periods are:

12. Security

We use reasonable technical and organisational measures to protect personal information from:

  • unauthorised access;

  • accidental loss;

  • misuse;

  • alteration;

  • disclosure; and

  • destruction.

 

These measures may include access controls, password protection, secure cloud services, staff or contractor confidentiality duties, system updates and regular reviews of the information we hold.

 

No internet or electronic storage system can be guaranteed to be completely secure.

13. Your rights

Depending on the circumstances, you may have the right to:

  • ask for access to your personal information;

  • ask us to correct inaccurate or incomplete information;

  • ask us to erase your information;

  • ask us to restrict how information is used;

  • object to processing based on legitimate interests;

  • object to direct marketing at any time;

  • ask for certain information in a portable format;

  • withdraw consent where processing relies on consent; and

  • complain to the Information Commissioner’s Office.

 

Data protection requests should be sent to:

info@sandownengineering.com

We may need to confirm your identity before completing a request. Data protection requests normally need to be answered within one month.

14. Automated decision-making

Sandown may use software and AI-supported tools to assist with prospect research, campaign organisation, data matching and prioritisation.

​

These tools support human-led commercial activity. Sandown does not intend to make decisions that produce legal or similarly significant effects on individuals solely through automated processing.

​

Targeting, messaging, response review and qualification remain subject to human direction or review.

15. Cookies

Our website uses cookies and similar technologies.

 

Some cookies are necessary for the website to function. Optional cookies, such as analytics or marketing cookies, should only be used in line with your cookie choices.

 

Please read our separate Cookie Policy for details of:

  • the cookies used;

  • their purposes;

  • their duration;

  • the providers involved; and

  • how to change your preferences.

16. Links to other websites

Our website may contain links to other websites, including LinkedIn and Calendly.

 

Sandown is not responsible for the privacy practices of third-party websites. You should review the privacy information provided by those organisations before submitting personal information.

17. Complaints

Please contact us first so that we have an opportunity to address your concern:

info@sandownengineering.com

​

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection.

18. Changes to this policy

We may update this Privacy Policy to reflect changes to our services, systems, suppliers or legal duties.

​

The latest version will be published on this page with the date of the most recent update.

bottom of page