Home / Legal / Privacy Policy
Privacy Policy
Last updated
This policy explains how Engineering Technology (“we”, “us”) handles personal data when you visit engg.tech or contact us. It is written to meet the EU General Data Protection Regulation (GDPR) and US state privacy laws, including the California Consumer Privacy Act as amended by the CPRA.
Who is responsible for your data
Engineering Technology is the controller of the personal data described in this policy. For anything about privacy, email info@engg.tech.
What we collect
- Emails you send us: your name, email address, organisation and whatever you include in the message or its attachments.
- Job applications sent to careers@engg.tech: your CV, cover letter, project examples and contact details.
- Technical data handled by our hosting provider: when you visit, GitHub Pages receives your IP address and browser details in server logs so it can deliver and protect the site. We do not use these logs to identify visitors.
We do not use analytics, advertising or tracking tools, and we do not set cookies. The site has no forms: you contact us from your own email app.
Why we use it, and on what legal basis
- Replying to enquiries and preparing proposals: our legitimate interest in answering you, or steps you ask for before a contract (GDPR Article 6(1)(f) and 6(1)(b)).
- Delivering projects for clients: performance of a contract (Article 6(1)(b)).
- Considering job applications: steps before a possible contract, and our legitimate interest in recruiting (Article 6(1)(b) and 6(1)(f)).
- Keeping records the law requires, such as for tax and accounting: legal obligation (Article 6(1)(c)).
- Operating and securing the website: legitimate interest (Article 6(1)(f)).
How long we keep it
- Enquiries that do not lead to work: up to two years after our last contact.
- Client and project records: for the length of the contract and as long afterwards as the law requires.
- Job applications: up to twelve months after we review them, unless you agree to us keeping them longer for future roles.
Who we share it with
Within our team, only the specialists who need your data for the purpose it was given. Outside the team, we use service providers that act on our instructions under data processing terms, such as our email provider and our hosting provider, GitHub, Inc. We disclose data to authorities only when the law requires it.
We do not sell or rent personal data.
International transfers
Our team works from Europe, Australia, the USA, Bangladesh and China, so your data may be accessed from outside the European Economic Area. Where a country has no EU adequacy decision, we rely on the European Commission's Standard Contractual Clauses or another safeguard the GDPR allows. You can ask us for a copy.
Your rights under the GDPR
If the GDPR applies to you, you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data erased
- restrict how we use it
- receive it in a portable format
- object to processing based on our legitimate interests
- withdraw consent at any time, where we rely on consent
Email info@engg.tech to use any of these rights. We reply within one month. You can also complain to the data protection authority where you live or work, or to Sweden's Integritetsskyddsmyndigheten (IMY).
Your rights under US state privacy laws
Depending on where you live, including California, you may have the right to know what personal information we collect and why, to access, correct and delete it, and to opt out of its sale or sharing for targeted advertising.
In the last twelve months we have collected identifiers and professional information from emails sent to us, and internet activity data in our host's server logs, for the purposes above. We do not sell personal information, share it for cross-context behavioural advertising, or use sensitive personal information to infer characteristics about you. We honour Global Privacy Control signals, and we will not treat you differently for using your rights.
To make a request, email info@engg.tech. An authorised agent may make a request for you. We will verify the request before acting on it.
Security
The site is served only over an encrypted connection (HTTPS). We protect the data we hold with technical and organisational measures suited to the risk, and limit access to the people who need it.
Children
Our site and services are for businesses and professionals. They are not directed at children under 16, and we do not knowingly collect their personal data.
Changes to this policy
When we change this policy, we update the date at the top of this page. If a change is significant, we say so on this page.