Privacy Policy

Introduction

Nexgen Electrical Innovations Ltd (“we”, “us”, “our”) is committed to protecting your personal information and being transparent about how we use it. This Privacy Policy explains what personal data we collect, the lawful basis on which we process it, how it is used, who it is shared with, how long we keep it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this policy carefully. By using our website or enquiring about our services, you acknowledge that you have read and understood it.

Who We Are

Nexgen Electrical Innovations Ltd is the data controller for all personal data collected through this website and in connection with our services. As a NICEIC Approved Contractor, we are bound by applicable data protection legislation when handling records required for regulatory compliance.

Data Controller: Nexgen Electrical Innovations Ltd

Email: privacy@nexgen-electrical.co.uk

Information We Collect

We collect personal information through three secure forms on our website. Each form collects only the data required to progress your enquiry or deliver your service.

Contact / Enquiry Form

• Full name
• Email address
• Phone number
• Type of service required
• Message / description of your requirement
• Marketing consent preference (optional, pre-unchecked)

Quotation Request Form

• Full name and company name (if applicable)
• Email address and phone number
• Property address where work is required
• Scope of work and any relevant drawings or specifications
• Preferred start date and timeline
• Approximate budget range (optional)
• Marketing consent preference (optional, pre-unchecked)

Emergency Services Form

• Full name
• Phone number (for immediate callback)
• Property address
• Description of the fault or emergency
• Urgency level

EV Campaign Gate Form

Our EV charging grant pack campaign uses a double opt-in process: you submit your details, confirm via an emailed verification link, and the documents are then sent to you. We collect:

• First name
• Email address
• Company or site name (optional)
• Sector (optional)
• Marketing consent preference (optional, pre-unchecked, recorded separately from document delivery)

Sending the verification email and the requested grant pack documents is service delivery, not marketing — it is carried out under our legitimate interest in responding to your request (UK GDPR Art.6(1)(f)) and is not affected by your marketing consent choice. Only future marketing communications require, and rely on, your separate opt-in consent (Art.6(1)(a)). This distinction reflects PECR rules on service versus marketing electronic communications.

Website Usage Data

We collect standard web server logs and anonymised analytics data (page views, session duration, device type, approximate geographic location) through our analytics platform. This data does not identify you personally and is used solely to improve the performance and usability of our website.

Legal Basis for Processing

We process personal data under the following lawful bases in accordance with Article 6 of the UK GDPR:

• Performance of a contract (Art. 6(1)(b)) — to respond to your enquiry, prepare a quotation, schedule the work, manage your job, and issue completion certificates
• Legal obligation (Art. 6(1)(c)) — to comply with NICEIC Approved Contractor requirements, Building Regulations Part P notification obligations, Electricity at Work Regulations 1989 record-keeping duties, and HMRC requirements
• Legitimate interests (Art. 6(1)(f)) — to maintain an auditable job lifecycle record from initial enquiry through to completion; to manage insurance claims and complaints; to improve our services
• Consent (Art. 6(1)(a)) — for marketing communications (newsletter, campaign updates, social media content), where you have explicitly opted in via an unchecked checkbox on our forms. This consent is separate from service delivery and may be withdrawn at any time

How We Use Your Information

We use the personal information you provide for the following purposes:

• Responding to your enquiry or contact form submission
• Preparing and issuing quotations
• Scheduling and coordinating electrical work at your property
• Issuing Electrical Installation Certificates, EICRs, and other statutory documentation
• Processing payments and managing invoices
• Managing warranty and aftercare communications
• Sending marketing communications (only if you have opted in — see Marketing & Communications section)
• Complying with regulatory and legal obligations

Job Lifecycle & Audit Trail

Information submitted through our enquiry, quotation, and emergency forms is used to create and maintain a complete, auditable record of each job — from initial client contact through to final sign-off. This job lifecycle record includes:

• Initial enquiry details and scope of work
• Survey notes and site assessment records
• Accepted quotation and any agreed variations
• Work schedules, site visit logs, and engineer attendance records
• Completion certificates and statutory notifications
• Payment records and invoices
• Aftercare communications and warranty claims

This audit trail is maintained to satisfy our obligations under the NICEIC Approved Contractor Scheme, Building Regulations Approved Document P, and the Electricity at Work Regulations 1989. It also protects both parties in the event of a query, complaint, or legal dispute.

Data Sharing

We do NOT sell, rent, lease, trade, or otherwise transfer your personal information to any third party for marketing, commercial, or any other purpose unrelated to the delivery of your electrical services.

We share your information only in the following strictly limited circumstances:

• Sub-contractors and specialist engineers engaged directly by us to assist with your job — only the information they need to carry out that specific work, under our instruction and bound by confidentiality obligations equivalent to those in this policy
• NICEIC — registration of notifiable electrical work as required by the NICEIC Approved Contractor Scheme and Building Regulations Part P
• Local Authority Building Control (LABC) — for Part P notifications where the work requires formal Building Regulations approval
• Our insurers — solely in connection with a claim arising from work at your property, to the extent necessary to process that claim
• Legal and regulatory authorities — where we are required to do so by law, court order, or at the request of HMRC, the ICO, the Health and Safety Executive, or another competent authority
• Resend — our transactional email provider, used to send campaign verification links and document delivery emails for the EV campaign gate
• Cloudflare Turnstile — bot-protection check run when you submit the EV campaign gate form, to prevent automated abuse

Hosting Infrastructure

Our website and the services described in this policy are hosted on Vercel. Vercel processes web traffic and request data as part of delivering our site to you, under its own data processing terms, but does not have independent access to use your personal information for its own purposes.

How Long We Keep Your Data

• Job records (completed work): 6 years from the date of practical completion — aligns with NICEIC Platinum Promise coverage, HMRC requirements, and the Limitation Act 1980
• Unanswered enquiries / no work carried out: 12 months from the date of enquiry, after which data is securely deleted
• Electrical certificates (EICs, EICRs): retained for the life of the installation or 10 years, whichever is longer, to support future inspection and compliance queries
• Marketing consent records: retained for the duration of the consent plus 12 months to demonstrate compliance, including the consent timestamp, form used, and policy version in force at the time
• Website analytics: anonymised data is retained for 26 months; no personally identifiable analytics data is retained beyond 30 days

Your Rights Under UK GDPR

Under the UK GDPR and Data Protection Act 2018, you have the following rights regarding your personal data:

• Right of access — request a copy of all personal data we hold about you (Subject Access Request)
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your data where processing is no longer necessary or lawful (note: we may need to retain records for legal or regulatory compliance)
• Right to restriction — request that we limit processing of your data in certain circumstances
• Right to data portability — receive a copy of your data in a structured, machine-readable format, where technically feasible
• Right to object — object to processing based on legitimate interests, including direct marketing (which we will always honour immediately)
• Right to withdraw consent — where processing is based on consent (e.g., marketing emails), withdraw consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at privacy@nexgen-electrical.co.uk. We will respond within one calendar month. There is no charge for exercising your rights unless requests are manifestly unfounded or excessive.

Marketing & Communications

We send marketing communications only to individuals who have given us explicit, freely given, opt-in consent — via an unchecked checkbox on our Contact, Quotation, or Emergency forms. Ticking this box is entirely optional and has no effect on whether we carry out your electrical work.

What We Send

If you opt in, you may receive:

• Email newsletters — electrical safety tips, seasonal guidance, and company news
• Project showcases — highlights of recent installations and case studies
• Service announcements — new services, EV charging offers, smart home packages
• Campaign promotions — seasonal offers and relevant industry updates
• Social media engagement content — invitations to follow our pages or share feedback

Withdrawing Consent

You can withdraw marketing consent at any time by clicking the unsubscribe link in any email we send, or by contacting us at privacy@nexgen-electrical.co.uk. We will act on your request within 48 hours. Withdrawing consent does not affect the lawfulness of any processing that occurred before withdrawal, and does not affect your service relationship with us in any way.

Consent Record

We record the timestamp of your consent, the form used, the exact consent wording you agreed to, and the version of this Privacy Policy that was in force at the time. This record is retained for the duration of the consent plus 12 months and is your GDPR audit trail, not used for any other purpose.

Cookies

Our website uses cookies — small text files stored on your device — to make it work correctly and to understand how it is used. We use:

• Strictly necessary cookies — required for the website to function (e.g., form security tokens). These cannot be disabled
• Analytics cookies — anonymised data to understand how visitors use the site. You can opt out via your browser settings or our cookie preference centre

We do not use advertising, tracking, or third-party social media cookies. You can manage cookie preferences at any time in your browser settings.

Security

We implement appropriate technical and organisational measures to protect your personal information against accidental loss, unauthorised access, alteration, or disclosure. All data transmitted via our website forms is encrypted in transit (TLS). Access to client records is restricted to personnel who need it to perform their role.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours and inform you without undue delay where required.

Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material — particularly those affecting how we use your data or your rights — we will publish a notice on our website and, where we hold your contact details, notify you directly at least 30 days before the new version takes effect.

If we update this policy and you have given marketing consent, we will record the policy version against which your consent was given. If a material change affects how we use your data for marketing, we will seek fresh consent.

Contact & Complaints

To exercise your rights, ask questions about this policy, or raise a data protection concern, please contact our Data Lead:

Nexgen Electrical Innovations Ltd

Email: privacy@nexgen-electrical.co.uk

We will respond to all data protection requests within one calendar month. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

ICO helpline: 0303 123 1113

ICO website: ico.org.uk