Privacy Policy

Prodysn Engineering Consultancy ("Prodysn", "we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, contact us, or use our consultancy services related to process engineering, process safety, HAZOP support, risk assessments, process optimisation, and technical advisory services.

This policy is intended to comply with the UK GDPR, the Data Protection Act 2018, and applicable privacy and electronic communications laws.

1) Who We Are

Prodysn Engineering Consultancy
Email: info@prodysn.com

If you have any questions about this Privacy Policy or how we process your personal data, please contact us using the details above.

2) Information We Collect

We may collect and process the following categories of personal data:

A. Information You Provide Directly

Name
Company name
Job title
Email address
Telephone number
Postal address
Project details or enquiry information
Any documents, PFDs, P&IDs, safety studies, reports, or technical files you choose to send us
Information submitted through contact forms, proposal requests, or newsletter sign-ups

B. Technical and Website Usage Data

When you use our website, we may automatically collect:

IP address
Browser type and version
Device type
Operating system
Pages visited
Time spent on pages
Referring website
Date and time of access
General geographic location derived from IP
Cookie and analytics identifiers

C. Business and Project Data

Where relevant to consultancy work, we may process:

Site or plant operating data
Process performance information
Safety study outputs
Hazard registers
Compliance records
Engineering calculations
Project correspondence

Where such information contains personal data, we process it only as necessary for service delivery.

3) How We Use Your Information

We use personal data for the following purposes:

To respond to enquiries and proposal requests
To deliver engineering consultancy and process safety services
To prepare scopes of work, quotations, and contracts
To manage client relationships and project communications
To conduct HAZOPs, SIL reviews, risk assessments, and technical studies
To improve our website, services, and user experience
To send service updates, insights, or marketing communications where permitted
To maintain website security and prevent fraud or misuse
To comply with legal, regulatory, insurance, and contractual obligations
To establish, exercise, or defend legal claims

4) Lawful Basis for Processing

Under UK GDPR, our lawful bases may include:

Contract: where processing is necessary to provide consultancy services or respond to a request before entering a contract
Legitimate interests: to operate, improve, and secure our business and website
Legal obligation: where required for compliance, tax, health and safety, or regulatory reasons
Consent: for optional cookies, newsletters, or marketing communications

5) Cookies and Analytics

Our website may use cookies and similar technologies for:

Essential website functionality
Performance and analytics
Security monitoring
User preferences
Marketing (if applicable)

Where legally required, we will request your consent before placing non-essential cookies.

You can manage cookies through your browser settings or our cookie banner.

A separate Cookie Policy may also be provided.

6) How We Share Information

We do not sell personal data.

We may share information with trusted third parties where necessary, including:

IT hosting and website providers
Cloud storage and collaboration platforms
CRM and email service providers
Professional advisers (legal, insurance, accountants)
Regulatory authorities where legally required
Specialist subcontractors or associate consultants involved in project delivery

All third parties are required to protect data and only process it in line with our instructions.

7) International Transfers

If we use service providers outside the UK, we will ensure appropriate safeguards are in place, such as:

UK adequacy regulations
International Data Transfer Agreements (IDTA)
Standard contractual clauses
Equivalent contractual and technical protections

8) Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

Access controls and role-based permissions
Secure cloud storage
Encryption in transit and where appropriate at rest
Confidentiality obligations for staff and associates
Secure handling of engineering and safety documentation
Regular software and security updates

Because consultancy work may involve commercially sensitive process safety information, we apply heightened confidentiality controls to project files and client documentation.

9) Data Retention

We retain personal data only for as long as necessary for:

Enquiry follow-up
Contract performance
Regulatory compliance
Insurance and liability purposes
Professional record-keeping
Legal claims defence

Typical retention periods may include:

General enquiries: 12–24 months
Client project records: 6–12 years, depending on contractual and liability requirements
Marketing consents: until withdrawn

Retention periods may be extended where necessary for ongoing projects or legal obligations.

10) Your Privacy Rights

Subject to applicable law, you may have the right to:

Access your personal data
Correct inaccurate data
Request deletion
Restrict processing
Object to processing based on legitimate interests
Withdraw consent at any time
Request transfer of your data where applicable
Lodge a complaint with the UK Information Commissioner’s Office (ICO)

11) Third-Party Links

Our website may contain links to third-party websites, industry resources, software vendors, or professional bodies. We are not responsible for the privacy practices of those external sites.

12) Children’s Privacy

Our services and website are intended for business and professional users and are not directed at children under 13.

13) Updates to This Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. The latest version will always be posted on this page with the updated effective date.

14) Contact and Complaints

If you have concerns about how we handle personal data, please contact us first.

You also have the right to complain to the Information Commissioner’s Office (ICO) in the United Kingdom.