How we collect, use, and protect your personal information.
E & M Lifts Ltd
Effective Date: 2 July 2026 · Last Updated: 2 July 2026
E & M Lifts Ltd ("we", "us", "our") is the data controller responsible for the personal data described in this policy.
As a UK business that processes personal data, we are generally required to be registered with the Information Commissioner's Office (ICO) and to pay the annual data protection fee unless a specific exemption applies.
This policy explains what personal data we collect, why we collect it, the lawful bases we rely on, how long we keep it, who we share it with, and the rights you have. It is written to reflect UK data protection law, being the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR) as amended by the Data (Use and Access) Act 2025.
We collect information in two ways: information you provide directly, and information collected automatically when you use our website.
We collect personal information that you voluntarily provide when you:
This may include your name, email address, phone number, and any information you choose to include in your message. Providing this information is voluntary, but without it we may be unable to respond to your enquiry or provide a quotation.
When you visit our website, limited technical information about your device and connection is processed, such as:
This is processed for security, hosting, analytics, and enquiry-management purposes. Our website analytics provider (Fathom) processes this data only briefly and in pseudo-anonymised form and does not store information that identifies you. Where you consent to non-essential cookies, our forms and CRM provider (HubSpot) may also process technical and usage data (see Cookies and Analytics Tools below).
UK GDPR requires us to have a lawful basis for each use of your personal data. We rely on the following:
We use the information we collect to:
We use cookies and similar technologies to make our website work, to understand how it is used, and to support our enquiry and customer-relationship tools.
Strictly necessary cookies are required for core functionality, such as our HubSpot enquiry forms and website security. Under PECR these do not require consent.
Non-essential cookies — mainly HubSpot's website analytics and visitor-tracking cookies (for example __hstc, hubspotutk, __hssc and __hssrc) — are only set where you have given consent through our cookie banner. You can review, change, or withdraw your choices at any time using the "Cookie Settings" link in the footer of any page.
Our own website analytics is provided by Fathom Analytics, which is cookieless and does not set any cookies on your device (see Analytics Tools below). Google Search Console also does not place cookies on your device or track you as an individual visitor.
You can additionally control or disable cookies through your browser settings. Disabling cookies may affect certain features or functionality of the website.
We use analytics tools to understand how visitors use our website and to improve the user experience.
We use HubSpot, a customer relationship management (CRM), forms, and marketing platform provided by HubSpot, Inc. HubSpot powers the enquiry forms on our website and provides visitor tracking and analytics that help us respond to and manage enquiries and understand how visitors interact with our site.
When you submit a form, the information you provide is stored in our HubSpot account so that we can respond to and manage your enquiry. HubSpot also sets cookies to recognise returning visitors and to link website activity to enquiries; these analytics and tracking cookies are non-essential and are only used where you have consented through our cookie banner. Our lawful bases are your consent (for non-essential cookies and any marketing communications) and our legitimate interests, or taking steps at your request prior to entering a contract (for handling your enquiry). HubSpot processes personal data in accordance with its own privacy policy, and any transfers outside the UK are protected by appropriate safeguards (see International Data Transfers below).
Fathom Analytics is a privacy-focused, cookieless web analytics service provided by Conva Ventures Inc. It does not use cookies or similar technologies, does not create advertising profiles, and does not track visitors across other websites. It processes limited technical information, such as your IP address and browser User-Agent, only briefly and in a pseudo-anonymised form, and it does not retain data that could identify you. Because no personal data is stored and no cookies are used, Fathom does not require your consent and runs by default.
For visitors in the UK and EU, Fathom processes data on servers located within the EU. The lawful basis for this processing is our legitimate interests (Article 6(1)(f)), being to understand and improve our website and business in the most privacy-preserving way.
Google Search Console is a tool provided by Google that shows us how our website performs in Google Search. It does not place cookies on your device through our website, does not run a tracking script on our pages, and does not identify individual visitors. The information it provides, such as search terms, impressions, clicks, and ranking positions, is collected by Google through its own search engine and is presented to us in aggregated form, with Google filtering out infrequent search terms so that individuals cannot be identified.
Some of our service providers process personal data outside the UK. Where personal data is transferred outside the UK, we rely on an appropriate safeguard recognised under UK data protection law, such as UK adequacy regulations, or Standard Contractual Clauses together with the UK International Data Transfer Addendum.
We keep personal data only for as long as necessary for the purposes set out in this policy, or as required by law. Our retention periods are:
When data is no longer needed, we securely delete or anonymise it.
We may share limited data with trusted third-party service providers, such as our website host, email provider, and analytics provider, strictly for the purpose of operating and improving our website. These providers act as data processors on our behalf under written contracts and may only use the data as instructed by us.
We do not sell your personal data to third parties. We may disclose personal data where required to do so by law, or to protect our legal rights.
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we take reasonable steps to safeguard your information.
If you are located in the UK or EU, you have the following rights:
To exercise any of these rights, you can submit a request through our online data privacy request form, or contact us using the details below. We will respond within one month of receiving your request, though we may extend this where a request is complex, and we will tell you if that applies.
If you have a concern about how we handle your personal data, please contact us first using the details below so we can try to resolve it. Under the Data (Use and Access) Act 2025, from 19 June 2026 you are expected to raise a data protection complaint with us before escalating it.
If you remain dissatisfied, you have the right to complain to the ICO:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: https://ico.org.uk
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated Effective Date.
If you have any questions about this Privacy Policy or how your data is handled, please contact: