Privacy Policy

This website is operated by SPACEREL LTD, company number 17484203, whose registered office is Piccadilly Business Centre, Unit C Aldow Enterprise Park, Blackett Street, Manchester, M12 6AE, registered in England and Wales and trading as SPACEREL. We are the controller of personal information described in this notice. Contact us about privacy and your personal data at [email protected]. We provide business-to-business engineering services to customers worldwide. This notice applies to personal information collected through our website and related business enquiries.

When you send an engineering enquiry, we collect your name, organisation, business email address, selected service, industry, project description and requested timescale. Depending on the form and your choices, we may also collect a telephone number, relevant standards, component or system type and other details you provide. Public forms do not accept file uploads.

When you request a publication, we collect your name, organisation, email address, the publication requested, delivery consent and download activity. If you subscribe to Reliability Notes, we collect your email address, optional name and organisation, the source and time of the request, confirmation and withdrawal records, and the version of the privacy notice shown to you.

Our website and security services may process technical information such as IP address, browser and device information, request time, requested page, referring page, security signals and diagnostic logs. We do not ask you to provide special-category personal data through the public website.

Where you consent to Google Analytics 4, we may also collect website usage information, including pages visited, referral sources, approximate geographic location, browser and device information, online identifiers and interactions with our website. We do not intentionally send names, contact details or enquiry-form contents to Google Analytics.

We use enquiry information to review and respond to your request, arrange follow-up, prepare a quotation and, where you ask us to do so, take steps toward an engineering-services contract. Our lawful bases are taking steps at your request before entering a contract and our legitimate interests in operating a business-to-business engineering service, keeping an accurate correspondence history and protecting our legal position.

We use publication-request information to provide the resource you asked for and to protect the download from misuse. We rely on taking the requested step and our legitimate interests in secure delivery and understanding use of our technical resources. Requesting a publication does not subscribe you to marketing.

We send Reliability Notes only after a separate positive choice and email confirmation. We rely on your consent, which you may withdraw at any time using the unsubscribe link. We use technical and security information for our legitimate interests in running, securing, diagnosing and improving the website and, where electronic-communications rules require it, your consent.

We may also use or disclose information where necessary to comply with law, establish or defend legal claims, prevent fraud or protect the rights and safety of Spacerel, users or others.

We use Google Analytics 4 to understand website usage, evaluate the effectiveness of our content and improve the visitor experience. Our lawful basis for this optional analytics processing is your consent under Article 6(1)(a) of the UK GDPR. Google Analytics remains disabled unless you accept optional analytics cookies. You can withdraw consent at any time using Cookie settings on our website, without affecting the lawfulness of processing carried out before withdrawal.

Authorised Spacerel personnel and professional advisers may access information where necessary for their work and subject to confidentiality duties. We use DigitalOcean for application hosting, managed PostgreSQL database services and object storage; Resend for transactional email delivery; Microsoft 365 for the monitored business mailbox; Cloudflare Web Analytics for aggregate website analytics; and, on forms where displayed, Cloudflare Turnstile for abuse prevention. Where you consent to optional analytics, we also use Google Analytics 4, provided by Google, to analyse website usage and interactions. We do not sell personal information.

Some suppliers or their subprocessors may process information outside the United Kingdom. Where UK personal information is transferred to a country without UK adequacy regulations, we rely on an appropriate safeguard made available by the supplier, such as the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful transfer mechanism, together with supplementary measures where required. Supplier locations and subprocessors may change; current details are available from us on request.

SPACEREL uses Cloudflare Web Analytics to understand aggregate website traffic and performance. This service does not use analytics cookies.

We also use Google Analytics 4 (GA4), provided by Google, to understand how visitors interact with our website and improve its content, navigation and performance. Google Analytics is optional and is activated only after you select Accept analytics in our cookie banner.

Google Analytics may use cookies and similar technologies to distinguish visitors and measure website interactions. The retention of analytics information depends on our configured Google Analytics settings and applicable retention periods.

You can accept, reject or withdraw consent for optional analytics at any time using Cookie settings on our website. Further details, including the cookies used and their typical lifetimes, are available in our Cookie Policy.

We keep an engineering enquiry and its correspondence for the duration of the opportunity or engagement and normally for six years after it is closed, unless a longer period is required for a dispute, legal duty or agreed project record. We keep a one-off publication request for 24 months after the last request or download. We keep an active newsletter record while you remain subscribed. After withdrawal, we retain only the information needed to record the opt-out and demonstrate the consent history, normally for six years, so that we do not contact you again by mistake.

Successfully delivered transactional-email bodies are scheduled for deletion after 30 days. Pending or failed deliveries are kept only while needed to complete or investigate delivery and are then deleted under the same schedule. Expired rate-limit records and expired sessions are removed daily. Routine security and service logs are retained for the shortest period supported and needed for security, diagnosis and provider administration.

Backups are kept on a rolling schedule and protected from ordinary access. When information is deleted from live systems, residual copies may remain until the relevant backup or object-version retention period expires; they are used only for recovery and are not restored except when necessary. We review records at closure and when a valid deletion request is received.

Google Analytics data is retained according to the retention settings configured in our Google Analytics account. Analytics cookies may remain on your device for up to two years unless deleted earlier or subject to a shorter configured lifetime. You can withdraw analytics consent through Cookie settings and delete existing cookies through your browser settings.

We use measures including encrypted connections, restricted credentials and staff permissions, multi-factor authentication, private storage for protected publications, time-limited download links, logging controls and recovery arrangements. No internet service can guarantee absolute security.

Please do not include confidential, export-controlled, classified, security-sensitive or commercially sensitive technical information in an initial website enquiry. We will agree suitable confidentiality, access and technical-exchange arrangements before receiving such material.

Depending on the circumstances, UK data-protection law may give you rights to be informed; obtain a copy of your personal information; correct inaccurate information; ask for deletion or restriction; object to processing based on legitimate interests or for direct marketing; obtain certain information in a portable format; and withdraw consent without affecting earlier lawful processing. These rights are not absolute, and we may need to verify your identity.

Send a request or data-protection complaint to [email protected]. We will handle it in accordance with applicable time limits. You may also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint/, although we would appreciate the opportunity to address your concern first.

We may update this notice when our services, suppliers or legal obligations change. The page will show the current version and effective date. Material changes affecting an existing consent will be brought to affected people’s attention and, where required, we will ask for consent again.