Privacy Policy

Last updated: 27/07/2026

1. Introduction

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, submit enquiries, or use our services. We are committed to protecting your privacy and ensuring transparency about our data practices. This policy complies with the General Data Protection Regulation (GDPR) and UK data protection laws.

If you have any questions about this policy or how we handle your data, please contact us at the details provided in Section 8 below.

---

2. Who We Are

Skuma Innovation, a technical consultancy providing advice to manufacturing and engineering businesses. You can contact us at enquiries@skuma.co.uk.

Our Data Protection Officer / Privacy Contact: Nick Riess/Founder - Skuma Innovation, nriess@skuma.co.uk

---

3. What Personal Data We Collect

We collect the following types of personal data:

###From Enquiry Forms and Direct Contact

- Full name

- Email address

- Phone number

- Company name and industry

- Details of your enquiry or project

- Any technical information, product specifications, or process details you provide

### From Website Use

- Device information (browser type, operating system, device type)

- IP address

- Pages visited and time spent on each page

- Referral source

- Interaction data (links clicked, forms started)

### From Cookies and Analytics

- Browsing behaviour and preferences

- Usage patterns and analytics data via Google Analytics

---

4. How We Collect Your Data

We collect personal data through:

- Enquiry forms on our website

- Direct contact (email, phone, contact form submissions)

- Cookies and tracking technologies (see Section 6)

- Google Analytics, we use this service to understand how visitors use our website

---

5. Why We Collect Your Data and How We Use It

We collect and use your data for the following purposes:

| Purpose | Legal Basis | Data Used |

|---------|------------|-----------|

| Respond to enquiries and provide technical advice | Contract / Legitimate interest | Name, email, phone, enquiry details |

| Deliver services and consultancy | Contract | Name, email, company info, product/process data |

| Improve our website, services, and user experience | Legitimate interest | Usage data, analytics |

| Understand visitor behaviour and optimise content | Legitimate interest | Analytics data, cookies |

| Comply with legal obligations | Legal obligation | Any relevant data as required |

| Send service updates or follow-up communications | Consent / Contract | Email address, contact details |

We will never use your data for marketing purposes without your explicit consent.

---

6. Cookies and Tracking

### What Are Cookies?

Cookies are small files stored on your device that help us recognise you and improve your experience.

### Cookies We Use

- Google Analytics cookies, to measure how visitors interact with our website (pages viewed, time on site, referral source)

- Essential cookies, necessary for website functionality (e.g., form processing, security)

### Your Cookie Choices

When you first visit our website, you will see a cookie consent banner. You can:

- Accept all cookies

- Accept only essential cookies

- Manage your preferences in detail

You can also change your cookie settings at any time via [insert link to cookie settings/banner location]. Your browser settings also allow you to control or delete cookies.

Note: Disabling non-essential cookies may affect your experience of our website.

For more information about Google Analytics, see Google's [Privacy Policy](https://policies.google.com/privacy).

---

7. Who We Share Your Data With

We may share your personal data with:

### Service Providers

- Google Analytics, to analyse website usage (Google processes data under their own Data Processing Agreement complying with GDPR)

- Email service providers, if we use third-party platforms to send updates or confirmations

- Website hosting provider, your data is stored with our hosting provider who acts as a data processor

### Legal Requirements

We may disclose your data if required by law, court order, or regulatory authority.

### Other Parties

We will not sell, trade, or rent your personal data to third parties without your explicit consent, except as described above.

---

8. How We Protect Your Data

We take data security seriously and implement appropriate measures to protect your personal information:

- Encrypted data transmission (SSL/TLS)

- Secure storage with access controls

- Regular security reviews

- Staff training on data protection

- Confidentiality agreements with service providers

However, no method of transmission or storage is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security.

---

9. Data Retention

We retain your personal data only for as long as necessary for the purposes outlined in Section 5:

| Data Type | Retention Period |

|-----------|-----------------|

| Enquiry form data and contact details | 3 years after last contact (or as per contractual obligation) |

| Analytics and cookies | 26 months (standard Google Analytics retention) |

| Service-related client data | Duration of engagement + 3 years for record-keeping purposes |

| Email communications | 3 years unless you request deletion |

You can request deletion of your data at any time (see Section 10 below). We will delete data sooner if it is no longer necessary for its original purpose.

---

10. Your GDPR Rights

You have the following rights under the GDPR:

### Right of Access

You can request a copy of the personal data we hold about you.

### Right of Correction (Rectification)

You can ask us to correct inaccurate or incomplete data.

### Right to Erasure ("Right to Be Forgotten")

You can request deletion of your data in certain circumstances (e.g., if it's no longer necessary, or you withdraw consent).

### Right to Restrict Processing

You can ask us to limit how we use your data in certain situations.

### Right to Object

You can object to us processing your data for legitimate interests or direct marketing.

### Right to Data Portability

You can request your data in a structured, portable format to transfer to another organisation.

### Right to Withdraw Consent

If we process your data based on consent, you can withdraw that consent at any time.

### Right to Lodge a Complaint

If you believe we have violated your rights, you can lodge a complaint with your local data protection authority (in the UK, this is the [Information Commissioner's Office](https://ico.org.uk/)).

---

11. Exercising Your Rights

To exercise any of the rights above, please contact us at:

Email: enquiries@skuma.co.uk

Please include "Data Subject Access Request" or the specific right you're exercising in the subject line. We will respond within 30 days (or 60 days for complex requests).

---

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

- Posting the updated policy on this page

- Updating the "Last updated" date at the top

- Sending you an email notification (if we have your email address)

Your continued use of our website after changes constitutes your acceptance of the updated policy.

---

13. Contact Us

If you have questions about this Privacy Policy, our data practices, or wish to exercise your rights, please contact us:

Data Protection Contact:

Dr Nick Riess, Skuma Innovation

Email: nriess@skuma.co.uk