Privacy & Cookie Policy

Who is responsible

Entigen Ltd, company number 13374103, is responsible for personal information collected through this website. Contact us at sales@entigen.co.uk, 01536 645661, or 15 Quantock Close, Barton Seagrave, Kettering, NN15 6RR. Ben Burgess oversees retention reviews and privacy requests, with authorised Entigen staff assisting where appropriate.

What we collect and why

We use your name, contact details, enquiry and relevant property or installation information to reply, prepare or revise quotations, arrange and carry out requested work, provide aftercare, handle payments and maintain necessary business records. Required contact and enquiry details enable us to understand your request and reply; without them the online assistant cannot submit an enquiry. You can also telephone or email us.

You may choose to provide photographs to explain the work. Include only relevant installation or property details. Avoid people, identity documents, unrelated personal information and unnecessary sensitive information. Do not remove electrical covers or expose live parts to take a photograph.

For enquiries and work requested by an individual, we rely on taking steps at your request before a contract and, where applicable, performing that contract. For business representatives, proportionate administration, protecting our systems and handling or defending claims, we rely on our legitimate interests in operating a secure electrical contracting business and responding to requests. We retain records required by applicable law on the basis of legal obligations. Optional analytics and the embedded map depend on your choice as explained below. A request for work or a booking is not marketing permission; we do not automatically add enquiries to marketing lists or use them for unrelated advertising.

Ask Entigen, photographs and follow-up

Ask Entigen collects answers and mandatory contact details needed for an enquiry, with questions relevant to the work. OpenAI's API helps classify up to 1,400 characters of free text so appropriate questions can be shown. This classifier does not receive uploaded photograph files or the separate contact-detail fields. Text you type may itself contain personal information. Requests specify store: false; this does not mean that all provider security or abuse-monitoring retention is disabled.

The assistant is an intake tool. It does not book a visit, accept work, issue a binding quotation or make a decision with legal or similarly significant effects about you. Entigen reviews the enquiry.

Submitted assistant enquiries and photographs are stored in the Cloudflare website enquiry backend. The application encrypts enquiry data and photograph objects before backend storage. Notifications go to Entigen's ben@entigen.co.uk and sales@entigen.co.uk mailboxes, and enquiries are passed to Entigen Workflow for follow-up. Imported photo references may retrieve photographs from the website backend; a reference is not a permanent independent photograph archive. Email, Workflow and necessary job-record copies have their own access and retention arrangements.

The estimator calculates guide ranges in your browser. It does not automatically send the result or your answers. “Discuss this estimate” takes you to the contact-page assistant without transferring personal information in the link. Make a note of relevant results if you wish to discuss them.

Legacy form records

The old contact fallback and estimator submission routes are temporarily paused. Newly served pages do not send submissions to Formspree; you can use Ask Entigen, telephone or email instead. An older page already open or cached in a browser may still contain the previous submission code.

Formspree may still hold information previously submitted through those forms, together with provider recovery or backup copies. Pausing the routes has not deleted those records, attachments or separate notification emails. We are reviewing the arrangements for those historical records and their deletion. Formspree describes storage in the United States; we have not established an applicable UK transfer safeguard for this account and do not represent one as verified. Contact Entigen about historical form information or your rights.

Who receives information

Enquiry information is for authorised Entigen staff who need it for the purposes above. Subcontractors are not intended to have general access to incoming enquiries, either mailbox or the complete customer database. For an accepted quotation or booked job, a subcontractor may receive only what their assigned work reasonably requires: address, agreed scope, relevant installation details and photographs, scheduling, access and safety information, and the customer's name or contact details where needed. Unrelated enquiries and unnecessary pricing, payment or personal information are excluded unless the role requires them. We require confidentiality, secure handling, purpose limits and return/deletion of unnecessary job-specific copies; this policy is not a claim that all systems have a tested per-job technical access boundary.

• Cloudflare: public website hosting and assets, enquiry backend, database and photograph storage, Turnstile/security and outbound assistant notifications.
• OpenAI API: the limited enquiry-text classifier described above.
• OpenAI ChatGPT Sites / Cloudflare infrastructure: hosting of the connected Entigen Workflow application and its business records, separate from the public website and email hosting.
• Stackmail / 20i: email mailboxes under Entigen's direct 20i account managed by Ben Burgess, not a reseller-managed account.
• Formspree: historical contact/estimator intake records, not the revised website's new enquiry route.
• Google Analytics and Cloudflare Web Analytics: optional usage and performance measurement after acceptance.
• Google Maps: the optional map, only when you choose to load it.
• Google Fonts: presentation fonts requested by some existing secondary pages.

Providers receive connection information needed to operate their services, such as IP addresses, browser/request headers and the requested resource. Providers and authorised technical administrators may process information as necessary to operate, secure or support systems. We do not claim that such access is impossible. Choosing WhatsApp, telephone, email or another external service uses that service's arrangements.

How long we keep information

Entigen adopted the following downstream policy on 16 October 2026. It requires reviews and deletion work; it is not a claim that automatic deletion operates in Workflow or the mailboxes.

• Unsuccessful or abandoned enquiries and associated notification emails: delete after 12 months without meaningful customer contact unless a documented reason justifies retaining a limited record longer. This allows follow-up questions, quotation revisions and postponed projects, not marketing. Genuine continuing discussions remain active. Automated reminders, system updates and staff opening a record do not restart the clock.
• Declined work: remove unnecessary photographs, detailed property information and irrelevant messages earlier where no purpose remains.
• Invoices and accounting records: six years from the end of the company financial year concerned, or longer for a specific applicable requirement.
• Necessary completed-job evidence: retain the necessary quotation, agreed scope, installation/testing/certification and workmanship evidence for the period justified by contractual, warranty, insurance, safety or legal requirements. This does not justify keeping every duplicate email, irrelevant message or unnecessary photograph.
• Longer retention: record a reason and review date, such as an unresolved complaint, dispute, payment issue or applicable recordkeeping requirement.
• Historical Formspree intake copies: delete once safely transferred to the appropriate business record and no longer needed for delivery troubleshooting. Workflow deletion does not delete Formspree or email copies; provider deletion and backup handling are separate.

Ben Burgess oversees monthly reviews and deletion requests, with authorised staff assisting. Provider backup and recovery copies can follow different cycles from live records; deleting a live record does not mean every backup disappears immediately. Necessary deletion/restriction decisions must also be applied after restoration.

The website backend has a separate verified 90-day retention setting for submitted enquiries and photographs. Scheduled cleanup processes expiry in bounded batches, not necessarily at the exact expiry instant. The twelve-month Workflow rule does not extend this setting. The assistant's signed session expires after 30 minutes; submitted-session recovery state has a separate three-day window. These settings do not delete copies already delivered to email, imported into Workflow or previously submitted to Formspree.

The Google Analytics property currently retains user and event data for 14 months, with reset on new user activity enabled. New activity can restart the user-data retention clock. This setting does not apply in the same way to most standard aggregated reports. It is separate from browser-cookie expiry and withdrawal of future measurement.

Cookies, storage and choices

Optional analytics stays off until you select Accept analytics. Reject analytics is equally available. Use Privacy choices in the navigation menu or footer on any page to change or withdraw your choice. Rejection leaves Ask Entigen, the estimator and essential security available. Withdrawal stops new optional measurements and clears this site's accessible Google Analytics cookies; it does not erase information already received by a provider.

• Privacy preference: first-party local storage entigen-privacy-choice-v1 holds your analytics choice, version and choice time, valid for 180 days. Expired choices are removed when the controls next run and cannot enable analytics.
• Assistant session: session storage entigen-enquiry-session holds the short-lived opaque enquiry-service session credential, not an analytics identifier.
• Google Analytics: after acceptance, Google may set _ga and _ga_… cookies to distinguish visits and measure use. This website sets a maximum 180-day cookie expiry without automatically extending it. The tag configuration disables Google signals and advertising personalisation and denies advertising storage, advertising user data and advertising personalisation. Measurement uses an allowlisted public page address, a general referral category and a fixed set of interaction events. Raw URL parameters, free-text campaign names, contact details, photographs, enquiry references and session credentials are not sent as event parameters. Public pages also use a no-referrer policy to prevent their URL being attached as an HTTP Referer to outgoing requests. A saved-enquiry event is triggered only after the enquiry service confirms a saved reference. Phone clicks, WhatsApp clicks, assistant opens and contact-flow starts are separate and are not proof of an enquiry or a completed call. Automatic events outside the approved event list are blocked by the website measurement layer. Optional session storage entigen-measurement-source-v1 retains only a general source/medium category; entigen-measurement-once-v1 stores up to 20 local SHA-256 duplicate-prevention markers. Both expire after 30 minutes and are cleared on withdrawal. They are not sent to analytics. Browser/session deduplication is limited to that browser context and period; business lead records remain the source of truth.
• Google account sharing: the existing Analytics account permits Google product/service improvement, aggregated modelling/business insights, technical support and business recommendations. The website's advertising restrictions do not turn off those account settings. Google's published settings information says product/service sharing is not used for its own ad personalisation or targeting.
• Cloudflare Web Analytics: after acceptance, its beacon measures page/browser performance and usage. We use consent rather than assuming an analytics exception.
• Google Maps: choose “Load Google Map” to connect the embedded map to Google. “Hide Google Map” removes it without changing the analytics preference. Rejecting or withdrawing analytics also removes a map loaded on that page. This website cannot delete cookies on Google's own domains.
• Security: Turnstile and essential security requests protect enquiries and remain available when analytics is rejected.

Without JavaScript, optional analytics and the embedded map remain off and the published telephone/email links remain available. Removing browser storage can cause the website to request a new preference.

International processing

These services do not all operate solely in the UK. Cloudflare uses an international network; the OpenAI classifier and Workflow hosting are separate services; Google operates internationally; and 20i's location depends on the selected service. An email domain or UK business address does not establish UK-only storage.

Cloudflare's customer data-processing terms, OpenAI's applicable API and ChatGPT Sites data-processing terms, Google's applicable data-processing/controller terms and 20i's direct-customer data-processing terms include international-transfer provisions, including UK contractual arrangements where applicable. The verified Google account records acceptance of its data-processing and controller-sharing terms on 6 October 2025. Relevant published terms are available from Cloudflare, OpenAI API, ChatGPT Sites, Google and 20i. Contact Entigen for information about the safeguards applicable to your information and how to obtain a copy. These statements do not claim UK-only storage, a fixed universal backup period or a separate completed audit of every provider. The distinct limit concerning historical Formspree records is explained above.

Your rights and complaints

Depending on the circumstances and applicable exceptions, you may request access, correction, erasure, restriction or portability of your personal information. You can object to processing based on legitimate interests. Where processing depends on consent, you can withdraw it without affecting earlier lawful processing. Contact sales@entigen.co.uk; we may need proportionate information to locate records and verify the request. You may complain to the Information Commissioner's Office.