Privacy Policy

Last updated: 11 June 2026

Electrical Excavations & Services Ltd ("we", "us", "our") is committed to protecting your personal data and being transparent about how we use it. This policy explains what we collect, why we collect it, how we look after it and the rights you have under UK data protection law.

1. Who we are

Electrical Excavations & Services Ltd is the data controller responsible for your personal data. We are a UK-registered company providing specialist cable pulling, jointing, spiking, trenching, ducting, reinstatement and EV charger installation services.

• Company: Electrical Excavations & Services Ltd
• Contact for data protection: Steve Bushnell
• Email: Stephen.bushnell@eeands.co.uk
• Phone: 07775 808531

2. What information we collect

We only collect information that you give us directly, and only what we need to respond to your enquiry or carry out work for you. Specifically:

• Contact details: name, company, email address, phone number
• Enquiry details: site location or postcode, service requested, project description and any drawings or specifications you choose to send
• Technical data: when you visit the website, our hosting provider (Cloudflare) automatically logs your IP address and basic request information for security and fraud-prevention purposes

We do not collect special category data (race, religion, health, etc.) and we do not knowingly collect data from anyone under 18.

3. Why we collect it and the legal basis

We rely on the following lawful bases under UK GDPR Article 6:

• Legitimate interests — to respond to your enquiry, provide quotes, deliver our services, manage our relationship with you and protect our website from fraud or abuse
• Contract — where we are providing services to you or your business under an agreement
• Legal obligation — where we are required to retain records for accounting, tax or regulatory reasons (e.g. HMRC requires us to keep business records for at least 6 years)

4. Who we share it with

We do not sell your data and we do not share it for marketing purposes. We do use a small number of trusted service providers to operate the website and respond to enquiries:

• Cloudflare, Inc. — content delivery, DDoS protection and security. Your IP address and request data pass through Cloudflare's UK / EU edge.
• Resend (Resend Inc.) — transactional email delivery, used to forward enquiry form submissions to our inbox.
• Hetzner Online GmbH — our website hosting provider in Germany (EU).
• HMRC and our accountants — where required for tax and accounting compliance.
• Law enforcement or regulators — only where we are legally required to disclose information.

All processors are bound by data protection agreements requiring them to handle your data securely and only on our instructions.

5. International transfers

Cloudflare and Resend are US-headquartered companies, which means in some cases your data may be transferred outside the UK. Where this happens, we rely on the UK International Data Transfer Agreement (or the EU Standard Contractual Clauses with the UK Addendum) to ensure your data receives the same level of protection.

6. How long we keep it

We only keep your data for as long as we need it:

• Enquiries that don't progress to work: deleted within 24 months of last contact
• Active customer records: retained for the duration of our relationship
• Completed jobs: records kept for at least 6 years after the job ends, to comply with HMRC accounting rules
• Server logs: Cloudflare typically retains technical logs for around 30 days for security purposes

7. How we protect it

We take reasonable technical and organisational measures to protect your data:

• The website is served entirely over HTTPS (TLS-encrypted)
• Form submissions are sent over an encrypted connection to our email provider
• Access to your data is limited to people who need it to do their job
• We use reputable hosting and email providers with their own UK GDPR-compliant security standards

8. Your rights

Under UK GDPR, you have the right to:

• Ask what personal data we hold about you (right of access)
• Ask us to correct inaccurate data (right to rectification)
• Ask us to delete your data where we no longer need it (right to erasure)
• Ask us to restrict or stop processing your data (right to restriction and objection)
• Receive your data in a portable format (right to data portability)
• Withdraw consent at any time, where consent is the legal basis

To exercise any of these rights, email Stephen.bushnell@eeands.co.uk. We will respond within 30 days. There is no charge.

9. Cookies and similar technologies

Our website uses a small number of strictly necessary cookies, mainly set by Cloudflare for security and bot-protection (for example, __cf_bm). These are exempt from consent requirements under the Privacy and Electronic Communications Regulations because they are essential for the site to work safely.

We do not use analytics, advertising or tracking cookies on this site. If that changes in future, we will update this policy and add an appropriate consent banner.

10. Complaints

If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the UK supervisory authority:

• Information Commissioner's Office (ICO)
• Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
• Helpline: 0303 123 1113
• Website: ico.org.uk

11. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in the law. The "last updated" date at the top will always show when the policy was last revised. Significant changes will be flagged on the website.