Privacy Policy

1. Who we are

indEx Enclosures Ltd (trading as indEx Enclosures or Pegasus Precision) is the data controller responsible for your personal data.

• Company number: 07463154
• ICO registration number: ZB077631
• Registered office: Unit 5 Wyvern Way, Henwood Industrial Estate, Ashford, Kent, TN24 8DW
• Email: sales@indexenclosures.com
• Phone: +44 1233 801 890

We are registered with the UK Information Commissioner's Office (ICO) as a data controller under registration reference ZB077631. If you have any questions about how we handle your personal data, please contact us at the details above.

2. What personal data we collect

We collect personal data in the following circumstances:

• Enquiries and quotes: name, job title, company name, business email address, phone number, and technical requirements you share with us.
• Orders and invoicing: billing and delivery address, purchase order details, and payment information (we do not store card details).
• Website usage: IP address, browser type, pages visited, time on site, and referring URL — collected via Google Analytics 4 (see Section 5).
• Communications: the content of emails, calls or messages you send us.

We deal primarily with businesses. Where you provide us with details of employees or contacts at your organisation, you are responsible for ensuring those individuals are aware their data has been shared with us.

3. How we use your personal data

We use your personal data for the following purposes and on the following legal bases:

• To respond to enquiries and provide quotations — Legitimate interests (pre-contractual steps at your request).
• To fulfil orders and manage our customer relationship — Performance of a contract.
• To send invoices and manage payment — Performance of a contract; Legal obligation.
• To comply with legal and regulatory obligations (e.g. HMRC record-keeping) — Legal obligation.
• To improve our website and understand how visitors use it — Legitimate interests (where you have not opted out via our cookie banner).
• To send you relevant product or service information where you are an existing customer or have requested it — Legitimate interests.

We will never sell your personal data to third parties or use it for purposes unrelated to our business relationship with you.

4. Who we share your data with

We share personal data only where necessary:

• Google LLC — website analytics via Google Analytics 4 (data may be processed in the USA; Google operates under its EU–US Data Privacy Framework certification).
• Delivery and logistics providers — name and delivery address to arrange dispatch of your order.
• Email and accountancy software — to respond to enquiries, issue invoices and maintain financial records.
• Legal or regulatory authorities — where required by law.

We do not transfer personal data outside the UK except as described above, and only where adequate safeguards are in place.

5. Cookies and Google Analytics

Our website uses cookies. A cookie is a small text file placed on your device. We use the following categories:

You can manage your cookie preferences at any time via the cookie banner on our site, or by adjusting your browser settings. You can also opt out of Google Analytics tracking at tools.google.com/dlpage/gaoptout.

For more information on how Google uses data collected via our site, see Google's Privacy Policy.

6. How long we keep your data

• Enquiries that did not result in an order: up to 2 years from last contact.
• Order and customer records: 7 years from the end of the relevant financial year (HMRC requirement).
• Website analytics data: up to 26 months (Google Analytics default).
• Email correspondence: up to 7 years where it relates to a contract or legal matter; otherwise up to 3 years.

After these periods, data is deleted or anonymised.

7. Your rights

Under UK GDPR you have the following rights. To exercise any of them, contact us at sales@indexenclosures.com.

• Right of access — to receive a copy of the personal data we hold about you.
• Right to rectification — to have inaccurate data corrected.
• Right to erasure — to request deletion of your data where there is no legitimate reason for us to continue processing it.
• Right to restrict processing — to ask us to limit how we use your data in certain circumstances.
• Right to data portability — to receive your data in a structured, machine-readable format where processing is based on consent or contract.
• Right to object — to object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent — where processing is based on consent (e.g. analytics cookies), you may withdraw at any time without affecting the lawfulness of prior processing.

We will respond to all requests within one month. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

8. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or destruction. These include access controls, secure email, and encrypted connections (HTTPS) on our website.

No method of transmission over the internet is completely secure. If you have concerns about the security of information you have shared with us, please contact us immediately.

9. Links to other websites

Our website may contain links to third-party websites (including the IECEx Online Certificate System). We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.