Ignition / Privacy

Privacy Policy.

Last updated: 15 October 2026

01Our commitment

Ignition ICT respects your privacy. This policy explains what personal data we collect, why we collect it, how we protect it and the rights you have. It applies to this website, the project enquiry form and the Ignition client portal.

This policy covers the United Kingdom and Ireland. It is written with reference to the UK General Data Protection Regulation (UK GDPR), the UK Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR). For individuals in Ireland, the EU General Data Protection Regulation (EU GDPR), Ireland’s Data Protection Act 2018 and applicable Irish electronic privacy regulations apply where relevant.

We collect only what we need, we never sell personal data, and we do not use advertising or tracking cookies.

02Who we are

Ignition ICT Ltd is the controller of the personal data described in this policy, which means we decide how and why it is used. Ignition ICT Ltd is registered in England and Wales, company number 17435217, DUNS number 235124860, with its registered office at 167-169 Great Portland Street, 5th Floor, London, W1W 5PF. Website: www.ignition-ict.com. For any privacy question or request, contact us at info@ignition-ict.com.

03The data we collect

We collect personal data in the following ways:

Project enquiries: your name, company, business email and, if you choose to give them, your telephone number, role and project details.
Client portal accounts: your name, business email, sign-in details and the company you are linked to. Passwords are stored in encrypted form and are never visible to our team.
Client records: project documents, drawings, files and invoice information that we share with you through the portal.
Technical data: limited information that our hosting provider records automatically to keep the service running and secure, such as IP address, browser type and the time of a request.
We do not ask for, and ask you not to send us, special category data such as health, religious or biometric information.

04How we use your data and our lawful basis

Under Article 6 of the UK GDPR and, where applicable in Ireland, the EU GDPR, we must have a lawful basis for each use of your personal data. We use it only for these purposes:

Replying to your enquiry and preparing a quote: steps taken at your request before entering into a contract, or our legitimate interest in responding to business enquiries.
Delivering your project and providing portal access: performance of our contract with you or your organisation.
Billing, accounting and record keeping: compliance with our legal obligations.
Keeping our website and portal secure and preventing misuse: our legitimate interests in protecting our systems, our clients and our team.
Where we rely on legitimate interests, we have balanced them against your rights and freedoms. You can ask us for details of this assessment.

05Whether you must give us data

You do not have to give us personal data. However, without a name and business email we cannot reply to an enquiry, and without account details we cannot give you access to the client portal.

06Automated decisions

We do not make decisions about you based solely on automated processing, including profiling, that produce legal or similarly significant effects.

08International transfers

Our service providers may process personal data outside the United Kingdom or Ireland. This policy does not mean that data is stored only in those countries. For transfers from the UK, applicable safeguards include UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses, with a transfer risk assessment where required. For transfers from Ireland outside the European Economic Area, applicable safeguards include an EU adequacy decision or EU standard contractual clauses, with a transfer assessment and supplementary measures where required.

You can contact us for more information about the safeguards we use.

09How we protect your data

We use appropriate technical and organisational measures, as required by Article 32 of the UK GDPR, including:

Encrypted connections (HTTPS) across the website and portal.
Access controls that limit each client to its own records and limit staff access to those who need it.
Private file storage, with documents released only through short-lived secure links.
Encrypted storage of passwords and protection of the enquiry form against automated abuse.
If a personal data breach is likely to put your rights at risk, we will notify the relevant supervisory authority, the ICO in the UK or the Data Protection Commission in Ireland as applicable, without undue delay and, where feasible, within 72 hours of becoming aware of it. Where the risk is high, we will also tell affected individuals without undue delay.

10How long we keep data

We keep personal data only for as long as we need it for the purposes above.

Enquiries that do not lead to a project are deleted once they are no longer needed.
Portal accounts are kept while your organisation remains a client and closed when access is no longer needed.
Project, contract and invoice records are kept for as long as our relationship continues and afterwards for the period required by UK tax and company law, normally six years from the end of the relevant financial year.
When data is no longer needed, we securely delete or anonymise it.

11Cookies and similar technologies

Under PECR, we must ask for your consent before using non-essential cookies. This website does not use advertising, analytics or tracking cookies, so we do not show a cookie banner. We use only storage that is strictly necessary for the site to work: if you sign in to the client portal, keeping you securely signed in.

12Your rights in the UK and Ireland

You have the following rights, subject to certain conditions and exemptions:

Right to be informed about how we use your personal data, which this policy provides.
Right of access to the personal data we hold about you and to receive a copy.
Right to rectification of inaccurate or incomplete data.
Right to erasure where we no longer have a valid reason to keep your data.
Right to restrict processing in certain circumstances.
Right to data portability for data you have given us, where processing is based on contract or consent and carried out by automated means.
Right to object to processing based on our legitimate interests, and an absolute right to object to direct marketing.
Rights relating to automated decision-making and profiling.
Right to withdraw consent at any time, where we rely on consent.

13Exercising your rights

To make a request, email info@ignition-ict.com. Making a request is free. We may ask you to confirm your identity before we act. We will respond within one month of receiving your request; for complex or numerous requests we may extend this by up to two further months and will tell you why. We will not treat you differently for exercising your rights.

14Complaints

If you have a concern about how we handle your data, please contact us first so we can try to resolve it.

You have the right to complain to the Information Commissioner’s Office (ICO) in the United Kingdom at ico.org.uk or on 0303 123 1474. In Ireland, you can contact the Data Protection Commission (DPC) at dataprotection.ie. Contacting us first does not prevent you from contacting the relevant authority directly.

15Children

Our services are intended for businesses. We do not knowingly collect personal data from children.

16Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised. If we make significant changes, we will make them clear on this page.

17Contact

For any question about this policy or how we handle your data, email info@ignition-ict.com.