Privacy policy
Controller
The controller of personal data collected through this website is Roger Newby, trading as Vehicle Engineering Analysis, London and Manchester, registered with the Information Commissioner's Office as a data controller. Contact: rogernewbyconsulting@gmail.com.
Where your data is processed, and what not to send
This website and its enquiry forms are hosted by Netlify, Inc. in the United States. A message sent through a form is stored, briefly, on servers outside the United Kingdom before it is emailed to us. Netlify processes it under a data processing agreement incorporating the UK International Data Transfer Addendum.
For that reason the forms are for an outline of your enquiry only. Do not send case papers, photographs, medical records, vehicle data or anything confidential through the website. Once terms of engagement are agreed, papers are exchanged by secure means agreed with the instructing party and held in the United Kingdom. Form submissions are deleted from the hosting provider once they have been received by email.
What we collect and why
Enquiry forms and email
When you send an enquiry we collect your name, contact details, the names of the parties for a conflict check, and the outline of your message. We use it to respond, to check for conflicts of interest and, if an instruction follows, to set it up.
- Lawful basis: legitimate interests (responding to an enquiry you sent us and avoiding conflicts) and, where an instruction follows, performance of a contract.
- Retention: enquiries that do not lead to an instruction are deleted after 12 months. Conflict-check records (party names and dates only) are kept for six years so that later conflicts can be identified.
Expert instructions
Papers supplied under an instruction, which may include personal data about parties, witnesses and others, and may include special category data such as medical records, are used only for that instruction. The lawful basis is the performance of the contract with the instructing party and, for special category data, Article 9(2)(f) UK GDPR (establishment, exercise or defence of legal claims). Instruction files are retained for six years after the conclusion of the matter, in line with limitation periods and professional indemnity requirements, then deleted or returned in accordance with the terms of engagement.
Website
The site sets no cookies and runs no analytics. See the cookie policy. The hosting provider processes server logs (IP address, pages requested) for security and delivery.
Who processes it
- Hosting and form handling: Netlify, Inc. (United States).
- Source code hosting: GitHub, Inc. (United States). No personal data is stored there.
- Email: Google LLC, with data held in the United Kingdom or European Economic Area where the service allows.
Where a processor is outside the UK, transfers rely on the UK International Data Transfer Agreement or Addendum, or on UK adequacy regulations (including the UK–US data bridge) where they apply.
Your rights
Under UK GDPR you can ask for access to your data, correction, erasure, restriction, portability, and to object to processing based on legitimate interests. Some rights are limited where data is held for legal proceedings. Write to rogernewbyconsulting@gmail.com. You can complain to the Information Commissioner's Office (ico.org.uk).
Changes
Material changes to this policy will be posted on this page.