PRIVACY NOTICE
Effective 9 August 2026. How Group 3 Engineering collects, uses and protects your personal information.
Group 3 Engineering Limited (company number 15510049) of Unit 2 Pursley Farm, London Road, Radlett, Hertfordshire, WD7 9EN is the data controller for the personal information described in this notice. That means we decide what information is collected and what it is used for.
If you have any question about this notice or about how your information is handled, contact us by email at contact@g3e.co.uk or by telephone on 0330 043 0143.
When you book a call-out. Your name, mobile number, email address, billing address, the address of the site we are attending, whether the premises are commercial or domestic, and the description of the fault you give us.
When you contact us. Anything you enter into our contact form, quote request form, commercial account application or site review request – typically your name, contact details, company name where relevant, and the details of your enquiry.
When you pay. We do not collect, see or store your card number. Card details are entered directly into a payment page hosted by Stripe, our payment processor. We receive only a reference to the payment, the amount, and whether it succeeded.
Automatically. Standard technical information such as your IP address and browser type, recorded by our hosting provider for security and to keep the site running.
To stop misuse of the booking form. When you book a call-out we record the internet address (IP address) the booking was sent from, and keep it with that booking. A booking holds an appointment slot from the moment it is started, so this is how we tell one person booking twice from an automated system taking slots nobody intends to use. We make similar short-lived records elsewhere in our systems where they are needed to detect or prevent misuse.
To carry out work you have asked for – arranging the visit, attending site, contacting you about the appointment, taking payment and invoicing. Lawful basis: performance of a contract with you.
To answer enquiries you send through the website or by phone. Lawful basis: our legitimate interest in responding to people who contact us.
To keep records of work carried out, for warranty, safety and accounting purposes. Lawful basis: compliance with a legal obligation, and our legitimate interest in defending claims.
To protect the website from spam and abuse. Lawful basis: our legitimate interest in keeping our systems secure.
We do not use your information for marketing without your consent, and we never sell it.
We share personal information only with the suppliers who help us deliver the service, and only as far as they need it:
Stripe processes card payments and holds the card details we never see. Cloudflare hosts this website and our booking system, protects them from attack, and provides the anti-spam check on our forms, which sees your internet address and how the page was used in order to tell a person from an automated system. Resend sends the confirmation and update emails. Twilio sends text messages about your booking. Google Maps provides address lookup while you type an address, Postcodes.io checks whether your postcode falls inside our coverage area, and Mapbox measures the driving distance from our base to the location of your postcode – it receives only the map coordinates of that postcode, never your name or address.
Each of these is bound to protect the information we pass to them. We may also disclose information where we are required to do so by law, or to establish or defend legal claims. Our engineers and subcontractors receive only the details needed to attend the job.
Booking and job records, including invoices, are kept for seven years after the end of the tax year they relate to, which is the period HMRC requires for accounting records. Enquiries that do not become jobs are kept for two years. Website technical logs are kept for a short period by our hosting provider.
The internet address recorded with a booking is deleted after 90 days, which is far shorter than the booking record it sat with, because it is only useful for spotting misuse close to the time. The short-lived records we keep elsewhere to detect or prevent misuse are deleted within minutes.
Photographs attached to a quote request are deleted after 30 days. The request itself and the price we quoted are kept as above; the pictures are needed only while we are working out that price, and they are the most personal thing the form asks for.
Where information is no longer needed for any of the purposes above, it is deleted.
Our website, booking system and database are hosted on Cloudflare’s network. Some of our suppliers, including Stripe, are based outside the United Kingdom, so your information may be transferred abroad. Where that happens, the transfer is covered by safeguards approved for use in the UK, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
Access to booking and customer records is restricted to those in the business who need it, and is password protected. Traffic to and from this website is encrypted. Card details are handled entirely by Stripe, so they never reach our systems.
No system can be guaranteed completely secure, but we take reasonable steps to protect your information and to detect and deal with any breach.
Under the UK General Data Protection Regulation you have the right to ask us for a copy of the personal information we hold about you; to have inaccurate information corrected; to ask us to delete information where we no longer have a reason to keep it; to ask us to restrict how we use it; to object to processing carried out on the basis of our legitimate interests; and to receive certain information in a portable format.
To exercise any of these rights, contact us using the details in section 1. We will respond within one month. There is no charge, and we may ask you to confirm your identity first.
This website does not use advertising or tracking cookies. Our booking system sets a small number of strictly necessary cookies so that it can remember your session while you complete a booking or sign in to an account. These are required for the system to work and cannot be switched off.
If you are unhappy with how we have handled your personal information, please tell us first so we have the chance to put it right. You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection, at ico.org.uk or on 0303 123 1113.
We may update this notice from time to time. The effective date at the top of the page shows when it was last changed. Where a change materially affects how we use your information, we will take reasonable steps to tell you.