GDPR and data protection

The public website uses a minimal-data approach: no account registration, no visitor-profile tracking and no automatic contact submission. An enquiry does not automatically subscribe you to marketing. The company website is separate from any future ERP or client portal.

For an actual monitoring or research engagement, the parties must determine the relevant controller/processor roles, purpose, lawful basis, source rights, access controls, retention and any transfer arrangements for that assignment. A corporate relationship does not itself authorise unrestricted sharing of personal data.