Privacy Notice

How we use your information

This privacy notice has been developed to explain what personal data is collected by H2AD and its parent company Lindhurst Engineering Ltd, how this is done and how it is used. It applies to information we collect about:

  • Visitors to our website
  • People with whom we interact and who receive our marketing correspondence
  • People who use our services
  • People whose services we utilise

We acknowledge and agree that any personal data that we handle will be kept in accordance with all applicable data protection laws. Currently, the Data Protection Act 1998 applies however, from 25th May 2018, the new General Data Protection Regulations (GDPR) come into effect.


Visitors to our website

Standard internet log information and details of visitor behaviour patterns is collected for this website, using the third-party service Google Analytics. This information is anonymous, but enables us to monitor traffic to the different areas within the website. No attempt is made by H2AD, its parent company Lindhurst Engineering Ltd, or Google, to identify those individuals visiting this website.


Event & Marketing correspondence

The H2AD team regularly attend and exhibit at events and exhibitions around the UK. Names and contact details of interested parties and potential suppliers and clients are collected and entered into databases, with the consent of the individuals. These databases are saved on parent company Lindhurst Engineering’s General Server, which in turn is backed up and stored on the secure servers of their third-party IT support company.

H2AD also hold its own events, utilising our database of contacts, as well as social media channels and partners networks. Invitations are sent using a third-party company called MailChimp, whilst we use Eventbrite, another third-party company, for registrations.


Social Media interactions

H2AD utilises a number of social media platforms including Twitter, Facebook, LinkedIn, GooglePlus and YouTube.

It has company pages on Facebook, Twitter, LinkedIn and Google Plus; these can only be accessed with the use of a password protected login. Should any individual contact us using a private message through these mediums, they will be kept for a maximum of 12 months and then deleted. The information will not be shared with any other organisations.

H2AD’s YouTube account is used to post videos relating to the technology and sector-specific news. No personal data is collected aside from the number of views per video, and this is anonymous.


Computer Data Storage

H2AD’s parent company, Lindhurst Engineering’s computer system is backed up both automatically on an ongoing basis and daily. This process is overseen by a third-party IT Support company, who also store a copy of the daily backup offsite on their secure servers. Once this information has been removed from our live systems, it is recoverable for up to six months, after which time it may be over written.

All emails received by employees are access controlled, and when deleted from individual computers, is also permanently deleted from the MS365 cloud based system.

We also monitor emails sent to H2AD employees, including file attachments, for viruses or malicious software. You must be aware that you, the individual, also have a responsibility to ensure that any email you send adheres to the law.


H2AD Suppliers

H2AD works with a wide range of suppliers; contact information for these companies/sole traders are stored on a secure database system. This system is held on parent company Lindhurst’s secure server, which in turn is backed up and stored securely by our IT Support company. Details of orders are also saved on Lindhurst’s secure server, which is access controlled.

To allow us to work with suppliers, we must hold a core set of information which will include the name of the company, a named contact and one or more contact details alongside financial information. This data is kept on LCMS (Lindhurst’s secure database system), on Lindhurst’s access controlled secure server and Sage (a password protected financial package). It will be used for the sole purpose of precuring a service or material/item.

Suppliers can ask to be removed from our system at any time however, basic information will be retained for legal and contractual reasons. It should also be noted that company information will be required for any potential future transactions.


H2AD Customers

The privacy of our customers is very important to us. As such, when generating an enquiry or job, we will only ask for information key to H2AD carrying out the required/specified work/job. Contact information (name and relevant contact details) will be collected and stored on LCMS, our secure database system. Financial details may also be stored on Sage, a password protected financial package, which is saved and backed up on Lindhurst, our parent company’s, secure server. Relevant emails and documents will also be saved on Lindhurst’s General Server, which is backed up and stored securely by our IT Support company. Details of jobs and accompanying relevant emails and documents will be saved on parent company Lindhurst’s access controlled secure server.

As with suppliers, we do not collect more information than we need to fulfil our stated purposes and will not retain it for longer than is necessary. Customers can ask to be removed from our system at any time however, basic information will be retained for legal and contractual reasons. It should also be noted that company information will be required for any potential future transactions.



Job applicants, current and former Lindhurst Engineering employees

All employment processes are handled by our parent company Lindhurst Engineering Ltd; details of their privacy notice can be found here: ……………..


Your Rights; Access to personal information

Under the Data Protection Act 1998, individuals may submit a ‘Subject Access Request’ (SAR) to find out what personal information, if any, is held by H2AD and our parent company Lindhurst Engineering. If information is held, we will:

  • give you a description of it;
  • tell you why we are holding it;
  • tell you who it could be disclosed to; and
  • provide a hard copy of the information.

In line with the new General Data Protection Regulations, a response will be sent to this request within 30 days; A hard copy of the information will be sent by recorded delivery.

For full details of the personal data relating to you that is held by the company, a request to H2AD and/or Lindhurst Engineering Ltd must be submitted in writing. The letter should be addressed to either Martin Rigley or Paul Kitchin and sent to the following address:


Lindhurst Engineering Ltd

Midland Road



NG17 5GS


Should you wish to submit your SAR via email, please send it to one of the following addresses:

martin@lindhurst.co.uk         or        paul@lindhurst.co.uk


If you agree, we will try to deal with your request informally, for example by identifying if there is any specific information you are interested in procuring. If a request can be satisfied prior to the full disclosure of information, the closure of the SAR must be confirmed in writing, by the individual who submitted the request initially.

If we do hold information about you, you can ask us to correct any mistakes by, once again, contacting Martin Rigley or Paul Kitchin using the email or postal addresses supplied above.


Links to other websites

This privacy notice only applies to h2ad.org.uk and does not cover any links to other websites which may be contained within this website. These websites have their own privacy policies which we would advise that the user reads.



Changes to this privacy notice

This privacy notice is written in line with the new General Data Protection Regulations (GDPR) and will be regularly reviewed. It was last updated on 22nd May 2018.