This Privacy Policy is published by EXP Construction, the developer name behind EXP CONSTRUCTION LTD, and explains how EXP CONSTRUCTION LTD collects, uses, stores and protects personal information when you visit our website, contact our workshop or engage us for controls engineering work. The policy is written in plain language because we believe privacy notices should be readable by the people they concern. It applies to the website at www.expconstruction.autos and to all enquiries, surveys and projects handled by our team. EXP CONSTRUCTION LTD is the controller of the personal data described here, and we take that responsibility seriously.
1. Who We Are
EXP CONSTRUCTION LTD is a company registered and operating in the United Kingdom, providing computer integrated systems design, controls engineering and related technical services. Our registered and trading address is 18 Hollyhurst Road, Sutton Coldfield - B73 6SY, United Kingdom (GB). Our workshop is where control panels are built, software is tested and instrumentation is calibrated, and it is also the location at which most personal data received through this website is reviewed and acted upon.
For the purposes of data protection law in the United Kingdom, EXP CONSTRUCTION LTD is the data controller. This means that we decide why and how personal data is processed and we are accountable for keeping that processing lawful, fair and transparent. If you have any question about how we handle your information, you can reach us at creative@expconstruction.autos or by telephone on +16816186224. A named contact within the business is responsible for monitoring data protection compliance and will respond to any request you make.
We are a small, technically focused practice. We do not operate a large data platform, we do not sell customer lists, and we do not profit from advertising. The personal data we hold exists because people have asked us to quote, to visit a site, to support a machine or to keep in touch about a project, and it is used only for those purposes.
2. Scope of This Policy
This policy covers personal data processed through the EXP CONSTRUCTION LTD website, through email, through telephone calls and through forms completed on site or in the course of a project. It also covers personal data created while delivering controls engineering services, such as the names and contact details of site contacts, maintenance managers and finance officers who interact with us during a refit.
The policy does not cover data held by third party platforms that you may reach through links on our site, nor does it cover the internal HR records of EXP CONSTRUCTION LTD, which are governed by separate workplace policies. Where we act as a processor on behalf of a client, for example when monitoring a client network under a maintenance contract, the client remains the controller of any personal data in that environment and we act only on documented instructions.
We may update this policy from time to time. The version published on this page is the current version, and the date of the most recent revision appears at the end of the document. Continued use of the website after an update indicates that you accept the revised terms.
3. Personal Data We Collect
The categories of personal data we may collect include identity data such as your name and job title, contact data such as your email address, postal address and telephone number, and the content of any message you send to us. When you enquire through the contact form on this website, the information you provide includes your name, your email address, a subject line and your message, and that content is transmitted to us by email using the mail handling facility of your own device.
During a project we may also collect technical and operational data that is not personal by nature but which may incidentally contain personal information, such as network logs, visitor sign-in records or correspondence about named site personnel. Where that occurs we limit the personal content to what is necessary and we do not build profiles of individuals.
We may collect usage data such as the pages you visit and the approximate region from which you connect, in aggregated form, to understand which parts of the site are useful. We do not collect special category data such as health information, and we do not ask for financial account details through this website. Payment arrangements for projects are handled through ordinary business invoicing rather than through online card entry on this site.
- Identity data including name and role.
- Contact data including email, telephone and postal details.
- Enquiry content including subject and message text.
- Project correspondence relating to named site contacts.
- Aggregated website usage information.
4. How We Collect Personal Data
Most of the personal data we hold comes directly from you. You provide it when you complete the contact form, when you send an email to creative@expconstruction.autos, when you telephone +16816186224, or when you hand a business card to an engineer during a site visit. Direct collection gives us the clearest understanding of why the information was provided, and it allows us to answer you accurately.
We also collect some data automatically. When your browser requests a page from our website, standard server records may note the request, the time and a truncated network address, primarily so that we can detect abuse and keep the service available. These records are used for security and operational purposes and are not combined with other data to build a profile of you.
Finally, we may receive data indirectly from a client or a main contractor who passes on the contact details of a site representative so that we can arrange access or schedule commissioning. In those cases we rely on the legitimate interest of delivering the contract safely and efficiently, and we hold only the minimum details needed to coordinate the work.
5. Lawful Basis for Processing
Under the United Kingdom General Data Protection Regulation and the Data Protection Act, every processing activity must rest on a lawful basis. Where you send an enquiry or ask for a quotation, our lawful basis is either the performance of a contract or the steps taken at your request before entering a contract. Where we reply to a general question, the basis is our legitimate interest in communicating with people who contact the business.
Where we process personal data to keep records, to invoice for completed work or to meet tax and safety obligations, the lawful basis is compliance with a legal obligation. Where we send occasional project updates to an existing contact, we rely on legitimate interest and we always make it easy to opt out of further messages. Where we ever require your agreement for a specific optional activity, we will ask for consent clearly and separately, and you may withdraw that consent at any time without affecting the work already carried out.
We do not use your personal data for automated profiling, and we do not make decisions with legal or significant effects about you solely by automated means. If that ever changes for a specific service, we will explain it in advance and offer a human review.
6. Purposes of Processing
We process personal data so that we can respond to enquiries, prepare quotations, arrange site surveys, schedule engineering work and provide the maintenance support that our clients depend on. When you ask about a control panel upgrade, a PLC and SCADA integration project or a factory floor networking design, we need your contact details in order to reply and to discuss the technical detail in a useful way.
We also process personal data for internal administration. This includes keeping project files, recording who attended a site, maintaining calibration records that reference an instrument owner, and managing supplier and subcontractor relationships where those parties are individuals or sole traders. Administration is necessary to run a lawful and accountable business.
Additional purposes include protecting our systems from misuse, keeping our accounting records accurate, complying with health and safety duties when we work on a client site, and improving our own services by understanding which enquiries convert into successful projects. We process only what is needed for each purpose and we do not repurpose data for unrelated activities without a fresh lawful basis.
- Responding to enquiries and preparing quotations.
- Arranging surveys, commissioning and site access.
- Delivering maintenance contracts and technical support.
- Managing suppliers, subcontractors and project records.
- Meeting accounting, tax and safety obligations.
- Protecting the website and internal systems.
7. Marketing and Communications
EXP CONSTRUCTION LTD does not run mass marketing campaigns and does not sell contact details to advertising networks. When we contact you outside a live project, it is because you have an existing relationship with us or because you have asked to be kept informed about a particular topic such as an upcoming panel-refit window or a new maintenance offering.
Every update we send includes a simple way to stop receiving further messages, and a single request is enough to remove you from our list. We do not make repeated approaches after a clear expression of disinterest. If you are a business contact and we believe a specific service is genuinely relevant to the machinery you operate, we may contact you directly once, but we treat that as a professional courtesy rather than a licence to persist.
Where marketing relies on consent, you may withdraw that consent at any time by emailing creative@expconstruction.autos or by calling +16816186224. Withdrawal does not affect the lawfulness of any communication sent before the withdrawal, and it does not affect our ability to contact you about an active contract or a safety matter.
10. International Transfers
EXP CONSTRUCTION LTD operates within the United Kingdom, and our preference is to keep personal data within the United Kingdom and the European Economic Area wherever possible. Where a service provider stores data outside those areas, we take steps to ensure that the transfer is protected by appropriate safeguards, such as the standard contractual clauses approved for the purpose or an equivalent mechanism recognised in law.
Before engaging a provider that may process data overseas, we assess what data will be involved, why the transfer is necessary and what protections apply. Where the data involved is minimal and the provider is based in the United Kingdom, no international transfer occurs at all. We review our arrangements periodically and we change providers if the safeguards are not adequate.
If you would like to know whether a specific transfer affects your information, you can ask us using the contact details at the end of this policy, and we will explain the mechanism that applies to the processing you are concerned about.
11. Data Retention
We keep personal data only for as long as it is needed for the purpose for which it was collected, plus any period required by law for records such as invoices and safety documentation. Enquiries that do not lead to a project are usually removed from active contact records within a reasonable period, while project files are retained for longer because maintenance, warranty and regulatory obligations can continue for years after commissioning.
Where a client engages us under a maintenance contract, contact details may be retained for the duration of that relationship and for a short period afterwards so that we can resolve any outstanding matter. Calibration records, network records and safety documents are retained in line with the standards that apply to the machinery concerned, because these records protect both the client and our engineers.
When data is no longer needed, we delete it or anonymise it so that it can no longer be linked to an individual. Where deletion is not immediately possible because data sits within a backup, we isolate it from active systems and allow the backup cycle to complete before it is removed for good.
12. Security of Personal Data
We take the security of personal data seriously and we apply measures that are proportionate to the size and nature of our business. Access to project files and email is limited to team members who need it to do their work, and devices that hold personal data are protected with authentication and kept up to date. We use reputable providers for hosting and email and we keep software patched against known vulnerabilities.
Because our engineering work touches industrial networks, we understand the value of segmentation and least privilege, and we apply the same thinking to our own information systems. Physical documents that contain personal data are stored securely at our workshop and are disposed of confidentially when no longer required. Staff are reminded of their responsibilities and are expected to challenge any request for data that does not look legitimate.
No system can be guaranteed perfectly secure, but we act quickly if a problem is identified. If a breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority without undue delay and we will inform you directly where the law requires it, explaining what happened and what you can do to protect yourself.
13. Privacy for Children
Our services are aimed at businesses and professional clients, and this website is not directed at children. We do not knowingly collect personal data from anyone under the age of sixteen. If you believe that a child has provided personal data to us, please contact us and we will delete the information promptly.
Because our work involves industrial sites, access is normally restricted to authorised adults, and we do not design our public pages to appeal to or to gather information from minors. Any unexpected data of this kind that comes to our attention will be removed from our systems and, where relevant, reported in line with our legal duties.
Parents and guardians who have a concern about information that may have been provided by a child are welcome to contact us using the details in this policy. We will treat such a request sensitively and will act on it without requiring the child to make direct contact.
14. Your Rights
Data protection law gives you a set of rights over the personal data that we hold about you. You have the right to be informed about how your data is used, the right of access to the data we hold, the right to have inaccurate data corrected, and the right to have data erased in certain circumstances. You also have the right to restrict processing, the right to object to processing based on legitimate interests, and the right to data portability where processing is based on consent or contract and is carried out by automated means.
To exercise any of these rights, contact us at creative@expconstruction.autos or call +16816186224. We may ask for proof of identity so that we do not disclose personal data to the wrong person, and we will respond within the time limits set by law. There is normally no charge for exercising your rights, and we will explain clearly if any exception applies to your particular request.
- The right to be informed about our processing.
- The right of access to your personal data.
- The right to rectification of inaccurate data.
- The right to erasure in defined circumstances.
- The right to restrict processing.
- The right to object to certain processing.
- The right to data portability.
- Rights relating to automated decision making.
15. Complaints and Supervisory Authority
If you are unhappy with the way we have handled your personal data, please raise the matter with us first so that we have the chance to put it right. You can contact EXP CONSTRUCTION LTD at creative@expconstruction.autos or by telephone on +16816186224, and we will investigate promptly and explain our findings.
You also have the right to lodge a complaint with the Information Commissioner, who is the supervisory authority for data protection in the United Kingdom. We would encourage you to speak to us before escalating a concern, because most issues can be resolved quickly once they are understood, but the right to approach the regulator is yours and we respect it fully.
Where a complaint concerns work we carried out for a client, we may need to involve that client in the investigation, for example if the data in question was provided to us by the client. In that situation we will tell you what we are doing and keep you informed of the outcome.
16. Automated Decision Making
EXP CONSTRUCTION LTD does not use automated decision making that produces legal or similarly significant effects concerning you. We do not score individuals, we do not use algorithms to decide who receives a quotation, and we do not rely on profiling to select customers or to set prices. Every substantive decision about a project is made by a person who understands the technical and commercial context.
Where we use software to help manage work, such as a scheduling tool or an email filter, that software supports human judgement rather than replacing it. If we ever introduce a feature that makes decisions automatically, we will describe it in this policy, explain the logic in an accessible way, and provide a route to request human intervention.
Because our processing does not depend on automated profiling, the specific rights relating to solely automated decisions will rarely be engaged. We mention them here so that the policy is complete and so that you know where you stand.
17. Third Party Websites
Our website may contain links to other websites, including sites operated by clients, suppliers or professional bodies. This privacy policy applies only to EXP CONSTRUCTION LTD and to the pages we control. When you follow a link to another site, the privacy practices of that site apply, and we encourage you to read the relevant notice before providing personal data.
We are not responsible for the content or the data handling of third party sites, and a link from our pages does not imply that we endorse their practices. If you reach a site that concerns you, please raise it with us and, where appropriate, with the operator of that site directly.
Where we host content or forms provided by a third party, we take reasonable steps to ensure that the provider meets our expectations for confidentiality and security, but we cannot control every aspect of an external service. We review these arrangements as part of our regular assessment of our own data protection posture.
18. Changes to This Policy
We may revise this privacy policy to reflect changes in our practices, in the services we offer or in the law. When we make a material change, we will update the text on this page and adjust the date shown at the end of the document so that you can see when the revision took effect. We will not quietly reduce the protections described here without explaining the change.
If a change significantly affects how we use personal data that we already hold, we will take reasonable steps to bring it to the attention of affected individuals, for example by placing a prominent notice on the website or by contacting known business contacts directly. Continuing to use the site after a change indicates your acceptance of the revised policy.
Earlier versions of this policy are available on request. If you need to know what the policy said at a particular time, perhaps in connection with a project you commissioned, contact us and we will provide the relevant version.
19. How to Contact Us
EXP CONSTRUCTION LTD welcomes questions, requests and comments about this privacy policy and about the way we handle personal data. You can write to us at 18 Hollyhurst Road, Sutton Coldfield - B73 6SY, United Kingdom (GB), send an email to creative@expconstruction.autos, or telephone +16816186224 during our published business hours.
A member of the team will acknowledge your message and route it to the person best placed to help. If your request relates to your rights over personal data, please say so clearly so that we can begin the verification and response process straight away. We aim to be straightforward and timely in everything we do.
This policy was last reviewed and updated in 2026. Thank you for taking the time to read it, and for trusting EXP CONSTRUCTION LTD with the information you choose to share.