Legal

Privacy notice

In briefThis notice explains what personal information Enhanced Group collects when you contact us, ask for a consultation, apply for a job or use this website. It covers why we collect it, who helps us process it, how long we keep it and the rights you have. If you have a question about your information, email hello@enhancedgroup.co.uk or call 0117 472 9200.

Draft for review. This privacy notice is a draft, prepared on 28 September 2026 for the website proposal. It must be reviewed by a solicitor or data-protection adviser before it is published or relied on.

1. Who we are

Enhanced Group is a trading name of Enhanced Technology Solutions Ltd (company number 13094854). We are the controller of the personal information described in this notice, which means we decide why and how it is used.

  • Address: 43, Dixon Business Centre, Dixon Rd, Brislington, Bristol BS4 5QW
  • Email: hello@enhancedgroup.co.uk
  • Phone: 0117 472 9200, Monday to Friday, 08:30 to 17:00
  • Privacy contact: Placeholder: privacy contact mailbox and the person or role responsible for data protection (Q09)
  • ICO registration number: Placeholder: ICO data protection fee registration number (Q09)

2. What this notice covers

This notice explains how we use personal information when you:

  • visit this website;
  • contact us through the website, by email or by phone;
  • ask us to arrange a consultation;
  • apply for a job or send us your CV.

It does not cover information we handle on behalf of our clients while providing IT, cyber security, voice, connectivity or print services. Our contract with each client sets out how that information is handled. Placeholder: confirm that client contracts include data processing terms (Q29)

3. What we collect and how we use it

Enquiries and consultation requests

When you fill in our contact or consultation form, we collect what you enter: your name and email address, and anything else you choose to give us, such as your organisation, your phone number, the subject of your enquiry or the services you’d like to talk about, and your message.

We use it to reply to you, to arrange and prepare for a consultation, and to send you the information or quote you asked for.

  • Lawful basis: our legitimate interests in answering enquiries and running our business. Where you ask for a quote or a service, we also rely on taking steps at your request before entering into a contract.
  • Do you have to give it? Only your name and email address, because we need them to reply. Everything else is optional.

Phone calls and emails

When you call or email us, we keep your contact details and a record of what was discussed or agreed, so that we can deal with your request and refer back to it later.

  • Lawful basis: our legitimate interests in dealing with enquiries and keeping accurate records.
  • Call recording: Placeholder: confirm whether calls to or from Enhanced Group are recorded and, if so, why and for how long (Q09)

Job applicants

When you apply through our careers page, we collect your name, your email address, your CV (including anything you choose to put in it) and anything you write in the optional “About you” box. We use this to consider your application and to contact you about it.

  • Lawful basis: taking steps at your request before entering into an employment contract, and our legitimate interests in recruiting.
  • Sensitive information: please leave out details such as your health, ethnic origin, religion or trade union membership unless they are relevant to the role. Placeholder: adviser to confirm the condition relied on if a CV includes special category data (Q09)

Using this website

  • Hosting and security. This website is hosted on Cloudflare. To deliver pages and protect the site from attacks, Cloudflare processes technical information such as your IP address and details of your browser and device. Lawful basis: our legitimate interests in running a secure, working website.
  • Analytics, only with your consent. If you accept analytics cookies, we use Google Analytics to see how the site is used, for example which pages are visited, how people arrive and what type of device and browser they use. Google says Google Analytics 4 does not log or store IP addresses. Lawful basis: consent, which you can withdraw at any time with the “Cookie settings” button in the footer.
  • Spam checks. Our forms use two simple checks against automated spam: a hidden field that people don’t see, and a minimum time on the page. These checks don’t collect any extra personal information.
  • Maps and videos. Some pages, including our contact page, show a map from Google Maps, and one client story shows a YouTube video. When they load, Google receives information such as your IP address and may use cookies, under its own privacy policy.

Our cookie policy has more detail about cookies and how to change your choice.

Marketing

Our website forms don’t include a marketing sign-up. Placeholder: confirm whether you send marketing emails to business contacts and, if so, the lawful basis and how people opt out (Q09)

4. Who we share it with

We use service providers to run our website and our business. They act on our instructions and may only use your information to provide their service to us.

  • Cloudflare hosts the website, runs the program that handles our forms and protects the site.
  • Mailgun delivers what you send through our forms, including CVs, to our mailbox by email.
  • Google provides Google Analytics, only if you consent, and the maps you can choose to show on our website.
  • Our email and IT providers hold our mailboxes and files. Placeholder: mailbox and file storage provider (Q09)

The website itself doesn’t keep a copy of what you send through a form.

We may also share information with professional advisers such as our accountants or lawyers where that is necessary, and with the police, regulators or other authorities where the law requires it.

5. Transfers outside the UK

Some of our providers are based in, or use systems in, countries outside the UK, including the United States.

  • Cloudflare runs a global network, so requests to the website may be handled outside the UK.
  • Our Mailgun account is set up in Mailgun’s EU region. Placeholder: confirm the Mailgun EU region setting and whether any support or other access involves transfers outside the UK and EU (Q09)
  • Google may process Analytics and Maps data in the United States.

Where your information leaves the UK, we rely on Placeholder: the transfer safeguard for each provider, for example the UK Extension to the EU-US Data Privacy Framework or the International Data Transfer Agreement (Q09).

6. How long we keep it

We keep personal information only for as long as we need it for the purposes above.

Information How long we keep it
Enquiries and consultation requests that don’t lead to work Placeholder: retention period for enquiries (Q09)
Correspondence with clients and suppliers Placeholder: retention period, for example the length of the contract plus a set period (Q09)
Job applications and CVs Placeholder: CV retention period and deletion routine (Q09)
Google Analytics data Placeholder: GA4 data retention setting, 2 or 14 months (Q33)
Delivery records held by Mailgun Placeholder: Mailgun log and message retention for our account (Q09)

7. How we protect it

We use security measures that are appropriate to the risk, and Enhanced Group holds Cyber Essentials Plus certification Placeholder: certificate number and expiry date (Q02). The website is served over an encrypted (HTTPS) connection. Placeholder: short summary of other measures, for example multi-factor authentication on mailboxes and who can see CVs (Q29)

8. Your rights

Under UK data protection law you have the right to:

  • access the personal information we hold about you and get a copy of it;
  • ask us to correct information that is wrong or incomplete;
  • ask us to delete your information;
  • ask us to restrict how we use it;
  • object to us using it where we rely on our legitimate interests;
  • ask for information you gave us to be transferred to you or to another organisation, where we use it with your consent or under a contract and the processing is automated;
  • withdraw your consent at any time where we rely on it. For analytics cookies, use the “Cookie settings” button in the footer.

Some of these rights have limits, and we’ll explain if one doesn’t apply to your request. To use any of them, contact us using the details in section 1. We’ll respond within one month, and tell you if we need longer.

Nothing on this website makes automated decisions about you. What you send through our forms goes to our team, who read it and reply.

9. Complaints

If you’re unhappy with how we have handled your personal information, please tell us first so that we can try to put it right. Contact Placeholder: privacy contact mailbox (Q09) or use the details in section 1. We’ll acknowledge your complaint within 30 days, look into it without undue delay, keep you updated and tell you the outcome.

You also have the right to complain to the UK’s data protection regulator, the Information Commission, known as the ICO. (Until 30 September 2026 it was the Information Commissioner’s Office.)

10. Changes to this notice

We’ll update this notice when the way we use personal information changes, and review it at least once a year.

This version is a draft dated 28 September 2026. Placeholder: version number and publication date once approved