Privacy Policy

WeSpark Ltd (“we”, “us”) is committed to protecting your personal data. This policy explains what we collect through this website and in the course of our work, why we collect it, how long we keep it and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Last updated 22 September 2026.

Who we are

WeSpark Ltd is an electrical contractor operating across Hertfordshire, Essex and London. We are the data controller for the personal data described in this policy. You can contact us about data protection at info@wesparkltd.co.uk.

What data we collect

Enquiry data: your name, email address, telephone number, company name, postcode, the service you are interested in and any message or documents you send us through our contact forms, by email or by phone.
Customer data: site addresses, project details, quotations, invoices, certificates and correspondence needed to deliver our services.
Technical data: if you consent to analytics cookies, anonymised information about how you use the site such as pages visited and device type. We do not set analytics or marketing cookies without your consent.
Consent records: the cookie choices you make on this site and the date and time you made them, held as proof of consent.

Why we collect it and our lawful basis

To respond to your enquiry and provide a quotation (lawful basis: taking steps at your request before entering into a contract).
To deliver electrical services, issue certificates and manage our contract with you (lawful basis: performance of a contract, and legal obligation for certification and safety records).
To keep accounting and tax records (lawful basis: legal obligation).
To understand how our website is used and to measure our advertising (lawful basis: your consent, which you can withdraw at any time using the Cookie Settings link in the footer).
To protect our business, for example to detect spam or abuse of our forms (lawful basis: legitimate interests).

How long we keep it

Website enquiries that do not become customers are kept for up to 24 months and then deleted.
Customer records, certificates and correspondence are kept for 6 years after the end of the contract in line with limitation periods and HMRC requirements. Electrical certification may be retained for longer where the installation remains in service.
Cookie consent records are kept for 12 months.

Who we share it with

We do not sell your data. We share it only with providers who help us run the business, under contract and only for the purposes above: our email and IT providers, our customer relationship management system which receives website enquiries so we can respond quickly, our accountants, our insurers where a claim requires it, certification bodies such as NICEIC where a certificate must be registered, and Building Control where a notification is required by law. Where you consent to analytics or marketing cookies, the relevant provider (for example Google or Meta) will process data in line with their own privacy notices.

International transfers

Some of our providers store data outside the UK. Where this happens we rely on the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses or an adequacy regulation.

Your rights

You have the right to access the personal data we hold about you, to have inaccurate data corrected, to have your data erased where there is no good reason for us to keep it, to restrict or object to our processing, to data portability, and to withdraw consent at any time where consent is the basis for processing. To exercise any of these rights email info@wesparkltd.co.uk. We respond within one month. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Security

Enquiries sent through this website are protected with HTTPS, validated and stored in a secure database that only authorised staff can access. We take reasonable technical and organisational measures to protect your data against loss, misuse and unauthorised access.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.

Last reviewed 22 September 2026.