Last updated: 21 July 2026
This notice explains what personal data AQUAIOT collects through this website, why we collect it, how long we keep it and what rights you have. It is written to meet our obligations under the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
Who we are
AQUAIOT is a UK smart water monitoring and IoT solutions company. Our registered office and correspondence address is Technology House, Stratfield Park, Elettra Avenue, Waterlooville, PO7 7XN, United Kingdom.
We are the data controller for personal data collected through this website. For any question about this notice, or to exercise any of the rights set out below, contact us at info@aquaiot.co.uk.
The personal data we collect
Information you give us
When you submit an enquiry, consultation request or demo request through a form on this site, we collect what you enter. Depending on the form, that may include:
- your name
- your organisation
- your work email address
- your telephone number
- the solution area or sector you select
- the site, asset or requirement you describe in the message field
- the page the enquiry was submitted from
We do not ask for special category data, financial details or payment information through this website, and we ask that you do not include any in a message to us.
Information we collect automatically
Our web host records standard server log data, including IP address, browser type, referring page and time of request. This is used to deliver the site, diagnose faults and protect against abuse and automated attacks.
Where you have given consent, our analytics and measurement tools also collect information about how the site is used. This is described under Cookies and tracking below.
Why we use your data, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry and discussing your requirements | Legitimate interests, namely responding to a request you have made to us |
| Preparing a quotation, proposal, site survey or demonstration you have asked for | Steps taken at your request before entering into a contract |
| Keeping a record of enquiries for business administration and to maintain continuity if you contact us again | Legitimate interests in running and administering our business |
| Keeping the website secure, available and free from abuse | Legitimate interests in protecting our systems |
| Analytics, measurement and understanding how the site is used | Your consent, given through the cookie banner |
| Meeting legal, accounting and regulatory obligations | Compliance with a legal obligation |
We do not carry out automated decision-making or profiling that produces legal effects for you. We will not add you to a marketing mailing list on the strength of a website enquiry alone without telling you first and giving you a straightforward way to decline.
Cookies and tracking
Cookies and similar technologies are small files or identifiers stored on your device. We group them as follows.
Strictly necessary
These are required for the site to function, to keep it secure, and to remember your cookie preferences. They are set without consent because the site cannot operate properly without them. This includes cookies set by our website platform, our hosting and caching layer, and our enquiry forms.
Analytics and measurement
These are only set once you accept them through our cookie banner. They currently include:
- Google Analytics, delivered through Google Tag Manager. Measures pages viewed, traffic sources and general site usage.
- Microsoft Clarity. Records how visitors interact with pages, including scrolling and clicks, in order to identify usability problems.
- Albacross. A business to business analytics tool that estimates which organisation a visitor may be associated with, based on network information. It is used to understand which sectors and organisation types are interested in our solutions.
- Metricool. Attributes visits arriving from our social media channels.
- Site statistics. Aggregate visitor and page view counts provided by our website platform.
You can accept or decline non-essential cookies using the banner shown when you first visit. You can change your mind at any time by clearing cookies for this site in your browser and reloading the page, which will bring the banner back. Most browsers also let you block or delete cookies through their own settings. Blocking strictly necessary cookies may stop parts of the site working.
Who we share your data with
We do not sell personal data and we do not share it for third party advertising.
We share personal data only with service providers who process it on our behalf under a written contract, and only so far as they need it to provide their service to us. These fall into the following categories:
- website hosting, security and content delivery
- email and business productivity services
- the form and customer record systems we use to receive, route and manage enquiries
- the analytics and measurement providers named above, where you have consented
We may also disclose personal data where we are required to do so by law, by a court, or by a regulator, or where it is necessary to establish, exercise or defend legal claims.
International transfers
Some of our providers process data outside the United Kingdom. Google and Microsoft process personal data in the United States and other countries. Albacross and Metricool are established in the European Economic Area.
Where personal data is transferred outside the UK, we rely on either UK adequacy regulations, which cover transfers to the EEA, or on the International Data Transfer Agreement or the UK Addendum to the European Commission Standard Contractual Clauses, together with any additional safeguards required.
How long we keep it
- Enquiries. Kept only for as long as we need them for the purposes described above, after which they are deleted.
- Contractual and accounting records. Where an enquiry leads to a contract, records we are legally required to retain, for example for tax and accounting purposes, are kept for the statutory retention period that applies.
- Website server logs. Kept for a short period for security and diagnostic purposes, in line with our host’s retention settings.
- Analytics data. Kept in line with each provider’s standard retention period, which is set to the shortest option practical for our purposes.
Where we no longer need personal data, we delete it or irreversibly anonymise it.
How we protect your data
We apply appropriate technical and organisational measures to protect personal data, including encrypted connections to this website, access controls on the systems that hold enquiry records, and limiting access to staff who need it to do their job.
Your rights
Under UK data protection law you have the right to:
- be informed about how we use your personal data, which is the purpose of this notice
- request a copy of the personal data we hold about you
- have inaccurate or incomplete data corrected
- request erasure of your data in certain circumstances
- restrict how we process your data in certain circumstances
- object to processing carried out on the basis of legitimate interests
- data portability, where processing is based on consent or contract and carried out by automated means
- withdraw consent at any time, where we rely on consent, without affecting processing carried out before withdrawal
To exercise any of these rights, email info@aquaiot.co.uk. We will respond within one month. There is normally no charge.
If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner’s Office, the UK supervisory authority, at ico.org.uk/make-a-complaint, or by calling 0303 123 1113. We would ask that you raise the matter with us first so that we have the opportunity to put it right.
Other websites
This site links to third party websites, including manufacturer documentation and UK regulatory guidance. This notice does not apply to those sites, and we are not responsible for their privacy practices. Please read the privacy notice on any site you visit.
Changes to this notice
We may update this notice to reflect changes to our practices or to legal requirements. The date at the top shows when it was last changed. Where changes are significant we will make that clear on this page.