The Eastern Natural Group Ltd. ("the Group", "we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect personal data we receive through our website and our broader business activities, and the rights you have in relation to that data under the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.
1. Who we are
The Eastern Natural Group Ltd. is the data controller for personal data collected through this website. We are a company incorporated in England and Wales (company number to be inserted upon registration), with a registered office in the United Kingdom.
For all data-protection enquiries, contact us at privacy@easternnaturalgroup.com.
2. Personal data we collect
We may collect the following categories of personal data:
- Information you provide voluntarily. When you contact us by email or other channels, we receive your name, email address, organisation, and the contents of your message.
- Technical data. Our hosting and server logs automatically record limited technical information for security and operational purposes, including IP address, browser type, operating system, referring URL, pages visited, and access times.
- Cookies and similar technologies. See our Cookie Policy.
3. Lawful bases for processing
We process personal data on the following lawful bases under Article 6 of the UK GDPR:
- Legitimate interests (Art. 6(1)(f)): to operate, secure, and improve the website; to respond to enquiries; and to engage with prospective and existing partners and counterparties.
- Consent (Art. 6(1)(a)): where you have given us specific consent to process your data, including for any future marketing communications.
- Contract (Art. 6(1)(b)): where processing is necessary to take steps prior to entering into, or to perform, a contract with you.
- Legal obligation (Art. 6(1)(c)): where we are required to retain or disclose data by applicable law, regulation, or order of a competent authority.
4. How we use your personal data
- To respond to enquiries and to engage in dialogue with potential or existing partners, counterparties, and project participants.
- To operate, secure, and improve our website and related services.
- To comply with legal, regulatory, and tax obligations applicable to the Group.
- For internal record-keeping, governance, audit, and risk-management purposes.
5. Sharing with third parties
We do not sell personal data. We may share personal data with:
- Group companies and ring-fenced project entities under common control, where necessary for the purposes set out above.
- Professional advisers (legal, tax, accounting, audit) under duties of confidentiality.
- IT service providers (hosting, email, security) acting as processors under written contract.
- Regulators, law-enforcement authorities, or courts, where we are legally required to disclose.
- Any prospective buyer or successor in connection with a corporate transaction, subject to appropriate confidentiality obligations.
6. International transfers
Where personal data is transferred outside the United Kingdom, we ensure that appropriate safeguards are in place under Article 46 of the UK GDPR — including the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, adequacy regulations, or other recognised mechanisms, with supplementary measures applied where required.
7. Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. As a general rule, enquiry-related correspondence is retained for up to 24 months unless an ongoing relationship requires longer retention. Records relating to commercial relationships, contracts, and statutory obligations are retained for the relevant statutory periods.
8. Your rights
Subject to the conditions and exceptions set out in the UK GDPR, you have the right to:
- request access to the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request erasure of your data (the "right to be forgotten");
- request restriction of processing;
- request data portability;
- object to processing carried out on the basis of legitimate interests;
- withdraw your consent at any time, where we rely on consent;
- not be subject to a decision based solely on automated processing where it produces legal or similarly significant effects.
To exercise any of these rights, please contact privacy@easternnaturalgroup.com. We will respond within one month of receipt; this period may be extended by up to two further months for complex or numerous requests.
9. Security
We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Where we share data with processors, we require them to apply equivalent protections under written contract.
10. Complaints
You have the right to lodge a complaint with the UK's Information Commissioner's Office (ICO) at ico.org.uk or by telephone on 0303 123 1113. We would, however, appreciate the opportunity to address your concerns before you contact the ICO.
11. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or the services we provide. The "Effective" date at the top of this page reflects the latest version. Material changes will be notified through this website or, where appropriate, by direct communication.
12. Contact
For any questions regarding this Privacy Policy or our data-protection practices, please contact us at privacy@easternnaturalgroup.com.