Privacy Policy

1. Who we are

Spectrolytic Ltd is a company registered in Scotland. Our registered office is 1.6 Techcube, Summerhall, Edinburgh EH9 1PL, United Kingdom. We are the data controller for personal data collected through this website.

We also operate through Spectrolytic GmbH in Wackersdorf, Germany. Both companies use the same email address, and the full details of each are on our Legal Notice page.

For anything to do with this policy or with your personal data, email info@spectrolytic.com.

2. What data we collect and why

2.1 Forms on this site

Every form on this website that sends us something works the same way. When you press the send button, the contents of the form are sent over an encrypted connection to Formspree, a form-handling service operated by Formspree, Inc. in the United States. Formspree passes the contents on to a Spectrolytic mailbox. Formspree acts as our processor — it handles the submission in order to deliver it to us. Nothing you type into a form is stored on your device, and no form sets a cookie. Two things on the site are not forms of this kind and send nothing anywhere: the password box on the customer portal, which is checked in your own browser, and the calculator on the return-on-investment page, whose figures never leave your device.

These are the forms, and exactly what each one sends:

• Contact form on the home page — your first and last name, company, work email address, your message, and how you heard about us.
• Contact page form — your first and last name, work email address, company, job role, phone number, the type of enquiry, a description of your application or asset, your message, and how you heard about us. The phone number is optional.
• Application enquiry form, the pop-up on the Applications pages — your first and last name, work email address, company, your question, the name of the application card you clicked, for example “Gas Engines”, and — on the English version of the site only — how you heard about us.
• Document request form on the Resources page — your first and last name, work email address, company, and the title of the document you asked for. It also records which type of document it was, and whether that document exists yet, so that we know which requests we were unable to fulfil.
• Newsletter box — your email address, and nothing else.

The same forms appear on the German and Spanish versions of these pages and work the same way, except that the application enquiry form there does not ask how you heard about us.

Why we process it, and on what legal basis. For the enquiry, application and document forms we rely on our legitimate interests under Article 6(1)(f) of the UK GDPR: handling enquiries about our products from people who chose to get in touch with us. Where your enquiry is a request for a quotation, the basis is instead Article 6(1)(b), taking steps at your request before entering into a contract. For the newsletter box the basis is your consent, Article 6(1)(a).

We have not settled whether an email address given in order to download a document will later be used for marketing. Until that is decided and written into this page, addresses given there are used only in connection with the document that was asked for.

We do not currently run a mailing-list platform. An address entered in the newsletter box arrives in the same mailbox as every other enquiry rather than being added to a list, so there is no unsubscribe link to click. To have your address removed, email info@spectrolytic.com.

The ROI calculator works differently. It runs entirely inside your browser. The figures you set with the sliders, and the email address and company name it asks for at the end, are not sent to us. They are gone as soon as you leave the page.

The chat assistant in the corner of some pages is a fixed set of questions and answers. There is no free-text box, it sends nothing anywhere, and it stores nothing.

2.2 Website analytics (Google Analytics 4)

We would like to know which pages people find useful, so that we can improve the site. For that we use Google Analytics 4. It only runs if you accept it. If you have not answered the cookie banner, or you have declined, nothing belonging to Google is loaded at all: no Google script is fetched, no request is sent to Google, and no Google cookie is created. Declining changes nothing else about how the site works.

If you do accept, Google Analytics collects: which pages you look at and when; roughly how long you spend on them; the site or search that brought you here; your device type, screen size, browser and language setting; and a randomly generated identifier that lets Google recognise the same browser on a later visit. Your IP address is sent to Google as part of each request, and Google uses it to work out an approximate location — country or region, not a street address. Google states that it does not retain IP addresses in Google Analytics 4. We do not ask Google to combine this data with anything else, and it does not tell us who you are.

Google acts as our processor for this, and processes the data on servers in the United States and in other countries outside the UK. The legal basis is your consent, Article 6(1)(a) of the UK GDPR, together with regulation 6 of the Privacy and Electronic Communications Regulations for the cookies themselves. We do not rely on legitimate interests for analytics cookies, because UK law does not allow it.

2.3 Cookies and browser storage

This is everything the site can put on your device. There is nothing else.

• cookieConsent — a cookie, plus a matching entry in your browser’s local storage. It records one word, “accepted” or “declined”, so that you are not asked again on every page. The cookie lasts one year; the local storage entry stays until you clear your browser data. This one is set without asking, because remembering your answer is what the law calls strictly necessary — a “no” cannot be honoured without recording it.
• sp_lang_choice — a local storage entry, not a cookie. It is written only if you use the language switcher, and it records which language you picked, for example “de”. It contains no identifier and is not sent anywhere.
• spectrolytic_portal_auth — used only on the customer portal page. It records, for the current browser tab alone, that the portal password has been entered. It disappears when you close the tab.
• _ga and _ga_ followed by a stream code — Google Analytics cookies, created only if you accept analytics. They hold the randomly generated identifier described in section 2.2. Both expire about two years after your most recent visit.

Put plainly: unless you accept analytics, the only thing kept on your device is the record of your own answer — plus your language choice if you used the switcher, and the portal flag if you used the portal. None of those identify you, and none of them are sent to anyone. Should Google ever set an analytics cookie beyond the two named above, the Cookie settings button below removes that as well.

2.4 Changing your mind

You can change your answer at any time, from any page on this site:

Cookie settings

That button forgets your stored answer, switches Google Analytics off straight away, deletes Google’s analytics cookies from your browser, and brings the cookie banner back so that you can choose again. If nothing happens when you press it, JavaScript is switched off in your browser — in which case no analytics cookie could have been set in the first place.

You can also delete cookies through your browser’s own settings, or install Google’s Google Analytics opt-out browser add-on, which blocks Google Analytics on every website you visit.

Withdrawing consent stops any further collection. It does not undo analytics that were collected while consent was in place.

3. How we store and protect your data

Form submissions arrive as email in a Spectrolytic mailbox. Connections to this website, and from it to Formspree, are encrypted using HTTPS. There is no customer relationship management system connected to this website, so nothing you send through a form is loaded automatically into a database.

The website itself is hosted on Microsoft Azure Static Web Apps. Microsoft operates the servers that deliver these pages, which necessarily involves handling your IP address at the network level in order to send you the page you asked for.

How long we keep it. We keep enquiry correspondence for as long as we need it to deal with your enquiry and any follow-up that comes from it, and no longer. If you would like your enquiry deleted sooner, email info@spectrolytic.com.

4. Who we share data with

We do not sell personal data, and we do not share it for advertising. The only organisations that handle it on our behalf are:

• Formspree, Inc. (United States) — delivers the contents of the forms on this site to our mailbox. Privacy policy
• Google — website analytics, and only if you have accepted analytics cookies. Privacy policy
• Microsoft — hosting of this website on Azure Static Web Apps. Privacy statement

Formspree is based in the United States, and Google processes analytics data outside the UK. Both are international transfers of personal data. The safeguards relied on for each are among the points going to legal review, and they will be named here once that is done.

We may also disclose personal data where the law requires us to.

5. Your rights

Under the UK GDPR you have the right to:

• ask what personal data we hold about you, and get a copy of it;
• have inaccurate data corrected;
• ask us to delete it;
• ask us to restrict what we do with it;
• object to processing that we carry out on the basis of our legitimate interests;
• receive data you gave us in a portable form, where that right applies;
• withdraw your consent at any time where we relied on consent — for analytics, use the Cookie settings button in section 2.4; for the newsletter, email us.

To use any of these rights, email info@spectrolytic.com. There is no charge, and we will not ask you for more information than we need in order to find your data.

If you are unhappy with how we have handled your personal data, you can complain to the Information Commissioner’s Office, the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

6. Changes to this policy

We may update this policy. When we do, the new version appears on this page and the date at the top changes. If a change means we need your consent for something new, we will ask for it on the site rather than assume it.

7. Contact

For anything in this policy, or to use any of the rights in section 5:

info@spectrolytic.com
Spectrolytic Ltd
1.6 Techcube, Summerhall
Edinburgh EH9 1PL
United Kingdom