Privacy Notice
1. Introduction and Data Controller
This privacy notice explains how NGen collects, uses, stores, and protects personal information when you visit our website (ngen.group) or submit an enquiry to us.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:
NGEN GROUP LIMITED
Company number: 11284437
Registered office address: Bury Lodge, Bury Road, Stowmarket, Suffolk, United Kingdom, IP14 1JA
Email: privacy@ngen.group
2. Information We Collect
We collect information you directly provide when submitting an enquiry on our website:
- Identity and contact details: Your name and work email address.
- Organisation details: Organisation name, sector type, and approximate team size.
- Operational context: A brief description of the administrative task or operational challenge you wish to discuss.
We do not seek or collect sensitive personal data, pupil educational records, special category data, or payment information through this website.
3. How and Why We Use Your Information
We use your information solely to:
- Evaluate your enquiry and determine whether NGen can assist with your workflow challenge.
- Contact you to schedule an introductory 20-minute discussion.
- Respond to direct communications or questions you raise.
Lawful basis under UK GDPR: We process your contact details on the basis of legitimate interests (Article 6(1)(f)) in responding to commercial enquiries from prospective business clients, and where applicable, taking steps at your request prior to entering into a contract (Article 6(1)(b)).
4. Data Sharing and Processors
We never sell, rent, or trade your personal data. We only share information with trusted technical infrastructure providers required to operate our service:
- Hosting: Cloudflare Pages (secure web hosting and serverless infrastructure).
- Email relay: Mailgun Technologies (EU data centre endpoint) for routing contact form notifications securely to our inbox.
All service providers operate under strict data processing terms compliant with UK and EU data protection standards.
5. Client Data and Client Systems
When providing consultancy or implementation services, NGen works directly inside your organisation's existing Microsoft 365, Google Workspace, or cloud tenancy. Your operational documents, records, and databases remain under your organisation's sole governance and security boundaries. We do not extract, store, or train third-party AI models on your proprietary business records.
6. Cookies and Website Tracking
Our website is designed for speed, privacy, and simplicity:
- We do not use advertising trackers, retargeting pixels, or invasive behavioral tracking.
- We use only minimal, strictly necessary technical cookies (if required for basic navigation state and security).
7. Data Retention
Enquiry details are retained only for as long as necessary to address your request and manage our ongoing business relationship. If an engagement does not proceed, your enquiry details are archived or deleted within 12 months unless required for legal or accounting obligations.
8. Your Rights Under UK GDPR
Under UK data protection law, you have the right to:
- Access: Request a copy of the personal information we hold about you.
- Rectification: Request correction of inaccurate or incomplete information.
- Erasure: Request deletion of your personal data where there is no good reason for us continuing to process it.
- Restriction / Objection: Object to or ask us to restrict the processing of your data.
To exercise any of these rights, please contact us at privacy@ngen.group.
You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO) at ico.org.uk.