Privacy Policy

Last updated: this page is part of the ACE Climate website launch preparation. This policy has not yet had a professional legal review — see the note at the end of this page.

Who we are

This website is operated by ACE Climate Ltd, a company registered in England and Wales (company number 17428922), registered office 9 Anderton Grove, Ashton-Under-Lyne, OL6 9EF, trading as ACE Climate (“Precision Climate Solutions”). ACE Climate Ltd is the data controller for the personal data described in this policy, including any business-contact data used for partnership outreach. For any privacy query, contact us using the details on our Contact page.

The different kinds of data we handle

ACE Climate’s systems distinguish between several separate categories of personal data, which are handled differently:

• Public website enquiry data — the information you submit through our contact / quote enquiry form (name, contact details, postcode, property type and your message). This is used solely to respond to your enquiry.
• Customer portal data — if you become a customer, project, quote, job and invoice information may be recorded to deliver our services. Our customer portal remains development-only ahead of a planned data-platform migration and does not yet hold live customer accounts.
• Operational / security data — technical records such as security audit logs, session identifiers and rate-limiting counters, used to keep the website and any future customer systems secure and reliable. These do not contain your enquiry content.
• Business contacts for partnership outreach — we occasionally contact businesses that could work with us (for example, companies that build garden rooms) using the business contact details they publish on their own website, such as an info@ address. We do not buy contact lists, guess email addresses or contact private individuals for marketing. See “Business contacts we find” below.

How we use enquiry data

Information submitted through the contact/quote form is used to respond to your enquiry, prepare a quotation or arrange a site survey. Depending on how our email delivery is configured at any given time, your enquiry is either emailed directly to our team or recorded for us to review — the form will always tell you honestly which of these happened, and will never claim your message was delivered if it wasn’t.

Business contacts we find

What we collect: the business’s name, website, area, publicly available Companies House details, and the business email address or phone number published on its own website. We also keep a short note of the public page each detail came from, so we can show where we found it.

Why: to contact businesses that may want to work with us — for commercial air-conditioning maintenance, commercial air-conditioning installations, and garden-room installation partnerships. Our lawful basis is our legitimate interest in business-to-business partnerships. We only email companies, not sole traders or individuals, unless they have asked us to.

How long: if we do not contact a business, we delete its details within 12 months. If we do, we keep the details and our correspondence for up to 24 months after our last contact, unless we start working together.

Stopping contact: every email we send includes a one-click unsubscribe link, and you can also reply to ask us to stop. We will not contact you again. To make sure of that, we keep a minimal record of the email address or domain on a do-not-contact list.

Your rights: you can ask what we hold about you, ask us to correct or delete it, or object to our use of it, using our Contact page.

Cookies

We use essential cookies to run this site, and only use non-essential analytics or marketing cookies if you consent. See our Cookie Policy for full detail.

Advertising measurement (Meta Pixel)

If you allow marketing cookies, this website uses the Meta Pixel from Meta Platforms, Inc. to measure how our Facebook and Instagram adverts perform. Our lawful basis is your consent, which you can withdraw at any time from “Cookie Preferences” in the footer. It never runs in the customer portal or our staff systems.

When it is on, Meta receives:

• the address of each page you view on the public website, and the page that referred you;
• technical information your browser sends with any web request, including your IP address and browser type;
• the identifiers in Meta’s cookies (see our Cookie Policy);
• that you viewed or completed our room sizing guide (without any of your figures or results), or that you sent us an enquiry, together with its general type (for example “new installation”) and how you reached the form (for example “from the room sizing guide”).

We do not send Meta your name, e-mail address, phone number, postcode, address, company name, the content of your message, or anything you type into our calculators.

Who is responsible for what

• Your enquiry: ACE Climate Ltd alone is the controller of anything you send us through our enquiry form. None of what you type into the form is sent to Meta — Meta is only told that an enquiry was sent, its general type and how you reached the form.
• Collecting pixel data and sending it to Meta: ACE Climate Ltd and Meta Platforms, Inc. are joint controllers for collecting this data on our website and sending it to Meta. Our respective responsibilities are set out in Meta’s UK Controller Addendum, which forms part of the terms we accept to use the Meta Pixel. Under those terms, ACE Climate provides this notice and obtains your marketing consent before anything is collected.
• Reports for us: when Meta uses the data to tell us how our adverts performed, it does so on our behalf.
• What Meta does with it afterwards: once Meta has received the data, Meta decides for itself how to use it, as a separate controller. Under its terms this can include showing adverts — ours and, after combining the data with other information, adverts generally — to the people most likely to be interested; linking it to a Facebook or Instagram account you hold; personalising the content and adverts you see on and off Meta’s services; and keeping its services safe, researching and improving them. Meta’s terms do not allow other advertisers to target adverts based only on our data.

Your rights over this data

Meta is responsible for handling your rights to access, correct, delete, restrict or move the data it holds after receiving it. You can exercise those rights, and your right to object, directly with Meta. You can also contact us about any of it (see “Your rights” below): we will deal with what we are responsible for and pass on anything that concerns data Meta holds. You can withdraw consent at any time from “Cookie Preferences” in the footer; this stops any further data being sent to Meta from this website but does not affect what was sent before you withdrew it.

Data sent to the United States

Meta Pixel data is sent to Meta Platforms, Inc. in the United States. Meta’s published terms say these transfers are covered by its UK Data Transfer Addendum, which uses the UK Information Commissioner’s International Data Transfer Addendum to the European Commission’s standard contractual clauses.

How long Meta keeps it

Meta’s terms say it may keep this data for up to two years. If we use it to build an advertising audience, Meta keeps that audience until we delete it. We do not keep our own copy of Meta Pixel data.

Contacting Meta

Meta’s identity and contact details, including how to contact its data protection officer, how it uses data and how to exercise your rights with Meta, are set out in Meta’s privacy policy.

Website analytics

ACE Climate runs its own first-party, privacy-conscious website analytics. It is not a third-party advertising or tracking service, and it sets no cookie of its own. It runs only after you have accepted non-essential (analytics) cookies; until then, no analytics are collected.

When it is active, for each page view we record:

• the page (path) you viewed and the website or search engine you arrived from (the referring site's address only);
• campaign tags in the link you followed (UTM source, medium and campaign), where present;
• coarse, general information about your device: device type, browser family and operating system family (for example “mobile, Safari, iOS”) — never a detailed device fingerprint;
• an approximate country or region, where our hosting platform can provide it;
• a daily-rotating, anonymous visitor identifier so we can count visits and sessions.

We do not keep your full IP address for routine analytics: the anonymous identifier is a one-way code derived in part from it that changes every day, so it cannot be used to recognise you from one day to the next or to identify you personally. Where you later submit an enquiry, we may associate that enquiry with the visit it came from, so we can understand which channels bring genuine enquiries.

Analytics retention: individual page-view records are kept for up to 90 days; after that we keep only aggregate daily totals (such as “visitors per day”), which contain no individual records.

Security and abuse-prevention logging

Separately from analytics, and regardless of cookie consent, we keep security logs to protect our systems and our customers' data from attack and abuse — for example failed sign-in attempts, requests that fail our security checks, and automated scans or probes against the site. This is necessary for the security of the service, and we rely on our legitimate interest in keeping ACE's systems and data safe.

These security logs may include:

• the type of event (for example a failed login or a blocked suspicious request) and the page or route involved;
• a one-way source correlation code (a hash), used to group repeated events from the same origin — we do not retain your raw IP address for this routine purpose;
• coarse technical metadata such as an approximate country and browser family.

Security-log retention: security events are kept for up to 180 days; a small number of the most serious events may be kept longer where needed to investigate or prevent abuse.

Third-party providers

Where the following are configured, limited data may pass through these categories of third-party provider. None are active unless explicitly configured for this deployment:

• An email delivery provider, to send enquiry notifications and account-related emails.
• A rate-limiting/security provider, to protect forms and login pages from abuse.
• A hosting provider, to run the website itself.
• An email delivery provider for business outreach, where configured.
• Companies House, for checking that a business is a registered company.
• Meta Platforms, Inc. (the Meta Pixel), only active once you consent to marketing cookies.

Data retention

We keep enquiry data for as long as reasonably needed to respond to you and for a limited period afterwards for our own records, and no longer than necessary for those purposes.

We do not keep a copy of Meta Pixel data; it goes from your browser to Meta. How long Meta keeps it is explained under “Advertising measurement (Meta Pixel)” above.

For businesses we contact as part of partnership outreach, we keep prospect details and correspondence for the periods described under “Business contacts we find” above. A minimal do-not-contact record is kept indefinitely so we can continue to honour any request not to be contacted.

Your rights

Under UK data protection law you have rights to access, correction and deletion of your personal data, among others. To exercise any of these rights, contact us via our Contact page. If we have contacted you for business outreach, you can object to that marketing at any time and we will stop permanently.

Changes to this policy

We may update this policy as the website and our services develop. Material changes will be reflected on this page with an updated date.

A note on legal review

This policy is written to be accurate about how this specific website currently works, in plain English. It has been prepared as part of website development and has not been reviewed by a qualified solicitor. We recommend a professional legal review of this policy — and of UK GDPR/data protection compliance generally — before the website is treated as fully launched for live customer use.