top of page
API-capacitors-website-bg.png

Privacy Policy

Website Privacy Policy

API Capacitors Ltd
Effective date: 11/09/2026
Last updated: 11/09/2026

​

1. Introduction

​

API Capacitors Ltd respects your privacy and is committed to protecting your personal data.

​

This Privacy Policy explains how we collect, use, store and protect personal data when you visit or use our website:

www.api-capacitors.com

​

It also explains your rights under applicable UK data protection and privacy law.

This Privacy Policy applies to visitors to our website, people who contact us through the website, prospective customers, existing customers and other individuals whose personal data we may receive through the website.

 

2. Who we are

​

The organisation responsible for your personal data is:

API Capacitors Ltd
Company number: 05973439
Registered office: Group Engineering Centre, Northside, St Andrews Business Park Thorpe St Andrew, Norwich, NR7 0HT, UK

Website: www.api-capacitors.com
Email: sales@api-capacitors.com
Telephone: +44 1493 652752

​

For the purposes of applicable UK data protection legislation, we are generally the data controller of personal data collected through this website.

​

If you have any questions about this Privacy Policy or how we use your personal data, please contact us using the details above.

 

3. UK data protection law

​

We process personal data in accordance with applicable UK privacy and data protection legislation, including:

  • the UK General Data Protection Regulation ("UK GDPR");

  • the Data Protection Act 2018;

  • the Data (Use and Access) Act 2025;

  • the Privacy and Electronic Communications (EC Directive) Regulations 2003 ("PECR"); and

  • other applicable UK privacy and data protection legislation.
     

The Data (Use and Access) Act 2025 has amended aspects of the UK's data protection and electronic privacy framework. The majority of its relevant data protection provisions came into force on 5 February 2026, with further provisions, including the new data protection complaints requirements, commencing on 19 June 2026. 

 

4. Personal data we collect
 

Depending on how you use our website, we may collect the following information.

Information you provide to us
 

If you contact us, request information, submit an enquiry or request a quotation, we may collect:

  • your name;

  • company or organisation name;

  • job title;

  • email address;

  • telephone number;

  • information contained in your enquiry;

  • project or engineering requirements;

  • information contained in documents you choose to send to us; and

  • any other information you voluntarily provide.
     

Information collected automatically
 

When you visit our website, we may automatically collect certain technical information, including:

  • IP address;

  • browser type and version;

  • device type;

  • operating system;

  • pages visited;

  • time and date of visits;

  • referring website;

  • website interactions; and

  • technical and security information. – not sure about this
     

Some of this information may constitute personal data under applicable law.

 

5. How we collect your information
 

We may collect personal data:

  • directly from you when you complete a contact or enquiry form;

  • when you email or telephone us using details provided on the website;

  • when you request a quotation or information;

  • when you subscribe to marketing communications;

  • when you interact with our website;

  • if approved, through cookies and similar technologies;

  • from publicly available sources; and

  • from third parties where this is lawful and appropriate.
     

Where we obtain personal data from another source, we will provide the privacy information required by applicable law, subject to any applicable exemption. The ICO identifies transparency as a core UK GDPR requirement and expects organisations to explain how personal data is collected and used. 

 

6. How we use your personal data
 

We may use personal data collected through our website to:

  • respond to enquiries;

  • respond to requests for quotations;

  • provide information about our engineering services;

  • communicate with prospective and existing customers;

  • assess potential projects;

  • prepare proposals and quotations;

  • arrange meetings or site visits;

  • provide services requested by you;

  • administer our business relationship with you;

  • maintain records of communications;

  • improve our website and services;

  • monitor website performance and security;

  • prevent fraud, misuse and security incidents;

  • comply with legal and regulatory obligations;

  • establish, exercise or defend legal claims; and

  • send marketing communications where permitted by law.
     

We will not use your personal data for incompatible purposes without an appropriate lawful basis and, where required, providing additional information to you.

 

7. Lawful bases for processing
 

We will only process personal data where we have a lawful basis under applicable data protection law.
 

Depending on the circumstances, this may include:
 

Contract

We may process your information where it is necessary to take steps at your request before entering into a contract or to perform a contract with you.
 

For example, we may use your contact details and project requirements when preparing a quotation or providing engineering services.
 

Legitimate interests

We may process personal data where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.
 

Our legitimate interests may include:

  • responding to business enquiries;

  • managing customer and prospective customer relationships;

  • operating and improving our website;

  • maintaining website and information security;

  • protecting our business and property;

  • preventing fraud and misuse;

  • managing business records; and

  • establishing, exercising or defending legal claims.
     

Where we rely on legitimate interests, we will consider the potential impact of the processing on individuals.
 

Legal obligation

We may process personal data where necessary to comply with a legal or regulatory obligation.
 

Consent

Where applicable law requires consent, we will ask for your consent before processing your personal data for the relevant purpose.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

 

8. Contact and enquiry forms
 

If you use a contact, enquiry or quotation form on our website, the information you provide will be used to respond to your request and, where appropriate, to discuss our services with you.
 

We may retain enquiry information for a reasonable period to:

  • manage the enquiry;

  • maintain appropriate business records;

  • follow up on potential projects;

  • establish or defend legal claims; and

  • comply with legal obligations.
     

We do not require you to provide information that is unnecessary for the purpose of your enquiry.
 

Please do not submit highly sensitive personal information through a general website contact form unless we specifically request it and provide an appropriate secure method for doing so.

 

9. Engineering and project information
 

If you submit information about an engineering project, building, site, plant, machinery, infrastructure or proposed works through our website, we may use that information to assess your requirements and provide our services.
 

Project information may sometimes contain personal data, for example the names or contact details of site personnel, contractors, property owners or other individuals.
 

Where personal data is included in project information, you should ensure that you have an appropriate lawful basis for providing it to us.
 

If we subsequently process personal data solely on behalf of a customer as part of an engineering project, we may act as a data processor rather than a data controller. Any such processing will be governed by the relevant contract and, where required, a data processing agreement.

 

10. Marketing communications
 

We may use business contact information to send information about our engineering services, projects, technical information, events or other business activities where permitted by law.
 

Where consent is required for electronic marketing, we will obtain the appropriate consent before sending marketing communications.
 

You can opt out of marketing communications at any time by:

  • clicking the unsubscribe link in a marketing email;

  • contacting us at marketing@api-holdings.com or

  • otherwise telling us that you no longer wish to receive marketing communications.
     

The Data (Use and Access) Act 2025 has made changes to aspects of the UK's electronic privacy and marketing rules, so our marketing practices will be operated in accordance with the rules applicable at the time the communication is sent. 

 

11. Cookies and similar technologies
 

Our website may use cookies and similar technologies.
 

Cookies may be used for purposes such as:

  • making the website function correctly;

  • remembering preferences;

  • maintaining website security;

  • understanding how visitors use our website;

  • measuring website performance;

  • improving our website; and

  • supporting marketing activities.
     

Some cookies may be necessary for the website to operate and may be used without consent where permitted by law.

​

Where consent is required for a particular cookie or similar technology, we will ask for your consent before using it.

​

The Data (Use and Access) Act 2025 has changed some of the rules concerning cookies and similar technologies, including introducing additional circumstances where consent may not be required. We will apply the rules relevant to the technologies used on our website. 

​

Please see our Cookie Notice / Cookie Policy for details of the cookies we use and how you can manage them.

 

12. Website analytics

​

We may use analytics services to understand how visitors use our website and to identify ways in which we can improve its content, functionality and performance.

Depending on the analytics technology used, this may involve information such as:

  • IP address;

  • device information;

  • browser information;

  • pages viewed;

  • approximate location;

  • referral information; and

  • website interaction data.
     

Where required by law, we will obtain consent before using analytics technologies that are not strictly necessary for the website to operate.

 

13. Website security

​

We may collect and process technical information to protect our website, systems and users.

​

This may include IP addresses, browser information, device information, security logs and information about attempted or successful access.

​

We may use this information to:

  • detect malicious activity;

  • investigate security incidents;

  • prevent unauthorised access;

  • protect our systems;

  • prevent fraud; and

  • maintain the availability and integrity of our website.
     

14. Who we share your personal data with

​

We may share personal data with third parties where necessary and lawful.

​

These may include:

  • website hosting providers;

  • website developers and IT providers;

  • cloud and software providers;

  • CRM and customer-management systems;

  • email and communications providers;

  • analytics providers;

  • marketing service providers;

  • professional advisers;

  • insurers;

  • legal advisers;

  • regulators and government authorities;

  • law enforcement agencies where legally permitted or required; and

  • other suppliers supporting the operation of our business.
     

Where a third party processes personal data on our behalf, we will put appropriate contractual and organisational safeguards in place where required by law.

​

We do not sell your personal data.

 

15. International transfers

​

Some of our service providers may process personal data outside the United Kingdom.

​

If personal data is transferred outside the UK, we will ensure that the transfer is permitted under applicable UK data protection law.

Where required, we will use an appropriate safeguard, such as:

  • a UK adequacy regulation;

  • the UK International Data Transfer Agreement;

  • the UK Addendum to EU Standard Contractual Clauses; or

  • another lawful transfer mechanism.
     

16. How long we keep your personal data

​

We will not retain personal data for longer than is reasonably necessary for the purpose for which it was collected, unless we are required or permitted by law to retain it for longer.

​

For example:

  • website enquiries may be retained for a reasonable period after the enquiry has been dealt with;

  • information relating to prospective customers may be retained while there is a reasonable business relationship or prospect of one;

  • customer information may be retained for the duration of the customer relationship and an appropriate period afterwards;

  • contractual records may be retained for as long as reasonably necessary to manage contractual, legal, insurance and accounting requirements; and

  • technical and security logs may be retained for an appropriate security and operational period.
     

Actual retention periods will depend on the nature and purpose of the information.

When personal data is no longer required, we will securely delete or anonymise it where appropriate.

 

17. Your rights

​

Under UK data protection law, you may have rights concerning your personal data, including:

  • the right to be informed about how we use your personal data;

  • the right to request access to personal data we hold about you;

  • the right to request correction of inaccurate or incomplete information;

  • the right to request erasure in certain circumstances;

  • the right to request restriction of processing in certain circumstances;

  • the right to object to certain processing;

  • the right to data portability in certain circumstances; and

  • rights relating to certain automated decision-making and profiling.
     

These rights are subject to legal conditions and exemptions and therefore may not apply in every circumstance.

​

The UK data protection framework has been amended by the Data (Use and Access) Act 2025, and we will apply the rights and safeguards applicable at the time your request is made.

 

18. How to exercise your rights

​

To exercise your rights, please contact:

API CAPACITORS LTD
Email: Edina.varga@api-holdings.com
Address: Leydon Works, Station Road, Great Yarmouth, NR31 0HB, United Kingdom

​

Please provide sufficient information to allow us to identify you and understand your request.

​

We may need to verify your identity before responding to a request.

​

We will deal with requests in accordance with applicable UK data protection law.

 

19. Complaints

​

If you have a concern about how we have used your personal data, please contact us first:

Email: Edina.varga@api-holdings.com
Address: Leydon Works, Station Road, Great Yarmouth, NR31 0HB, United Kingdom

​

We have a procedure for handling data protection complaints and will acknowledge and deal with complaints in accordance with applicable legal requirements.

​

The Data (Use and Access) Act 2025 introduced additional requirements concerning how organisations handle data protection complaints, including requirements concerning acknowledgement and response. 

 

You also have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113

​

Further information is available from the Information Commissioner's Office.

 

20. Third-party websites

​

Our website may contain links to websites operated by third parties.

​

Those websites have their own privacy policies and terms. We are not responsible for the privacy practices, security or content of third-party websites.

​

We recommend that you review the privacy policy of any third-party website before providing personal information.

 

21. Children's information

​

Our website and services are primarily intended for businesses and adults.

​

We do not knowingly seek to collect personal information from children through this website.

​

If you believe that a child has provided us with personal data through the website, please contact us using the details in section 2.

 

22. Data security

​

We use appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage.

​

These measures may include:

  • access controls;

  • authentication;

  • encryption where appropriate;

  • secure hosting;

  • backups;

  • network and endpoint security;

  • staff confidentiality obligations;

  • supplier security controls; and

  • procedures for identifying and responding to data security incidents.
     

No internet transmission or electronic storage system can be guaranteed to be completely secure.

 

23. Personal data breaches

​

If we become aware of a personal data breach, we will assess the breach and take appropriate action in accordance with applicable UK data protection law.

​

Where required, we will notify the ICO and/or affected individuals within the applicable statutory timescales.

 

24. Changes to this Privacy Policy

​

We may update this Privacy Policy from time to time to reflect:

  • changes to our website;

  • changes to our services;

  • changes in technology;

  • changes to how we process personal data;

  • changes to UK data protection law; or

  • changes to regulatory guidance.
     

The latest version will be published on this page.

Version: 001
Effective date:  11/09/2026
Last reviewed: 11/09/2026

 

25. Contact us

​

If you have any questions about this Privacy Policy or how we use your personal data, please contact:

API Capacitors Ltd
Leydon Works, Station Road, Great Yarmouth, NR31 0HB, United Kingdom
Email: Edina.varga@api-holdings.com
Telephone: +44 1493 652752

Privacy contact: HR Manager 

 

bottom of page