Legal

Privacy & cookie policy.

How we handle personal data and cookies on ashfleet.com, written to the EU General Data Protection Regulation (GDPR) and the ePrivacy Directive.

Last updated: 12 June 2026


1. Who we are

ASH Fleet Industries (“we”, “us”, “our”) is the data controller responsible for the personal data processed through this website. You can reach us about anything in this policy — including to exercise your rights — at hello@ashfleet.com.

2. The data we collect

We keep data collection to the minimum needed to run the site and respond to you.

  • Information you give us. When you submit the contact form we collect the name, email address, organisation, and message content you provide, together with the intent you select. We use this solely to read and respond to your enquiry.
  • Technical and log data. Like virtually all websites, our server records standard request metadata (IP address, timestamp, requested URL, user-agent) in transient logs to operate the service securely and diagnose faults. This is essential to providing the site and is not used to profile you.
  • Analytics data. Only if you accept analytics, we use Google Analytics 4 to measure aggregate traffic (pages viewed, approximate region, device type, and on-site actions such as clicking a call-to-action). We do not sell this data or use it for advertising.

3. Why we process it, and our legal basis

Under Article 6(1) of the GDPR we rely on the following legal bases:

  • Your consent (Art. 6(1)(a)) — for non-essential analytics cookies. You give this through the banner and can withdraw it at any time (see §6).
  • Steps prior to a contract / legitimate interests (Art. 6(1)(b)/(f)) — to respond to enquiries you send us and to communicate with prospective partners and investors.
  • Legitimate interests (Art. 6(1)(f)) — to keep the site secure, available, and free from abuse. We balance this against your rights and freedoms.

4. Cookies and similar technologies

A cookie is a small file stored on your device. We use the smallest possible set. No non-essential cookies are set until you accept them; declining sets none.

Cookie / keyTypePurposeRetention
ash:consentEssentialRemembers your cookie choice so we don’t ask again. Stored locally on your device, not sent to any server.Until cleared
_ga, _ga_*Analytics (consent)Set by Google Analytics 4 to distinguish visitors and measure aggregate usage. Only set after you accept.Up to 24 months

5. Sharing and processors

We do not sell personal data. We share it only with service providers acting on our behalf:

  • Google (Google Ireland Ltd.) — Google Analytics for website measurement (only with your consent) and Google Workspace for handling email you send to us.

These providers act as our processors under contract and may process data outside the European Economic Area. Where they do, transfers are protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

6. Withdrawing consent

You can withdraw analytics consent at any time by clearing this site’s data in your browser (site settings → cookies/site data), which removes your stored choice and the analytics cookies. The banner will then reappear so you can choose again. You can also block or delete cookies in your browser settings.

7. How long we keep data

  • Contact enquiries: kept only as long as needed to handle your request and any follow-up, then deleted.
  • Server logs: retained for a short period for security and diagnostics, then rotated out.
  • Analytics: retained per the cookie lifetimes above and Google’s configured data-retention window.

8. Your rights

If you are in the EEA or UK, you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected (rectification);
  • have your data erased (“right to be forgotten”);
  • restrict or object to our processing;
  • data portability;
  • withdraw consent at any time, without affecting prior lawful processing; and
  • lodge a complaint with your national data protection supervisory authority if you believe we have not handled your data lawfully.

To exercise any of these, email hello@ashfleet.com. We will respond within one month as required by the GDPR.

9. Security

The site is served over encrypted HTTPS and we apply reasonable technical and organisational measures to protect personal data. No method of transmission or storage is perfectly secure, but we work to safeguard your information.

10. Children

This site is intended for a business audience and is not directed at children. We do not knowingly collect personal data from anyone under 16.

11. Changes to this policy

We may update this policy as our practices or the law change. We will revise the “last updated” date above and, for material changes, take additional steps where required.

12. Contact

Questions, requests, or complaints about this policy or your data: hello@ashfleet.com.