Privacy Policy

Coastal Marine Engineering ("CME", "we", "us") respects your privacy and is committed to protecting personal data. This notice explains what we collect, why we use it, who we share it with, how long we keep it, and the rights you have.

1. Who we are and scope

This notice covers personal data processed by CME when you visit our website, submit an enquiry, request a callback, apply for a role, become a customer, receive a quote, accept work, receive a report, make a payment, request Bitcoin payment arrangements, complain, or otherwise communicate with us.

2. Data map

• Enquiries and callbacks: name, email, phone, company or operator, service area, asset or site details, location, timing, issue description, attachments, source page and enquiry context. We use this to respond, assess scope, prepare next steps and prevent duplicate or abusive submissions.
• Customers, owners, managers and bill-to parties: names, roles, contact details, business relationship, billing details, asset relationship and communication preferences. We use this to manage authority, scheduling, quotes, jobs, invoices and customer records.
• Assets, vessels, generators and sites: asset names, locations, technical descriptions, serial numbers where provided, photographs, report content, work history, parts and service notes. Some of this may identify an individual owner or operator.
• Quotes, jobs, reports and documents: scopes, assumptions, pricing, acceptance history, job notes, engineer notes, field reports, attachments, completion records, warranty or rectification records and related communications.
• Payments: invoices, proformas, payment requests, settlement state, provider references, bank-transfer context and payment communications. We do not ask you to send card details to us by email.
• Bitcoin arrangements: payment request, instruction reference, GBP amount, Bitcoin amount, network, destination address, rate, expiry, transaction or reconciliation references where needed, status and related communications. We do not store customer private keys, seed phrases or wallet credentials.
• Recruitment: application details, work history, CV, right-to-work context you provide, contact details and related communications.
• Security and audit records: technical request and submission metadata, browser or device information, security-check results, audit records and error records needed to protect the website, business systems and evidence decisions.

3. How we use your data

• Service administration: respond to enquiries, prepare quotes, arrange attendance, provide services, manage jobs, produce reports and handle follow-up.
• Contract and billing: confirm authority, record accepted work, create proformas or invoices, take and reconcile payment, manage non-payment and retain accounting records.
• Safety and quality: record hazards, access issues, technical findings, photographs, parts, defects, rectification and complaints.
• Security and fraud prevention: protect forms, files, payment-related communications, records and business systems.
• Legal, insurance and dispute handling: keep records needed for legal obligations, claims, complaints, debt recovery, insurance and professional advice.
• Recruitment: assess applications and communicate with candidates.
• Marketing: send marketing only where we have an appropriate basis and opt-out route. Submitting an enquiry does not subscribe you to marketing.

4. Legal bases

• Contract: responding to requested services, preparing quotes, managing accepted work, invoicing and handling payment.
• Legitimate interests: running a marine and generator engineering business, managing enquiries, securing systems, keeping operational records, handling complaints, protecting legal rights, preventing fraud and communicating about services you have requested.
• Legal obligation: accounting, tax, company, safety, employment, litigation, regulatory and reporting obligations where applicable.
• Consent: optional marketing where consent is required, and any other processing where we specifically ask for consent. We do not rely on consent to process an enquiry, job application, quote or job where another lawful basis applies.

5. Sharing and recipients

• Hosting, storage and website providers: providers that help run the website, forms, files and related business systems.
• Communications providers: providers that support email, messages and business communications.
• Security providers: providers that help protect forms, files, records and website services.
• Payment providers: providers that process payments where that option is available and used.
• Business administration systems: systems used by CME to manage enquiries, customers, quotes, jobs, payments, reports and documents.
• Subcontractors and specialists: only where reasonably needed for the work, such as electrical specialists, fabricators, testing providers, lifting/haulage providers or other technical support.
• Professional advisers, insurers and authorities: where needed for claims, complaints, legal obligations, accounting, safety, fraud prevention or protection of rights.

We do not sell personal data for marketing.

6. International transfers

Some providers may process data outside the United Kingdom. Where required, we rely on appropriate safeguards such as UK adequacy arrangements, the UK International Data Transfer Agreement, the UK Addendum to standard contractual clauses, or other lawful transfer mechanisms.

7. Retention

We keep personal data only for as long as needed for the purpose it was collected and for related legal, accounting, tax, insurance, safety, warranty, complaint, debt-recovery and dispute purposes. CME maintains a retention approach for record categories such as enquiries, customers, quotes, jobs, reports, invoices, payment records, security records, complaints, disputes, recruitment records and backups.

Retention depends on the record type, whether the enquiry became chargeable work, whether there is an unpaid balance, complaint, warranty issue, insurance matter or legal dispute, and whether accounting or safety records must be kept. When data is no longer needed, we delete, anonymise or archive it according to the record type and system capability.

8. Security

We use appropriate technical and organisational measures to protect personal information. No system is perfectly secure. Please avoid sending unnecessary sensitive information and do not send passwords, private keys, seed phrases or payment-card details to us by email.

9. Your rights

Subject to applicable law, you may ask us to access, correct, delete, restrict or transfer your personal data, or object to certain processing. You may withdraw consent where processing is based on consent. We may need to verify your identity, clarify the request, or retain some information where the law permits or requires us to do so.

We aim to respond to rights requests without undue delay and within the applicable legal deadline.

10. Cookies and tracking

We use a small number of cookies and similar technologies, all of them either necessary for the site to work or set only when you take an action. We do not use analytics, advertising or cross-site tracking cookies.

Our Cookie Policy explains the cookies and browser storage we use, why we use them, and how long they last.

11. Marketing communications

Transactional service messages, requested quotes, job updates, payment messages, safety notices and complaint responses are not marketing. Marketing is handled separately. We will not treat an ordinary enquiry or job application as automatic consent to marketing, and marketing messages will include an appropriate unsubscribe or opt-out route where required.

12. Automated decision-making

We do not make decisions about you by automated means alone, and we do not profile you for advertising. A form security check helps detect automated submissions; if it prevents you from submitting a form, you can contact us by phone or email and a person will deal with your enquiry.

13. Photographs and confidentiality

Photographs and documents may show vessel names, registration marks, locations, equipment, serial numbers, customer possessions or people. We use operational images for enquiries, job evidence, reports, quality control, insurance, complaints and legal purposes. Operational or report use does not mean you have agreed to marketing or social-media use.

14. Children's data

Our services are not directed to children under 16 and we do not knowingly collect their data through this website.

15. Changes

We may update this notice. The latest version will be posted here with a revised review date and document code.

16. Contact

Coastal Marine Engineering Ltd
Company number: SC815311
Registered in Scotland
Registered office: Clyde Offices, 48 West George Street, Glasgow, G2 1BP
Phone: +44 7934 274176
Email: [email protected]

You also have the right to complain to the UK Information Commissioner's Office about data-protection concerns.

Last reviewed and updated: 30 August 2026