Privacy Policy

Protecting your privacy is our priority. This page explains how the personal information we collect — through this website (https://crgisolutions.co.uk/) and through our WhatsApp AI Agent — is handled. Since we are not lawyers, we'll provide this information in familiar FAQ style.

Any data you send to us, whether through the website's contact forms or through a WhatsApp message to our AI Agent, remains your confidential property.

We are Corgi Engineering Ltd, trading as CRGI Solutions, a company operating in Wrexham, UK. The company provides engineering consultancy to the manufacturing sector — including mechanical design, tender support, and operational optimisation.

We are the data controller for the personal information described in this policy.

• Company number: 14653647
• VAT number: 437029596
• Registered address: 3 Borras Park Road, Wrexham, Wales, LL12 7TE
• Contact for privacy matters: admin@crgisolutions.co.uk

Through the website. When you submit a contact form on this site, we collect the information you provide (typically your name, email address, and message contents), along with metadata about the submission: the timestamp, the originating IP address, and your browser user agent.

Through the WhatsApp AI Agent. When you message our WhatsApp Business number, we collect:

• Your WhatsApp phone number (provided to us automatically by WhatsApp)
• Your business email address (which we ask for at the start of the conversation — see "What is the WhatsApp AI Agent, and how does it work?" below)
• A business contact number (optional — only if you choose to share it)
• The contents of your messages, including any documents or images you choose to share
• Timestamps of each message
• The conversation history between you and the agent

Third party services. This is a GoDaddy-built website (https://www.godaddy.com/) with limited customisation. GoDaddy may collect technical information about visitors as part of its hosting service — their privacy policy is available here: https://www.godaddy.com/en-uk/legal/agreements/privacy-policy. Some WordPress plugins may also process data on external servers.

The WhatsApp AI Agent is an automated assistant that responds to incoming WhatsApp messages on our business number. It is designed to answer pre-sales questions about our engineering services (tender support, design work, operational optimisation) and help us understand how we might be able to help you.

When you first message the agent, you'll be told you're speaking with an AI assistant. Before we get into your enquiry, we'll ask for two things:

• Your business email address. We don't accept personal email providers like Gmail, Outlook, or Yahoo — this is a deliberate choice to keep the channel for genuine business enquiries.
• A business contact number (optional). Feel free to share one if it's easier for our team to reach you that way; you're under no obligation to provide it.

If you'd rather not share a business email, you're welcome to contact us instead via the form on this website or by emailing admin@crgisolutions.co.uk. We'll get back to you the same way.

Once verification is done, your message is processed on our own infrastructure in the UK. We do not send your messages to any third-party AI service (such as OpenAI, Google, or Anthropic). The language model that generates responses runs entirely on hardware we own and control. This is a deliberate choice, consistent with our information security posture.

You can ask to speak with a human at any time, and we will route your enquiry to a member of the team.

From the contact form: the information is emailed to our main business address and stored in the database on our hosting server for reference and follow-up.

From WhatsApp: the information is transmitted by WhatsApp (operated by Meta Platforms, Inc.) to our infrastructure, where the conversation is stored in a database we control. Conversations are reviewed by a member of our team for follow-up purposes — every WhatsApp conversation is treated as a potential business enquiry that someone from CRGI may follow up on directly.

For the website: GoDaddy (hosting) and any WordPress plugins active on the site at the time of your visit.

For the WhatsApp AI Agent: Meta Platforms, Inc., who operates the WhatsApp Business Cloud API. Meta acts as a data processor for messages in transit between you and our infrastructure. Meta's own privacy practices are described at https://www.whatsapp.com/legal/business-policy/.

For long-term archive of business records: Microsoft Corporation, via Microsoft 365 (OneDrive and SharePoint). Information that has reached the archive stage of its lifecycle is stored in our Microsoft 365 tenancy with appropriate access controls and encryption. Microsoft's privacy practices are described at https://privacy.microsoft.com/.

We do not share your information with any other third parties for marketing or any other purpose.

When you message us on WhatsApp, your message is routed through Meta's infrastructure, which includes servers located outside the UK and EU (including in the United States). These transfers are covered by the standard contractual clauses Meta operates under for its UK and EU customers.

Once a message reaches our infrastructure, it stays in the UK. We do not transfer your information outside the UK ourselves.

The WhatsApp AI Agent generates responses to your messages automatically, using a language model running on our infrastructure. The agent does not make decisions that have legal or similarly significant effects on you — it is an information assistant, not a decision-making system. A human from our team reviews conversations and decides whether and how to follow up.

You have the right not to be subject to a purely automated decision under UK GDPR. If at any point you would like a human to take over the conversation, just ask.

Our retention practices are governed by our internal Data Retention Policy (reference DP02), which aligns with UK GDPR storage limitation requirements and our ISO 27001 information security management system.

Website contact form submissions and one-off enquiries: retained for 3 years from your last contact, after which they are deleted unless you've become an active client.

WhatsApp AI Agent conversations:

• If your enquiry doesn't progress to a business engagement, we retain the conversation for 3 years from your last message — in case you re-engage with us.
• If your enquiry progresses to active work, we retain the conversation for the duration of our business relationship.
• Marketing consent records, where you've given consent, are retained until consent is withdrawn plus 3 years (as evidence that consent was lawfully obtained).

Engineering deliverables. If you become a client and we produce engineering work for you (designs, drawings, specifications, calculations), those deliverables are permanently archived. This is a contractual and professional liability requirement — we need to be able to defend our work for the lifetime of the systems we design. Permanent archiving of engineering work product is separate from our retention of your personal data, which still follows the schedule above.

You can ask us to delete your information at any time — see "How to delete your data" below. Where we have a legal or contractual obligation to retain something, we'll tell you what we can delete and what we have to keep, and why.

You have the right to:

• Access the personal information we hold about you
• Rectify information that is inaccurate or incomplete
• Erase your information ("right to be forgotten")
• Restrict how we use your information
• Object to us processing your information
• Portability — receive your information in a structured, commonly used format
• Withdraw consent at any time, where consent is the basis for processing
• Not be subject to purely automated decisions with significant effects

To exercise any of these rights, email admin@crgisolutions.co.uk. We will respond within one calendar month.

If you'd like us to delete the information we hold about you, you have two options:

1. Email us: Send a message to admin@crgisolutions.co.uk with the subject "Data deletion request". Include the WhatsApp number you used to message us (if applicable) and any other information that helps us identify your records. We will confirm deletion within 30 days.
    
2. Reply to a WhatsApp conversation with "DELETE": If you've messaged our WhatsApp AI Agent, you can reply with the word "DELETE" at any time. Your conversation history — including your phone number, the business email and contact number you provided at the start of the conversation, and all message contents — will be removed from our active systems. Backups are overwritten on our standard backup rotation cycle.

If you're unhappy with how we've handled your information, please contact us first at admin@crgisolutions.co.uk — we'd like the chance to put it right.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: https://ico.org.uk/make-a-complaint/

This website uses cookies to analyse traffic and optimise the website experience, as set out in the cookie banner you'll have seen on your first visit. Cookie behaviour is managed at the GoDaddy hosting layer and through any WordPress plugins active on the site. The WhatsApp AI Agent does not set any cookies — it operates entirely through the WhatsApp messaging channel.

We may update this policy from time to time. The "last updated" date at the bottom of this page tells you when we last made a change. If we make a significant change, we'll mention it in any active WhatsApp conversations and on the homepage of this site.

For privacy questions, data subject requests, or any other concern about your information:

Email: admin@crgisolutions.co.uk 

Post: Corgi Engineering Ltd, 3 Borras Park Road, Wrexham, Wales, LL12 7TE

Corgi Engineering Ltd trading as CRGI Solutions. Company no. 14653647. VAT no. 437029596.

Last updated: 8 May 2026