Privacy notice
Last updated: 13 July 2026
Who we are
This site is operated by Future Works Infrastructure Limited, company number 16546917, registered office 8 Church Street, Ewell, Epsom KT17 2AS. For any data-protection matter, contact privacy@transpennineconnect.com. We are registered with the Information Commissioner's Office under reference ZC193226.
What we collect and why
| Data | Purpose | Lawful basis |
|---|---|---|
| Name, email, postcode, message | Responding to your enquiry | Legitimate interests |
| Email address | Sending campaign updates | Consent (the checkbox), withdrawable at any time via the unsubscribe link in every email or by emailing us |
| Your view of the plan | Aggregate evidence of support and concern presented to decision-makers | Explicit consent (the checkbox). This may reveal a political opinion and is only recorded where you give explicit consent. |
Who processes your data
Your data is handled on our behalf, under data-processing agreements. Our processors and recipients are:
- Netlify, Inc.: website hosting and contact-form capture (United States).
- Automattic Inc. (Akismet): spam filtering, as a sub-processor of Netlify (United States).
- Microsoft Corporation: email, and storage of enquiries in our CRM (UK/European tenant).
They act only on our instructions. We do not currently use a mailing or newsletter tool; if we adopt one, we will update this notice before using it.
Where we store your data
Enquiries submitted through the contact form are stored in two places: with Netlify, Inc. (form capture), and in a CRM hosted on Microsoft SharePoint within our UK/EU Microsoft 365 tenant.
Who has access
Access is limited to the directors of Future Works Infrastructure Limited and to those working on the campaign who need it to respond to your enquiry. Our processors named above can access data only as required to provide their service to us, and only on our instructions.
International transfers
Some of the service providers who process personal data on our behalf are based in, or process data in, the United States. Where that happens, we ensure the level of protection required by UK data protection law:
- Netlify, Inc. (website hosting and contact-form capture) is certified under the UK Extension to the EU-U.S. Data Privacy Framework, which the UK Government recognises as providing adequate protection. Netlify uses Automattic Inc. (Akismet) as a sub-processor for spam filtering; Automattic is separately certified under the same framework.
- Microsoft Corporation, which provides our email and hosts the system in which enquiries are stored, is also certified under the UK Extension to the EU-U.S. Data Privacy Framework. Your data is held within our United Kingdom/European tenant, and Microsoft's data-protection terms additionally incorporate the UK International Data Transfer Addendum for any transfer outside the UK.
Copies of the relevant safeguards are available on request.
How long we keep it
- Enquiries: retained for 24 months after the enquiry is closed. This applies to both copies: the submission held by Netlify and the record held in our SharePoint CRM.
- Marketing list: while your consent stands, reviewed every two years.
- View-of-plan data: anonymised into aggregates, with the identifiable copy deleted on the enquiry schedule above.
- Unsubscribed addresses: kept on a suppression list so that we do not contact you again.
Your rights
You have the right to access, rectification, erasure, restriction and portability of your data, and to withdraw consent at any time. To exercise any of these, email privacy@transpennineconnect.com; we respond within one month.
Objecting to marketing
You have the right to object to direct marketing at any time. We will always honour it. Use the unsubscribe link in any email, or email us, and we will stop and add you to our suppression list.
Complaints
If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office at ico.org.uk.
Automated decision-making
We do not use your data for any automated decision-making or profiling.