Privacy Policy.
Last updated: May 11, 2026
1. Introduction
Arom Energy LLC (“Arom Energy”, “we”, “us”) provides transformer test equipment and engineering services to business customers. This Privacy Policy explains how we collect, use, and safeguard personal data when you visit our website or communicate with us. For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, Arom Energy is the data controller for the personal data described below.
2. Information We Collect
We collect personal data only when you choose to provide it. This includes the name, email address, and message content you submit through our contact form, and any details you share when contacting us by phone or email. We also collect standard server logs (IP address, user agent, request timestamps) for security and operational diagnostics.
3. How We Use Information
We use the information you provide to respond to inquiries, prepare quotations, fulfil orders, deliver services, and maintain ordinary business records. We do not sell, trade, or rent your personal data, and we do not use it for advertising profiling.
4. Legal Basis for Processing
Where the GDPR or UK GDPR applies, we rely on the following legal bases:
Legitimate interests — responding to your enquiry, providing technical support, and maintaining the security of our website.
Contract performance — preparing quotations, processing orders, and delivering services you have requested.
Legal obligation — retaining transaction and tax records for the periods required by applicable law.
5. Data Retention
Inquiry records are retained for up to 24 months after the last interaction. Records related to quotations, orders, and warranty claims are retained for the period required by applicable accounting and product-liability law (typically 7 years). Server logs are retained for up to 90 days.
6. Sub-Processors and Recipients
We use a small number of vetted service providers to operate the website and deliver communications. Contact-form submissions are transmitted via Resend (Resend, Inc., United States) for email delivery. Hosting and content delivery may be performed by our website host. We do not transfer personal data to recipients outside this operational scope, except where required by law.
7. International Transfers
Some of our service providers process data outside the United Kingdom or European Economic Area. Where personal data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the equivalent UK International Data Transfer Addendum.
8. Your Rights
Subject to applicable law, you have the right to access the personal data we hold about you, to request correction or deletion, to object to or restrict processing, and to receive a portable copy of your data. EU and UK residents may also lodge a complaint with their local supervisory authority. To exercise any of these rights, email info@aromenergy.com.
9. Security
We apply reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. No internet transmission is fully secure; we encourage you to share confidential commercial information using channels we have agreed in advance.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date above reflects the current version. Material changes will be reflected on this page.
11. Contact
For questions about this policy or to exercise your data rights, contact us at info@aromenergy.com.