Data controller and contacts
Wiltson Energy and the group entity identified in your quotation, contract, or commercial correspondence act as the controller for the business contact data collected through this landing page. If you contact us on behalf of a company, we typically process your name, work email address, company name, country, and the contents of your inquiry so that we can respond to you and evaluate a possible commercial relationship.
For privacy questions, data subject requests, or complaints, contact TODO: privacy@wiltsonenergy.com. If a separate data protection officer or equivalent privacy contact applies to your region or business line, contact TODO: dpo@wiltsonenergy.com. Please replace both placeholders before publication.
Data we collect and why
We process information that you provide directly, such as company details, contact details, project requirements, sample or quotation requests, and any files or messages you send to us. We also process limited technical and security data needed to keep the site available and defend against abuse, including IP-derived security signals, request metadata, bot-detection responses, and consent preferences.
Where you have given permission, we may also process analytics or advertising-related data to understand campaign effectiveness and improve our communications. We do not use optional analytics, advertising, or chat technologies until the relevant consent choice has been granted through our consent interface.
Legal basis for processing
Our legal bases under Article 6 GDPR depend on the purpose. We rely on Article 6(1)(b) to answer requests and take steps prior to entering into a supply, sample, or development relationship. We rely on Article 6(1)(f) for network security, fraud prevention, product improvement, and defending or establishing legal claims where those interests are not overridden by your rights.
Where optional cookies, local storage, or similar technologies are used for analytics, advertising, or functional chat tools, we rely on your consent under Article 6(1)(a) GDPR together with applicable ePrivacy rules. You may refuse or withdraw that consent at any time without affecting processing that was lawfully carried out before withdrawal.
Processors and international transfers
We use service providers that process data on our behalf or act as independent recipients for their own regulated purposes. Current categories include Cloudflare for hosting, CDN, Pages Functions, security, and Turnstile; Resend for inquiry email delivery; Google Tag Manager, Google Analytics 4, and Google Ads where consent has been granted; and Tawk.to where functional chat consent has been granted.
Some of these suppliers may process data outside your country. Where cross-border transfers are restricted by law, we rely on contractual safeguards, adequacy decisions, or other lawful transfer mechanisms that are appropriate to the specific data flow. You can request more detail about the relevant safeguards by using the privacy contact listed above.
Retention and security
Business inquiry records are typically retained for up to 24 months after the last meaningful contact unless a longer period is required for contract administration, product safety, tax, export compliance, warranty handling, or dispute resolution. Consent records and related audit metadata may be retained for a different period where necessary to demonstrate compliance and respond to regulatory questions.
We use role-based access controls, transport encryption, vendor-level security controls, and operational safeguards designed to reduce unauthorized access, misuse, or loss. However, no internet transmission or storage system is completely secure, so we cannot guarantee absolute security in every circumstance.
Your rights and complaints
Subject to applicable law, you may request access, rectification, erasure, restriction, objection, portability, and withdrawal of consent. You may also ask us to explain the logic of a processing activity where the law grants that right, and you may complain to the supervisory authority responsible for your habitual residence, workplace, or the place of the alleged infringement.
To exercise your rights, contact TODO: privacy@wiltsonenergy.com and describe your request with enough detail for us to verify and fulfill it. Where necessary, we may ask for reasonable evidence of identity or authority before acting on a request, especially if the request concerns business contact data submitted on behalf of another organization.