Privacy Policy for TEIC

Introduction

Zhuzhou Times Electric UK Innovation Center complies with our legal obligations under the Data Protection Act 2018 (the ‘2018 Act’) and the retained EU law version of the General Data Protection Regulation ((EU) 2016/679) (the ‘UK GDPR’) in respect of data privacy and security.

We take the privacy of your personal data seriously and are committed to making every effort to protect your personal data.

This Privacy Policy informs you of who we are, how we store and utilise your personal data, your rights as a data subject, with whom your information is shared, and whether it may be transferred outside the United Kingdom.

WHO IS THE DATA CONTROLLER?

For the purposes of this Privacy Policy and all personal data, you are the Data Subject and ZHUZHOU CRRC TIMES ELECTRIC UK INNOVATION CENTER is the Data Controller.

WHO ARE WE?

ZHUZHOU CRRC TIMES ELECTRIC UK INNOVATION CENTER (‘TEIC’) is a UK Establishment of Zhuzhou CRRC Times Electric Co., Ltd in the United Kingdom and is the controller responsible for your personal data. TEIC determines what personal data is collected, how it is used, and how it is protected. Our registered address is 2650 Kings Court, Birmingham Business Park, Solihull, United Kingdom B37 7YE.

WHAT YOUR DATA IS USED FOR?

We process the data you give to us to meet the requests you make of us, including but not limited to:

• To provide you with information that you have requested or which we think may be relevant to a subject in which you have demonstrated an interest;
• To initiate and complete commercial transactions with you, or the entity that you represent, for the purchase of products and/or services;
• To fulfil a contract that we have entered into with you or with the entity that you represent;
• To ensure the security and safe operation of our websites and underlying business infrastructure, and
• To manage any communication between you and us.
• To respond to customer service requests and to provide support in order to meet your requirements
• To benefit the user experience by understanding how users interact with TEIC
• To use feedback you provide to improve our products and services
• To send marketing emails in relation to our products, services, company updates and distributor information to those who have voluntarily subscribed to our emailing list
• To respond to enquiries, questions, and/or other requests, and notify customers of new or existing products and services that can enhance their project/application requirements
• To contact all those that apply for a job vacancy, either to invite to interview or to inform of unsuccessful application

We do not use your information for profiling or automated decision making.

Where did we get your data from?

You provided us with the personal data we hold.

WHAT IS THE LAWFUL BASIS FOR US TO PROCESS YOUR PERSONAL DATA?

The UK GDPR requires us to have a lawful basis for collecting and using your personal data. We rely on one or more of the following lawful bases, depending on the specific processing activity:

• You have given consent to the processing of your personal data for one or more specific purposes.
• Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
• Processing is necessary for compliance with a legal obligation to which the controller is subject.
• Processing is necessary in order to protect the vital interests of the data subject or of another natural person.
• Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
• Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Where we rely on legitimate interests as the lawful basis for processing, our legitimate interests include: (a) providing you with information about our products and services; (b) managing our business operations, including website administration, internal operations, troubleshooting and data analysis; (c) studying how individuals use our products and services to improve and develop them and to grow our business; and (d) ensuring the security of our business, IT systems and website. We make sure we consider and balance any potential impact on you and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).

We regularly audit our records to check our lawful basis for holding your data, and where we find we no longer have a lawful basis for holding your data we will automatically delete it from our systems. We will endeavour to contact you before deletion in case such a deletion is against your wishes.

If we collect your information on the basis of your consent, you have the right to withdraw your consent at any time by sending your request to info@teic.crrczic.cc

Seven Data Protection Principles

Personal data must be processed in accordance with seven ‘Data Protection Principles.’ It must:

• Be processed fairly, lawfully and transparently
• Be collected and processed only for specified, explicit and legitimate purposes;
• Be adequate, relevant and limited to what is necessary for the purposes for which it is processed
• Be accurate and kept up to date. Any inaccurate data must be deleted or rectified without delay
• Not be kept for longer than is necessary for the purposes for which it is processed; and
• Be processed securely
• Be able to demonstrate compliance with all of the above principles (accountability)

TEIC collect personal data (e.g., names, addresses, telephone numbers, or e-mail addresses) in connection with the operation of our websites when an individual has voluntarily provided such data to us or granted permission to use the data (e.g., through registration, contact inquiries, job applications, email marketing newsletter sign ups).

We use the data that we collect for the purpose for which you divulged the data to us, such as to answer your inquiries, process your job application, or provide you information in our email marketing updates.

If you have agreed to receive marketing updates you can opt out at any time by clicking the ‘opt out’ button at the bottom of our email newsletter or by emailing info@teic.crrczic.cc

If you want TEIC to safely and securely remove any data we hold about you please contact us and this will be actioned as soon as possible.

Data is shared only in connection with and in compliance with applicable laws and regulations. We do not sell or otherwise market your personal data to third parties.

We may collect non-personal identification information about Users whenever they interact with us online. This information may include the technical information about the user’s means of connecting with our website, information on the way users interact with and use our website, or non-personal audience related information which helps us market our products and services better.

Third Party Websites

• Our website includes hyperlinks to, and details of, third party websites.
• We have no control over, and are not responsible for, the privacy policies and practices of third parties.

We use HubSpot, a third-party service provider, to help us with our website analytics and customer relationship management. HubSpot processes personal data on our behalf as a data processor, in accordance with our instructions and subject to a data processing agreement. For more information about how HubSpot handles personal data, please see their privacy policy at https://legal.hubspot.com/privacy-policy.

Marketing

TEIC use a third-party company to collate email contacts that have willingly signed up via a TEIC platform (website, email, social media) to receive marketing emails. The Mailchimp platform is also used to send out marketing emails to subscribers. To unsubscribe from emails, press the ‘opt-out’ button at the bottom of a TEIC email or contact us via info@teic.crrczic.cc. Mailchimp and TEIC have taken the relevant steps to ensure privacy and security of contact details. Read Mailchimp’s full privacy policy here, https://mailchimp.com/legal/privacy/#1._The_Basics

Cookie Policy

Please refer to our cookies policy at https://teic.crrczic.cc/cookie-policy/.

DATA RETENTION

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements. In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you. Details of specific retention periods for each processing activity are set out in the table below.

1. 1. PROCESSING ACTIVITY	INFORMATION CATEGORY	DATA COLLECTED	PURPOSE	LAWFUL BASIS FOR PROCESSING	DATA SHARED WITH	RETENTION PERIOD
      To provide you with information	Subject matter information	Name, company name, email address, phone	To provide information on the services you have requested	Legitimate Interest	Marketing team	2 Years from the date the information is collected.
      Recruitment	Subject Matter Information	Names, Telephone Number, Email Address, CV, salary & benefit, identification details	Recruitment	Legitimate Interest	HR	1 Year from the date of the final decision if the candidate is not successful. Successful candidates’ documents will be transferred to the HR personnel file.

   2. To facilitate our business operation, we need to pass personal information between us and our clients and suppliers for the purpose of facilitating the business in relation to projects, support and other services, this information only includes:
      • Name
      • Company Name and Role
      • Business email address
      • Business phone number
   3. For employees the legal basis for holding personal data is: Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; The data subject has given explicit consent to the processing of those personal data for one or more specified purposes, except where UK law provides that the prohibition may not be lifted by the data subject.

INTERNATIONAL TRANSFERS

Some of our third-party providers are businesses outside of the UK in countries which do not always offer the same levels of protection for your personal data. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring that at least one of the following safeguards is implemented: (a) we transfer your personal data only to countries that have been deemed to provide an adequate level of protection for personal data; (b) we use specific contractual terms approved for use in the UK, such as the UK International Data Transfer Agreement or the International Data Transfer Addendum to the EU standard contractual clauses; or (c) we rely on an approved code of conduct or certification mechanism. Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the UK.

In particular, any transfer of your personal data made by us to a location outside of the UK will be governed by the UK International Data Transfer Agreement, the International Data Transfer Addendum to the EU standard contractual clauses, or binding corporate rules authorised by the ICO, which we will make available to you on request.

All information you provide to us is stored on secure servers.

DATA SHARING

We may have to share your personal data with (i) service providers who provide IT and system administration support, (ii) professional advisors including lawyers, bankers, auditors and insurers, and (iii) HMRC and other regulatory authorities.

We require all of these third parties to whom we transfer your data to respect the security of your personal data and to treat it in accordance with the law. They are only allowed to process your personal data on our instructions.

DATA SECURITY

We have put in place security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We also limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know such data. They will only process your personal data on our instructions and are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breaches and will notify you and any applicable regulator where we are legally required to do so.

We adopt appropriate data collection, storage, processing practices and security measures to protect against unauthorised access, alteration, disclosure or destruction of your personal information and data.

We do not sell, trade, or rent personal identification information to others. We may use third party service providers to help us operate our business and administer activities, such as sending out newsletters or performing marketing activities. We may share your information with these third parties for those limited purposes. We may share your details with our shipping company to enable us to arrange delivery to the customer of products purchased.

YOUR RIGHTS AS A DATA SUBJECT

THE RIGHT TO BE INFORMED

We are obliged to provide clear and transparent information about our data processing activities. This information is provided within this Privacy Policy.

THE RIGHT OF ACCESS

You may request a copy of the personal data we hold about you, free of charge. Once we have verified your identity, and if relevant any authority or third-party requester, we will provide access to the personal data we hold about you.

THE RIGHT TO ACCURATE DATA

When you believe we hold inaccurate or incomplete personal information about you, you may exercise your right to correct or complete this data. This may be used with the right to restrict processing to make sure that incorrect/incomplete information is not processed until it is corrected.

THE RIGHT TO BE FORGOTTEN (ERASURE)

If no legal basis or legitimate reason continues to exist for processing your personal data, you may request that we delete the personal data.

THE RIGHT TO OBJECT

You have the right to object to our processing of your data.

• Based on our legitimate interests. If you ask us to stop processing your personal data on this basis, we will stop processing your personal data unless we can demonstrate compelling grounds as to why the processing should continue in accordance with data protection laws; and
• For direct marketing purposes. If you ask us to stop processing your personal data on this basis, we will stop processing your personal data for direct marketing purposes.

RIGHT TO RECTIFICATION

Individuals have the right to require us to rectify any inaccurate personal data we hold about them. Individuals also have the right to have incomplete personal data we hold about them completed, by providing a supplementary statement to us.

THE RIGHT TO RESTRICT PROCESSING

You may ask us to stop processing your personal data. We will still hold the data, but will not process it any further. This right is an alternative to the right to erasure. If one of the following conditions applies, you may exercise the right to restrict processing:

• The accuracy of the personal data is contested
• Processing of the personal data is unlawful
• We no longer need the personal data for processing but the personal data is required for part of a legal process
• The right to object has been exercised and processing is restricted pending a decision on the status of the processing

THE RIGHT TO DATA PORTABILITY

Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive the personal data you provided to us in a structured, commonly used and machine-readable format. You also have the right to request that we transmit that data directly to another controller, where technically feasible.

THE RIGHT TO WITHDRAW CONSENT

Where we rely on your consent as the lawful basis for processing your personal data, you have the right to withdraw your consent at any time. This will not affect the lawfulness of any processing carried out before you withdraw your consent. You can withdraw your consent by contacting us at data.protection@teic.crrczic.cc.

NO FEE USUALLY REQUIRED

You will not have to pay a fee to access your personal data or to exercise any of your other rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

TIME LIMIT TO RESPOND

We will try to respond to all legitimate requests within one month. Occasionally it could take us longer than one month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

CHANGES TO THIS PRIVACY POLICY

We keep our privacy notice under regular review. This version was last updated in October 2026. Historic versions can be obtained by contacting us.

Any changes we make to our Privacy Policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our Privacy Policy.

CONTACT US

Any comments or suggestions about this Privacy Policy should be emailed to: data.protection@teic.crrczic.cc. Our HR team monitors this email.

Alternatively, you can contact us on the below details:

Address:
HR
2650 Kings Court, Birmingham Business Park
Solihull, United Kingdom B37 7YE

Telephone: 0121 809 0011

COMPLAINTS

Should you wish to discuss a complaint, please feel free to contact us using the ‘contact us’ information above. All complaints will be treated with the utmost confidentiality.

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). However, we would appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance using the details above.