Privacy Policy

Introduction

Shade-brook respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard information when you visit our website or engage our services.

Information We Collect

We may collect and process the following types of information:

• Contact Information: Name, email address, and business details you provide when requesting consultancy services
• Technical Data: IP address, browser type, device information, and website usage patterns collected through cookies and similar technologies
• Communication Records: Correspondence exchanged via email or through our website forms
• Service Data: Information about your facility and safety requirements gathered during consultancy engagements

How We Use Your Information

We process your personal data for the following purposes:

• Responding to service inquiries and consultation requests
• Delivering contracted consultancy services
• Improving our website functionality and user experience
• Complying with legal obligations and maintaining business records
• Sending relevant information about our services when you have expressed interest

Legal Basis for Processing

We process personal data based on:

• Contractual Necessity: To fulfill service agreements and respond to your requests
• Legitimate Interests: To operate our business, improve our services, and maintain security
• Consent: For marketing communications and non-essential cookies, where applicable
• Legal Compliance: To meet regulatory and statutory requirements

Data Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share data with:

• Service providers who assist with website hosting, email delivery, or business operations
• Professional advisors including lawyers and accountants when required
• Regulatory authorities when legally obligated to do so

All third-party service providers are contractually required to maintain confidentiality and security of your data.

Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy:

• Service inquiry data: Retained for 24 months unless you become a client
• Client records: Retained for 7 years following service completion for professional liability purposes
• Marketing preferences: Retained until you withdraw consent
• Website analytics: Anonymized after 26 months

Your Rights

Under UK data protection law, you have the following rights:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your data in certain circumstances
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured, commonly used format
• Objection: Object to processing based on legitimate interests
• Withdrawal: Withdraw consent for marketing or non-essential processing

To exercise any of these rights, contact us at [email protected]

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include secure server infrastructure, encryption for data transmission, access controls, and regular security reviews.

However, no internet transmission is completely secure. While we strive to protect your data, we cannot guarantee absolute security of information transmitted through our website.

Cookies and Tracking

Our website uses cookies to enhance functionality and analyze usage. For detailed information about our cookie practices, please review our Cookie Policy.

Third-Party Links

Our website may contain links to external sites, including scientific references. We are not responsible for the privacy practices of third-party websites. We encourage you to review their privacy policies before providing any personal information.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

International Data Transfers

Your personal data is primarily processed within the United Kingdom. If data is transferred outside the UK, we ensure appropriate safeguards are in place to protect your information in accordance with data protection laws.

Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page indicates when revisions were made. Continued use of our website following updates constitutes acceptance of the revised policy.

Contact Information

For questions about this privacy policy or our data practices, contact:

Shade-brook
42 Kensington Gardens
Manchester M14 5NB
United Kingdom
Email: [email protected]

Supervisory Authority

If you believe we have not handled your data appropriately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority.