Privacy Policy

Biba HSE Consultancy Ltd
Last updated March 2026

1. Introduction

Biba HSE Consultancy Ltd is committed to protecting the privacy and security of personal information.

This policy explains how personal data is collected, used and protected when individuals interact with our website, contact us, or engage our consultancy services.

This policy is designed to comply with UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. About Us

Biba HSE Consultancy Ltd provides consultancy services in health, safety, environmental and sustainability management.

For the purposes of data protection law, Biba HSE Consultancy Ltd acts as the Data Controller.

Contact details

Biba HSE Consultancy Ltd
United Kingdom

Email
enquiries@bibahseconsultancy.com

3. Personal Data We May Collect

We may collect and process the following categories of personal information.

Information you provide directly

• Name
• Company name
• Job title
• Email address
• Telephone number
• Details relating to consultancy enquiries or project requirements

Information collected through website use

• IP address
• Browser type
• Device information
• Website usage statistics
• Cookies

4. How We Use Personal Data

Personal information may be used to

• respond to enquiries
• provide consultancy services
• manage consultancy contracts and projects
• issue invoices and manage accounts
• maintain business records
• improve our website and services

5. Lawful Basis for Processing

We process personal data where we have a lawful basis including

• contractual necessity
• legitimate business interests
• compliance with legal obligations
• consent where appropriate

6. Data Sharing

Personal data will not be sold or distributed to third parties for marketing purposes.

Data may be shared where necessary with

• IT service providers
• professional advisers
• regulatory authorities where legally required

All third parties are expected to maintain appropriate data protection standards.

7. Data Retention

Personal data will only be retained for as long as necessary.

Typical retention periods include

• consultancy project records up to 6 years
• financial records in line with HMRC requirements

8. Data Security

Appropriate technical and organisational measures are in place to safeguard personal data against unauthorised access, loss or misuse.

9. Your Rights

Individuals have rights under UK GDPR including

• access to personal data
• correction of inaccurate information
• erasure where applicable
• restriction of processing
• objection to processing

10. Complaints

Concerns regarding data protection may be raised with Biba HSE Consultancy Ltd.

Individuals also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).