Who we are
Safety Key HSE Consultancy Services Ltd ("Safety Key HSE", "we", "us") is the data controller for the personal data described in this notice. We are registered in England & Wales; our registered address and company number are available on request via /contact. For any privacy question, contact us at info@skhse.com.
What we collect
We collect personal data when you:
- Submit our contact form (name, email, company, message)
- Complete our intake / quote form (name, email, company, postcode, sector, employee count, services requested)
- Subscribe to the Safety Key Briefing (email, optional name and sector)
- Become a client and use the customer portal (account details, site data, uploaded photos, training records, billing information where applicable)
We also collect limited technical data automatically (IP address, browser type, pages visited) to keep the site secure and working — for example, rate-limiting to prevent abuse of our forms.
Why we process it, and our lawful basis
- Responding to enquiries (contact and intake forms) — legitimate interest in answering your enquiry, and taking steps prior to a contract at your request.
- Delivering the Briefing — consent, given when you subscribe. You can withdraw consent at any time.
- Providing the consultancy service to clients — performance of a contract.
- Security and abuse prevention (e.g. rate limiting, bot detection) — legitimate interest in keeping the service available and secure.
Who we share it with
We use a small number of processors to run the service. We do not sell personal data.
- Railway — application hosting
- Supabase (EU region — London) — database, authentication and file storage for the client portal
- Stripe — payment processing, once billing is live for your account
- Telegram — internal notification of new enquiries to our team (message content only, not used for any other purpose)
How long we keep it
Enquiry and intake form submissions are retained for as long as needed to respond and follow up, and are periodically reviewed for deletion. Newsletter subscriber data is retained until you unsubscribe. Client account and report data is retained for the duration of the engagement and for a reasonable period afterwards to meet our own record-keeping and legal obligations.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Ask us to correct inaccurate data
- Ask us to delete your data, subject to legal exceptions
- Object to or restrict certain processing
- Withdraw consent at any time (e.g. unsubscribe from the Briefing)
- Request a copy of your data in a portable format
To exercise any of these rights, email info@skhse.com. You also have the right to complain to the Information Commissioner's Office (ICO).
Cookies
We use only the technical cookies necessary to run the site and portal (for example, keeping you signed in). We do not use third-party advertising or tracking cookies.
Changes to this notice
We may update this notice from time to time. The "last updated" date at the top of this page reflects the latest revision.