Privacy Policy

Who We Are

We are CBRN Compliance Advisory Ltd (registered in England & Wales), operating as CBRN Compliance Advisory Ltd®. We act as the data controller for all personal data we collect and process.

Data Protection Registration

CBRN Compliance Advisory Ltd® is registered with the Information Commissioner’s Office. Data Protection Registration Reference: ZC203509

We process personal data in full compliance with the UK GDPR and Data Protection Act 2018, as outlined in this policy.

Contact Details:

  • Email: info@cbrncompliance.com
  • Registered Office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
  • Telephone: +44 (0) 203 985 0938

About This Policy

This policy sets out clearly how we collect, use, store and protect your personal data, and your rights under the UK GDPR and Data Protection Act 2018. It applies to all information you provide via our website, email or other communications.

Data We Collect

We only collect information that is necessary to respond to your enquiry or deliver our services:

  • Full name, job title and organisation.
  • Contact details: email address, telephone number.
  • Details about your request or project.
  • Any other information you choose to share with us.
  • Standard anonymous website usage data (no personal tracking).

How We Use Your Data & Legal Basis

We only process your data where we have a lawful reason:

Purpose (Legal Basis)

  • Respond to your questions and provide requested information. (Legitimate interest)
  • Arrange and deliver compliance services, audits or training. (Performance of a contract)
  • Comply with legal, accounting and regulatory obligations. (Legal compliance)
  • Maintain accurate business records. (Legal obligation / legitimate interest)

Cookies  

Our website does not use cookies to collect personal data.

Sharing Your Information

We never sell, trade or rent your personal data. We may only share it if:

  • You give us explicit permission;
  • We are required to disclose it by law or regulatory authority;
  • We use trusted service providers bound by strict data protection rules acting only on our instructions.

Data Retention

We keep personal data only as long as needed:

  • Enquiry data: retained while responding plus up to 6 years afterwards to meet legal requirements.
  • Client data: retained for the full term of engagement plus required retention periods after completion.

Data Security

We use appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse.

Your Rights

You have the right to:

  • Request a copy of the personal data we hold about you
  • Request correction of any inaccurate information
  • Request erasure where there is no legal reason for us to keep it
  • Object to or restrict certain types of processing
  • Withdraw consent at any time
  • Complain directly to the ICO: https://ico.org.uk/concerns/

To exercise your rights, contact us at info@cbrncompliance.com – we will respond within one month.

Updates

We may revise this policy when required by law or when there are changes to our operations. The latest version will always be available on this page.