Privacy Policy

Last updated: November 2024

Introduction

Core-dune ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We are registered in the United Kingdom and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information We Collect

Information You Provide

We may collect personal information that you voluntarily provide when you:

• Complete our contact or enquiry forms
• Request information about our services
• Enter into a contract with us for safety consultancy services
• Correspond with us via email or other channels

This information may include your name, email address, company name, job title, and details about your business requirements.

Information Collected Automatically

When you access our website, we may automatically collect certain information about your device and browsing activity, including:

• IP address and approximate geographic location
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website addresses

How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your enquiries and provide requested information
• To deliver our safety consultancy services
• To communicate with you about your service requirements
• To send you relevant information about our services where you have consented
• To improve our website and services
• To comply with legal obligations

Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract: Processing necessary to perform a contract with you or to take pre-contractual steps at your request
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving our services and responding to enquiries
• Consent: Where you have given consent for specific processing activities, such as receiving marketing communications
• Legal obligation: Processing necessary to comply with legal requirements

Data Sharing

We do not sell your personal information. We may share your information with:

• Service providers who assist us in operating our website and delivering our services
• Professional advisers including lawyers, accountants, and insurers
• Regulatory authorities where required by law

Any third parties with whom we share data are obligated to protect your information and use it only for the purposes we specify.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

Enquiry data is typically retained for three years after the last contact. Client data related to completed projects is retained for seven years to meet regulatory and professional requirements.

Your Rights

Under UK data protection law, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data in certain circumstances
• Restriction: Request restriction of processing in certain circumstances
• Portability: Request transfer of your data to another organisation
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us using the details provided below.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure.

International Transfers

Your information is primarily stored and processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place to protect your information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated revision date.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Core-dune
14 Commerce Street
Birmingham B3 2HT
United Kingdom

Email: [email protected]

Complaints

If you believe we have not handled your personal information properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.