UK Privacy Notice & Data Protection Policy

1. Controller Identity & Scope

This Privacy Notice applies to personal data collected and processed by Kevron Consulting UK Limited ("we", "us", "our"), a Kevron Group company operating in the United Kingdom. We are committed to protecting and respecting your privacy when you interact with our website, request consultancy proposals, enrol in training courses, or commission safety audits.

2. Information We Collect

• Identity & Contact Data: Name, business email address, corporate telephone number, job title, and employer organisation.
• Enquiry & Proposal Data: Information submitted via our Quote Wizard, contact forms, or tender briefs regarding your operational scopes and sites.
• Learner & VLE Credentials: Training enrolment records, coursework submissions, and qualification certificates.
• Technical Data: IP address, browser type, operating system, and anonymous usage telemetry.

3. Lawful Bases for Processing

We process your personal data under the following lawful bases under UK GDPR Article 6:

• Contractual Necessity: To prepare and deliver consultancy proposals, service contracts, and training services.
• Legal Obligation: To maintain statutory accounting records and regulatory safety compliance files.
• Legitimate Interests: To respond to business inquiries, prevent fraud, and optimize our digital platform.
• Consent: Where you have explicitly opted into promotional bulletins or resource download updates.

4. Data Security & Sovereignty

We implement robust technical and organizational measures, including TLS 1.3 encryption in transit, strict database access controls, and role-based access restrictions. We do not sell or rent personal data to third parties.

5. Your Statutory Rights

Under UK GDPR, you have the right to request access to, rectification of, or erasure of your personal data, as well as the right to restrict or object to processing. To exercise these rights, please contact our Data Protection Officer at uk@kevrongroup.com.