Privacy Notice Policy

Last updated: 28/08/2025

This notice explains how SPL Consulting Limited (“we,” “us,” or “our”) collects, uses, and protects your personal information. We are committed to protecting your privacy and handling your data in an open and transparent way, in line with the UK General Data Protection Regulation (GDPR).

1. information do we collect?

We collect different types of personal information depending on how you interact with us:

• Website Visitors: We collect your name, email, and contact details when you use our ‘Contact Us’ form or a similar feature.
• Business Partners & Suppliers: We collect your name, email, and business contact details to communicate with you and manage our business relationship.
• Job Applicants: We collect your name, contact details, and employment information from your application, recruiters, and references to process your job application.

We also collect limited information through cookies and similar technologies. For more details on this, please see our separate Cookie Policy.

2. How and why do we use your information?

We only use your personal information where we have a lawful basis to do so under UK GDPR. Below are our purposes and legal grounds for processing your data:

• To Respond to Your Enquiries: We use your information to reply to your questions and comments.
  • Legal basis: Legitimate interests (to respond to a request for information) or performance of a contract (where you are asking about a service you wish to enter into a contract for).
• To Provide You with Services: If you are a client, we use your information to provide the services you have requested.
  • Legal basis: Performance of a contract.
• To Improve Our Website: We analyse how our website is used to improve its functionality and your user experience.
  • Legal basis: Legitimate interests (to develop our business and services).
• To Process Job Applications: We use your information to evaluate and contact job candidates.
  • Legal basis: Legitimate interests (to recruit for our business) or performance of a contract (in the run-up to an employment contract).
• For Marketing: We may use your information to tell you about our services that we think may be of interest to you.
  • Legal basis: Legitimate interests (to market our services). You have the right to object to this at any time.
• To Comply with the Law: We may need to process and retain your information to comply with our legal obligations.
  • Legal basis: Legal obligation.

3. Who do we share your information with?

We do not sell or rent your personal data to anyone. We only share it with trusted third parties where necessary to run our business or comply with the law. This may include:

• Service providers: Companies that help us with IT, data processing, marketing, or other services.
• Law enforcement or regulators: If legally required, we may share your data with government authorities.
• Affiliates: Other companies within the SPL Consulting group.
• Business transfers: In the event of a merger or business sale, your data may be transferred to the new owner.

4. How long do we keep your information?

We will only keep your personal information for as long as is necessary to fulfil the purposes we collected it for, including any legal, accounting, or reporting requirements.

5. How do we keep your information safe?

We have implemented robust technical and organizational security measures to protect your personal data from accidental loss, unauthorised access, or misuse. This includes encryption, access controls, and regular security reviews.

6. International data transfers

As we are a UK company, your data will be stored and processed in the UK. We may occasionally transfer your data to service providers located outside the UK. When we do, we will ensure it is protected to the same standards as in the UK by using legally approved transfer mechanisms.

7. Your rights

Under UK GDPR, you have the following rights regarding your personal data. You have the right to:

• Access your information (a “Subject Access Request”).
• Correct your information if it is inaccurate.
• Ask us to delete your information (“the right to be forgotten”).
• Object to us processing your information.
• Withdraw consent where we rely on it as a legal basis.
• Request that we restrict the processing of your information.
• Request a copy of your information in a structured format (“data portability”).

To exercise any of these rights, please contact us using the details below.

8. Contact us

If you have any questions about this privacy notice or our data handling practices, please contact our Data Protection Officer at [email protected]

9. Changes to this privacy notice

We may update this notice from time to time. The latest version will always be available on our website.