Last updated: 4th September 2026

Important information and who we are

Data Controller

For the purposes of data protection laws, we are the “controller” of your personal data. This means we decide why and how your personal information is processed and are responsible to you under the law for that processing.

Vulcan Health and Safety Ltd is a company registered in England and Wales under company number 14934912, with its registered office at G8 Lane Offices, 79 Lynch Lane, Weymouth, Dorset, England, DT4 9DN.

Contact details

If you have any questions about this policy or how we use your personal data, you can contact us at:

Email: hello@vulcanhealthandsafety.co.uk

What you can expect from us

This policy explains how we collect, use and store your personal data when you:

• visit our website

• contact us

• book or access our online training courses

• subscribe to our newsletter

• use services provided by Vulcan Health and Safety Ltd

We aim to keep this clear and straightforward so you always understand what happens to your information.

​

1. The information we collect

We only collect information that is necessary to provide our services, respond to enquiries, meet our legal obligations and operate our website.

Information you provide to us

This may include:

• name

• email address

• telephone number

• company name or company details, where relevant

• enquiry messages

• course booking details

• training or transaction information

• newsletter subscription preferences

Information collected automatically

When you visit our website, we may collect certain technical information, which may include:

• IP address

• browser and device information

• pages visited

• date and time of visits

• information about how you interact with our website

This information may be collected through cookies or other storage and access technologies used by our website platform.

We use this information where necessary to operate the website securely, understand how it is used and improve its performance.

​

2. How we use your information

We may use your information to:

• respond to enquiries

• provide health and safety consultancy, training and related services

• provide access to online training courses

• process payments and transactions

• communicate with you about services you have requested

• administer course bookings and training records

• operate and maintain our website

• improve our website and services

• send newsletters and other marketing communications where you have chosen to receive them

• prevent misuse, fraud or security incidents

• meet legal, regulatory, tax, accounting and insurance obligations

We do not sell your personal data.

​

3. Lawful basis for processing

Under UK data protection law, we rely on one or more of the following lawful bases, depending on why we are using your information:

Contract

We may process your personal information where this is necessary to enter into or perform a contract with you, including providing services, training or online courses that you have requested.

Legitimate interests

We may process personal information where this is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

• responding to business enquiries

• managing relationships with clients and prospective clients

• improving our services

• maintaining the security and effective operation of our website

• maintaining appropriate business records

Where we rely on legitimate interests, we consider the impact on your rights and only process information where we believe the processing is necessary and proportionate.

Legal obligation

We may process information where we are required to do so by law, including meeting accounting, taxation, regulatory or other legal requirements.

Consent

Where you have actively chosen to receive our newsletter or other email marketing, we rely on your consent.

You can withdraw that consent at any time.

​

4. Payments and third-party services

We use trusted third-party providers to help us operate our website and deliver our services.

These may include:

• Wix, for website hosting, website infrastructure, forms and related website services

• PayPal, where used for payment processing

• providers used to deliver or administer online training courses

• email or newsletter service providers, where applicable

These organisations may process personal information on our behalf or as independent controllers depending on the service they provide.

How your data is stored

Our website is hosted on the Wix.com platform. Wix provides the online infrastructure that allows us to operate our website and related services.

Information submitted through our website may therefore be stored or processed through Wix systems, databases and applications.

Payment providers process payment information in accordance with their own security and data protection arrangements. Where applicable, payment providers operate in accordance with recognised payment security standards such as PCI DSS.

We do not normally receive or store full payment card details ourselves where payments are processed directly by a payment provider.

​

5. International transfers

Some of the organisations we use, including website, payment, training or technology providers, may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure that appropriate safeguards are in place in accordance with UK data protection law.

These safeguards may include:

• transfers to countries covered by UK adequacy regulations

• the use of recognised contractual safeguards, including the UK International Data Transfer Agreement or UK Addendum to approved standard contractual clauses

• other safeguards permitted under UK data protection law

You may contact us if you would like further information about the safeguards used in relation to your personal information.

​

6. How long we keep your data

We only keep personal data for as long as reasonably necessary for the purposes for which it was collected, including meeting legal, accounting, tax, insurance and reporting requirements.

Typical retention periods include:

• General enquiries: up to 12 months after the enquiry has been resolved

• Client, training, transaction and course records: up to 6 years where required for contractual, legal, insurance, accounting or tax purposes

• Newsletter subscription details: for as long as you remain subscribed

Individual records may be retained for a longer or shorter period where there is a specific legal, contractual, regulatory or business reason to do so.

Where you have actively chosen to subscribe to our newsletter, we may use your name and email address to send you health and safety news, service information, course updates and other relevant communications.

We rely on your consent for this processing.

You can withdraw your consent at any time by using the unsubscribe option included in our emails or by contacting:

hello@vulcanhealthandsafety.co.uk

Withdrawing consent will not affect the lawfulness of any processing carried out before consent was withdrawn.

Where you unsubscribe, we may retain a minimal record of your email address on a suppression list so that we can respect your preference and avoid sending further marketing communications.

We periodically review the personal data we hold and securely delete or anonymise information when it is no longer required.

​

7. How we communicate with you

We may contact you where necessary to:

• respond to enquiries

• provide services you have requested

• administer bookings, courses or training

• send important service or account information

• resolve issues or respond to queries

We may contact you by:

• email

• telephone

Where you have separately opted in to our newsletter, we may also send you marketing emails relating to health and safety news, services and training.

Marketing consent is separate from your use of our services and you can withdraw it at any time. Current ICO guidance requires email marketing consent, where relied upon, to be freely given, specific, informed and indicated by a clear positive action.

​

8. Your rights

Depending on the circumstances and the lawful basis we rely upon, you may have the right to:

• request access to your personal data

• request correction of inaccurate or incomplete information

• request deletion of your personal data

• request restriction of processing

• object to processing

• request transfer of your personal data to you or another organisation, where the right to data portability applies

• withdraw consent at any time where processing is based on consent

Some of these rights are subject to legal conditions and exemptions and may not apply in every situation.

To exercise your rights, please contact:

hello@vulcanhealthandsafety.co.uk

​

9. Data protection complaints

If you have concerns about how Vulcan Health and Safety Ltd has handled your personal information, you have the right to make a data protection complaint to us.

You can make a complaint by contacting:

hello@vulcanhealthandsafety.co.uk

Please provide enough information for us to understand the issue and investigate it.

We will:

• acknowledge receipt of your data protection complaint within 30 days

• take appropriate steps to investigate the complaint without undue delay

• keep you informed where appropriate

• provide you with the outcome of our investigation without undue delay

If you remain unhappy with how we have handled your personal information or your complaint, you also have the right to complain to the Information Commissioner’s Office (ICO).

Website: www.ico.org.uk

​

10. Cookies and other storage and access technologies

Our website may use cookies and other technologies that store information on or access information from your device.

These technologies may include:

• cookies

• scripts and tags

• web storage

• tracking technologies used by website infrastructure or embedded services

The ICO refers to these collectively as storage and access technologies.

Essential technologies

Some cookies or similar technologies are necessary for the website to operate correctly.

These may be used for purposes including:

• website security

• fraud prevention

• maintaining website functionality

• remembering necessary user preferences

• enabling forms or other requested website functions

Where a technology is strictly necessary for a service you have requested, consent may not be required.

Non-essential technologies

Non-essential cookies or similar technologies are only used where permitted by law and, where required, after you have made an appropriate choice through our cookie consent controls.

We do not currently use Google Analytics.

However, our website platform and embedded services may use their own cookies or other storage and access technologies.

You can accept, reject or manage non-essential technologies using the cookie controls provided on our website.

​​

11. Managing cookies and similar technologies

You can control cookies and other storage and access technologies through:

• the cookie consent controls provided on our website

• your browser settings, where applicable

Where consent is required, you can change or withdraw your choice using the available cookie controls.

Blocking or disabling certain technologies may affect the functionality of parts of the website.

​

12. Security

We take appropriate technical and organisational measures to protect the personal information we hold.

These measures are intended to help protect information against:

• unauthorised access

• accidental loss

• misuse

• alteration

• inappropriate disclosure

Access to personal information is limited to those who have a legitimate need to use it.

​

13. Links to other websites

Our website may contain links to websites operated by other organisations.

We are not responsible for the privacy practices, security or content of third-party websites.

We recommend reviewing the privacy information provided by those organisations before supplying personal information to them.

​

14. Children’s data

Our consultancy and business services are intended primarily for adults and organisations.

We do not knowingly collect personal information directly from children under the age of 13 through our general website enquiry services.

Some online training services may be accessed by younger users where arranged by a responsible organisation, employer, parent, guardian or other authorised person. Where this occurs, the relevant data protection requirements will be considered according to the circumstances.

​

15. Automated decision-making and profiling

We do not currently use personal information to make solely automated decisions that produce legal or similarly significant effects about individuals.

We do not currently carry out profiling for automated decision-making purposes.

​

16. Changes to this policy

We may update this Privacy and Cookies Policy from time to time to reflect changes in:

• our services

• the technology we use

• our legal or regulatory obligations

• guidance issued by relevant regulators

Any updated version will be published on this page and the Last updated date will be amended accordingly.

​