Privacy policy

Last updated: January 2026

Who we are

Safety in Process Ltd ("Safety in Process", "we", "us", "our") is an engineering consultancy registered in England and Wales under company number 15841152. Our registered office is Exchange Building, 66 Church Street, Hartlepool, United Kingdom, TS24 7DN. For any data-protection enquiries, contact privacy@safety-in-process.com.

What this policy covers

This policy explains what personal data we collect through safety-in-process.com, why we collect it, how we use it, and the rights you have over that data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What data we collect

• Contact form submissions: name, company, email, optional phone number, enquiry type, and the message content you send us.
• Server logs: our host (Cloudflare) records standard request metadata, IP address, user agent, timestamp, for a short retention period to protect the service from abuse.
• Analytics: we use Cloudflare Web Analytics, which is cookieless and does not collect personal data or use fingerprinting. It records aggregate page-view counts, referrers and approximate country, nothing that identifies you.

We do not use advertising cookies, marketing pixels, or third-party tracking.

Why we collect it, and our legal basis

• Contact form, legitimate interest and, where you initiate it, steps taken at your request prior to entering a contract. Used only to respond to your enquiry and, where relevant, follow up about potential work.
• Server logs, legitimate interest (operating and securing the website).
• Analytics, legitimate interest. Cloudflare Web Analytics processes aggregate, non-identifying data.

Who we share it with

We do not sell your data or share it with advertisers. We use a small number of processors:

• Cloudflare, Inc., hosting, DNS, CDN, web analytics.
• Resend, Inc., transactional email delivery for contact form submissions.
• Our email inbox provider (Microsoft 365) stores enquiries we receive.

Some processors are based outside the UK. Where personal data is transferred internationally, we rely on the UK International Data Transfer Addendum or EU Standard Contractual Clauses, as appropriate.

How long we keep it

• Contact-form enquiries: up to 24 months from the date of the enquiry, or until the end of the working relationship, whichever is longer.
• Server logs: up to 30 days, then purged.
• Analytics: aggregated and non-identifying, retained indefinitely by Cloudflare.

Your rights

Under UK GDPR you have the right to access, correct, delete or port your personal data, to restrict or object to its processing, and to withdraw consent where consent is the legal basis. Email privacy@safety-in-process.com to exercise any of these rights.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we ask that you contact us first so we can try to resolve the matter directly.

Changes to this policy

If we change this policy we will update the 'Last updated' date and, for material changes, note the change on the homepage for a reasonable period.