Legal

Privacy policy

This policy explains what personal data we collect when you use our website or work with us, why we collect it, and your rights. We've kept it as plain as we can.

Last updated: 11 October 2026WSG Solutions Ltd, company no. 14008820

1.Who we are

We're WSG Solutions Ltd, trading as Workplace Safety Group ("WSG", "we", "us"). We're the controller of the personal data described in this policy.

WSG Solutions Ltd (trading as Workplace Safety Group)
Company number 14008820, registered in England and Wales
Registered office: 3rd Floor Suite, 207 Regent Street, London, England, W1B 3HH
Email: info@workplacesafetygroup.co.uk
Phone: 03333 208568 (Monday to Friday, 9am to 5pm)

SafeGuard (safeguardportal.app) is a separate app with its own privacy policy and terms. This policy covers our website, our forms and our accreditation and training services. If you'd like a copy of the SafeGuard privacy policy, email info@workplacesafetygroup.co.uk.

2.The short version

  • We only collect what we need to answer your enquiry, give you a quote, book your training or do the work you've asked for.
  • We don't sell your data, and we don't share it for anyone else's marketing.
  • We only use analytics and advertising cookies (Google Analytics, Google Ads and the Meta pixel) if you say yes.
  • You can ask to see, correct or delete your data at any time. Just email info@workplacesafetygroup.co.uk.

3.What we collect and why

Here's what we collect through each part of our website, and what we use it for.

Where
What we collect
What we use it for
Instant quote form (scheme pages)
The scheme and level you pick, number of employees, name, company, email, phone (optional), and the price shown
To email you your quote and price list, and to contact you about your application
Request a call back form
Name, company, phone, email (optional), what it's about, best time to call, and the page you were on
To call you back
Request a course form (training pages)
Course, number of people, preferred dates, training location (town or postcode), name, company, email, phone and any notes
To check availability, confirm your booking and arrange the course
General enquiry form (contact page)
Name, company, email, phone (optional), topic and your message
To answer your enquiry
Booking a SafeGuard demo
Your name, email and anything you add when you book through our Google Calendar booking page
To hold the demo and send you the invite
Emails and phone calls
Whatever you send or tell us
To reply and keep a record of what we've agreed
Analytics and advertising cookies (only if you say yes)
What we collect
The pages you visit, how you found us (for example, an advert you clicked), your device and browser, your rough location from your IP address, and whether you sent a form or clicked to book a demo. If you send a form while advertising cookies are on, Google and Meta may also receive a scrambled (hashed) copy of your email address or phone number so they can match your enquiry to an advert.
What we use it for
To see how people use our website, and to check whether our Google and Meta (Facebook and Instagram) adverts lead to enquiries
Using our website
Technical information your browser sends when it loads our pages, such as your IP address, device and browser
To show you the website, keep it secure and stop spam on our forms (see our cookie policy)

If you become a client

To do your accreditation or training, we'll also handle the information needed for the job. For example: your business details, insurance and policy documents, training records, and the names and qualifications of your staff. We use it only to prepare and submit your applications, deliver training and keep your records up to date.

We don't knowingly collect data from children, and we don't need any special category data (like health information) to run our website. If a training course needs any health information (for example, about a delegate's ability to do the practical parts), we'll only ask for what's needed.

4.Our lawful bases

UK data protection law says we need a lawful basis for using your data. These are the ones we rely on:

What we do
Lawful basis
Answering your quote, call back, course or general enquiry
Steps before a contract (you've asked us to do something), or our legitimate interests in replying to business enquiries
Doing the work you've paid for (accreditation support, training)
Contract
Keeping invoices and accounts
Legal obligation (tax and company law)
Keeping records in case of a dispute, and keeping our systems secure
Legitimate interests
Analytics and advertising cookies, and measuring our adverts
Lawful basis
Consent. You can withdraw it at any time using Cookie settings at the bottom of every page

The consent box on our forms is so we can contact you about your enquiry. It doesn't sign you up to marketing.

5.Who we share it with

We use a small number of trusted companies to run our website and business. They only use your data to provide their service to us, under contracts that require them to protect it.

Who
What for
Where the data may go
Webflow
Hosting our website and receiving form submissions
USA
Google Workspace
Our email, documents and file storage
UK, EU and USA
Cloudflare (Turnstile)
Checking that form submissions come from a person, not a spam bot
USA
Google Calendar
Demo booking page and calendar invites
USA
Google Fonts
Loading the fonts on our website (your browser sends your IP address to Google)
USA
Google Analytics and Google Ads
What for
Measuring how people use our website and how our Google adverts perform (only if you say yes to cookies)
Where the data may go
USA
Meta (Facebook and Instagram)
What for
Measuring how our Facebook and Instagram adverts perform (only if you say yes to advertising cookies)
Where the data may go
USA
Stripe
Card payments
UK, EU and USA
PayPal
PayPal payments
UK, EU and USA
GoCardless
Direct Debit payments (e.g. monthly SafeGuard plans)
UK and EU

Google and Meta also use the data from their tags for their own purposes, such as improving their advertising services, under their own privacy policies. For the Meta pixel, we and Meta Platforms Ireland are joint controllers for collecting the data on our website and sending it to Meta. Neither gets any of this data unless you've said yes to advertising cookies (or, for Google Analytics, analytics cookies).

We also share data when you ask us to, or when we have to:

  • Accreditation schemes (such as CHAS, SMAS, Constructionline and SafeContractor) when we submit an application for you. They use your data under their own privacy policies.
  • Training awarding or certification bodies, to issue certificates to your delegates.
  • Our professional advisers, such as accountants and solicitors.
  • HMRC, the police or other authorities, if the law requires it.
  • A buyer of our business, if we ever sell it, under the same protections.

We never sell your data.

6.International transfers

Some of the companies above store data outside the UK, mainly in the USA. When that happens we make sure it's protected. That means either the country has UK "adequacy" (including US companies certified under the UK Extension to the EU-US Data Privacy Framework), or we rely on the UK International Data Transfer Agreement or Addendum built into the supplier's terms.

7.How long we keep it

Data
How long
Enquiries, quotes and call back requests that don't lead to work
2 years from our last contact
Course requests that don't go ahead
2 years from our last contact
Client records, contracts and correspondence
6 years after our work for you ends (for tax and legal claims)
Invoices and accounting records
6 years from the end of the financial year (legal requirement)
Training records and certificates
6 years after the course
Analytics and advertising data
How long
Cookies last up to 2 years on your device (see our cookie policy). Google Analytics keeps its report data for up to 14 months.

After that, we delete it or make it anonymous.

8.Keeping your data safe

We use secure, well-known suppliers and limit access to your data to the people who need it. No system is completely secure, but we take reasonable steps to protect your data and will tell you, and the ICO where the law requires it, if something goes wrong.

9.Your rights

You have the right to:

  • See the data we hold about you (a "subject access request")
  • Correct anything that's wrong
  • Delete your data, where we don't need to keep it
  • Restrict or object to how we use it, including any marketing
  • Take your data with you in a usable format (data portability)
  • Withdraw consent at any time, where we rely on your consent

To use any of these rights, email info@workplacesafetygroup.co.uk or call 03333 208568. It's free, and we'll reply within one month. We may need to check who you are first.

10.Cookies

We use one cookie to remember your cookie choices, plus a security cookie set by our hosting network. We only use analytics and advertising cookies (Google Analytics, Google Ads and the Meta pixel) if you say yes, and you can change your choice at any time using Cookie settings at the bottom of every page. See our cookie policy for the details.

11.Complaints

If you're unhappy with how we've handled your data, please tell us first at info@workplacesafetygroup.co.uk and we'll try to put it right.

You can also complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, or call 0303 123 1113.

12.Changes to this policy

We'll update this page if anything changes, and show the date at the top. If a change is important, we'll tell clients directly.

13.Contact us

WSG Solutions Ltd (trading as Workplace Safety Group)
Company number 14008820, registered in England and Wales
Registered office: 3rd Floor Suite, 207 Regent Street, London, England, W1B 3HH
Email: info@workplacesafetygroup.co.uk
Phone: 03333 208568 (Monday to Friday, 9am to 5pm)

See also: Privacy policy · Cookie policy · Terms