1.Who we are
We're WSG Solutions Ltd, trading as Workplace Safety Group ("WSG", "we", "us"). We're the controller of the personal data described in this policy.
WSG Solutions Ltd (trading as Workplace Safety Group)
Company number 14008820, registered in England and Wales
Registered office: 3rd Floor Suite, 207 Regent Street, London, England, W1B 3HH
Email: info@workplacesafetygroup.co.uk
Phone: 03333 208568 (Monday to Friday, 9am to 5pm)
SafeGuard (safeguardportal.app) is a separate app with its own privacy policy and terms. This policy covers our website, our forms and our accreditation and training services. If you'd like a copy of the SafeGuard privacy policy, email info@workplacesafetygroup.co.uk.
2.The short version
- We only collect what we need to answer your enquiry, give you a quote, book your training or do the work you've asked for.
- We don't sell your data, and we don't share it for anyone else's marketing.
- We only use analytics and advertising cookies (Google Analytics, Google Ads and the Meta pixel) if you say yes.
- You can ask to see, correct or delete your data at any time. Just email info@workplacesafetygroup.co.uk.
3.What we collect and why
Here's what we collect through each part of our website, and what we use it for.
Where
What we collect
What we use it for
Instant quote form (scheme pages)
What we collect
The scheme and level you pick, number of employees, name, company, email, phone (optional), and the price shown
What we use it for
To email you your quote and price list, and to contact you about your application
Request a call back form
What we collect
Name, company, phone, email (optional), what it's about, best time to call, and the page you were on
What we use it for
To call you back
Request a course form (training pages)
What we collect
Course, number of people, preferred dates, training location (town or postcode), name, company, email, phone and any notes
What we use it for
To check availability, confirm your booking and arrange the course
General enquiry form (contact page)
What we collect
Name, company, email, phone (optional), topic and your message
What we use it for
To answer your enquiry
Booking a SafeGuard demo
What we collect
Your name, email and anything you add when you book through our Google Calendar booking page
What we use it for
To hold the demo and send you the invite
Emails and phone calls
What we collect
Whatever you send or tell us
What we use it for
To reply and keep a record of what we've agreed
Analytics and advertising cookies (only if you say yes)
What we collect
The pages you visit, how you found us (for example, an advert you clicked), your device and browser, your rough location from your IP address, and whether you sent a form or clicked to book a demo. If you send a form while advertising cookies are on, Google and Meta may also receive a scrambled (hashed) copy of your email address or phone number so they can match your enquiry to an advert.
What we use it for
To see how people use our website, and to check whether our Google and Meta (Facebook and Instagram) adverts lead to enquiries
Using our website
What we collect
Technical information your browser sends when it loads our pages, such as your IP address, device and browser
What we use it for
To show you the website, keep it secure and stop spam on our forms (see our
cookie policy)
If you become a client
To do your accreditation or training, we'll also handle the information needed for the job. For example: your business details, insurance and policy documents, training records, and the names and qualifications of your staff. We use it only to prepare and submit your applications, deliver training and keep your records up to date.
We don't knowingly collect data from children, and we don't need any special category data (like health information) to run our website. If a training course needs any health information (for example, about a delegate's ability to do the practical parts), we'll only ask for what's needed.
4.Our lawful bases
UK data protection law says we need a lawful basis for using your data. These are the ones we rely on:
Answering your quote, call back, course or general enquiry
Lawful basis
Steps before a contract (you've asked us to do something), or our
legitimate interests in replying to business enquiries
Doing the work you've paid for (accreditation support, training)
Keeping invoices and accounts
Lawful basis
Legal obligation (tax and company law)
Keeping records in case of a dispute, and keeping our systems secure
Lawful basis
Legitimate interestsAnalytics and advertising cookies, and measuring our adverts
Lawful basis
Consent. You can withdraw it at any time using Cookie settings at the bottom of every page
The consent box on our forms is so we can contact you about your enquiry. It doesn't sign you up to marketing.
5.Who we share it with
We use a small number of trusted companies to run our website and business. They only use your data to provide their service to us, under contracts that require them to protect it.
Who
What for
Where the data may go
Webflow
What for
Hosting our website and receiving form submissions
Google Workspace
What for
Our email, documents and file storage
Where the data may go
UK, EU and USA
Cloudflare (Turnstile)
What for
Checking that form submissions come from a person, not a spam bot
Google Calendar
What for
Demo booking page and calendar invites
Google Fonts
What for
Loading the fonts on our website (your browser sends your IP address to Google)
Google Analytics and Google Ads
What for
Measuring how people use our website and how our Google adverts perform (only if you say yes to cookies)
Meta (Facebook and Instagram)
What for
Measuring how our Facebook and Instagram adverts perform (only if you say yes to advertising cookies)
Stripe
Where the data may go
UK, EU and USA
PayPal
Where the data may go
UK, EU and USA
GoCardless
What for
Direct Debit payments (e.g. monthly SafeGuard plans)
Where the data may go
UK and EU
Google and Meta also use the data from their tags for their own purposes, such as improving their advertising services, under their own privacy policies. For the Meta pixel, we and Meta Platforms Ireland are joint controllers for collecting the data on our website and sending it to Meta. Neither gets any of this data unless you've said yes to advertising cookies (or, for Google Analytics, analytics cookies).
We also share data when you ask us to, or when we have to:
- Accreditation schemes (such as CHAS, SMAS, Constructionline and SafeContractor) when we submit an application for you. They use your data under their own privacy policies.
- Training awarding or certification bodies, to issue certificates to your delegates.
- Our professional advisers, such as accountants and solicitors.
- HMRC, the police or other authorities, if the law requires it.
- A buyer of our business, if we ever sell it, under the same protections.
We never sell your data.
6.International transfers
Some of the companies above store data outside the UK, mainly in the USA. When that happens we make sure it's protected. That means either the country has UK "adequacy" (including US companies certified under the UK Extension to the EU-US Data Privacy Framework), or we rely on the UK International Data Transfer Agreement or Addendum built into the supplier's terms.
7.How long we keep it
Enquiries, quotes and call back requests that don't lead to work
How long
2 years from our last contact
Course requests that don't go ahead
How long
2 years from our last contact
Client records, contracts and correspondence
How long
6 years after our work for you ends (for tax and legal claims)
Invoices and accounting records
How long
6 years from the end of the financial year (legal requirement)
Training records and certificates
How long
6 years after the course
Analytics and advertising data
How long
Cookies last up to 2 years on your device (see our cookie policy). Google Analytics keeps its report data for up to 14 months.
After that, we delete it or make it anonymous.
8.Keeping your data safe
We use secure, well-known suppliers and limit access to your data to the people who need it. No system is completely secure, but we take reasonable steps to protect your data and will tell you, and the ICO where the law requires it, if something goes wrong.
9.Your rights
You have the right to:
- See the data we hold about you (a "subject access request")
- Correct anything that's wrong
- Delete your data, where we don't need to keep it
- Restrict or object to how we use it, including any marketing
- Take your data with you in a usable format (data portability)
- Withdraw consent at any time, where we rely on your consent
To use any of these rights, email info@workplacesafetygroup.co.uk or call 03333 208568. It's free, and we'll reply within one month. We may need to check who you are first.
10.Cookies
We use one cookie to remember your cookie choices, plus a security cookie set by our hosting network. We only use analytics and advertising cookies (Google Analytics, Google Ads and the Meta pixel) if you say yes, and you can change your choice at any time using Cookie settings at the bottom of every page. See our cookie policy for the details.
11.Complaints
If you're unhappy with how we've handled your data, please tell us first at info@workplacesafetygroup.co.uk and we'll try to put it right.
You can also complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, or call 0303 123 1113.
12.Changes to this policy
We'll update this page if anything changes, and show the date at the top. If a change is important, we'll tell clients directly.
13.Contact us
WSG Solutions Ltd (trading as Workplace Safety Group)
Company number 14008820, registered in England and Wales
Registered office: 3rd Floor Suite, 207 Regent Street, London, England, W1B 3HH
Email: info@workplacesafetygroup.co.uk
Phone: 03333 208568 (Monday to Friday, 9am to 5pm)