Privacy Policy

Your privacy is important to us. This privacy policy explains how Osborne & Oxley (“we”, “us”, “our”) collects, uses, and protects personal data when you visit our site and use this service, including information about our resource optimization solutions.

We are committed to handling personal data in accordance with applicable UK data protection laws (including the UK GDPR) and the Privacy and Electronic Communications Regulations (PECR), as well as any other relevant laws.

Who we are

Osborne & Oxley
The Carrs,
Whitby, North Yorkshire, YO21 1RW,
United Kingdom

What this policy covers

This policy covers personal data processed through:

• our site, including pages you view and actions you take;
• forms you complete (for example, to request information or contact us about resource optimization solutions);
• communications you send us in relation to our services;
• business interactions where we may process information about representatives of organisations.

Personal data we collect

We collect personal data that you provide to us, and some data automatically when you use our site. The personal data we process may include:

1) Data you provide to us

• Contact and identity data: name, job title, organisation name, and contact details.
• Business and communication data: details you include in messages, enquiries, or requests for proposals and consultations.
• Service-related data: information about your business needs and interests in resource optimization solutions (for example, waste reduction strategies, supply chain efficiencies, and energy management), to the extent you provide it.

2) Data collected automatically

• Device and usage data: IP address, browser type, operating system, approximate location (derived from IP), pages viewed, time spent, and links clicked.
• Log and diagnostic data: data generated to maintain the security, reliability, and performance of our site.
• Cookies and similar technologies: for purposes described in our cookie information (if you enable cookies or similar tracking technologies).

3) Data we receive from third parties

In some cases, we may receive personal data from partners, business directories, or other third parties in connection with business development. Where this occurs, we will process the data in line with applicable data protection law and provide relevant notices where required.

How we use your personal data

We use personal data for the following purposes:

• To provide information and respond to enquiries: including answering questions about our resource optimization solutions and services.
• To manage business relationships: including communications with organisational representatives and coordination of discussions.
• To deliver and improve services: such as evaluating potential projects, supporting implementation planning, and improving our site and service offerings.
• To conduct business operations: including internal administration, customer and prospect management, and record keeping.
• To maintain security and prevent fraud: including detecting misuse of our site and protecting the rights and safety of our users and our organisation.
• To meet legal and regulatory obligations: including compliance with applicable laws, responding to lawful requests, and protecting ourselves where necessary.
• To carry out analytics and improve user experience: using aggregated or pseudonymised data where possible, and with cookies or similar technologies where applicable.

Legal bases for processing

Depending on the circumstances, we process personal data under one or more of the following legal bases:

• Contractual necessity: where processing is needed to take steps at your request prior to entering a contract, or to perform a contract.
• Legitimate interests: where processing is necessary for our legitimate business purposes, provided your rights and interests do not override those interests.
• Consent: where we rely on consent (for example, for certain cookies or similar tracking technologies).
• Legal obligation: where processing is required to comply with a legal obligation.

Cookies and similar technologies

Our site may use cookies and similar technologies to make the site work properly, improve performance, and understand how users interact with it. Where required by law, we will obtain your consent before placing certain cookies.

You can manage cookies through your browser settings. If you choose to disable cookies, some parts of the site may not function properly.

How we share personal data

We do not sell your personal data. We may share personal data in limited circumstances, including:

• Service providers and processors: such as hosting providers, IT and security providers, analytics providers, and customer relationship management tools, where they process personal data on our behalf.
• Professional advisers: such as legal, financial, or consultancy advisers where necessary for business and legal purposes.
• Business transfers: if we restructure or transfer parts of our business, your information may be transferred as part of that transaction, subject to appropriate safeguards.
• Legal and safety reasons: where disclosure is necessary to comply with legal obligations, enforce our rights, or protect safety.

Where we share data with processors, we enter appropriate agreements to ensure appropriate security and data protection obligations are in place.

International data transfers

Some service providers may process personal data outside the UK. Where personal data is transferred internationally, we put in place appropriate safeguards designed to protect it in line with UK GDPR requirements (for example, adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms).

Data retention

We keep personal data only for as long as necessary for the purposes described in this policy, including to:

• respond to enquiries and manage business relationships;
• provide and improve our services;
• fulfil legal, accounting, or reporting obligations; and
• maintain records for dispute resolution and to enforce agreements where necessary.

Retention periods vary depending on the type of data, the purpose for processing, and the legal requirements that apply.

Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. While no method of transmission or storage is completely secure, we take reasonable steps to protect personal data in our control.

Your rights

Depending on your location and the applicable law, you may have rights in relation to your personal data. These may include:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to correct inaccurate or incomplete personal data.
• Right to erasure: to request deletion in certain circumstances.
• Right to restriction of processing: to ask us to limit processing in certain circumstances.
• Right to object: to processing based on legitimate interests (including profiling based on that basis) in certain circumstances.
• Right to data portability: to receive certain personal data in a structured, commonly used format in certain circumstances.
• Right to withdraw consent: where processing is based on consent, you can withdraw it at any time.

If you would like to exercise any of these rights, please write to us at the physical address listed under “Who we are”. We may need to verify your identity before we can respond.

Right to complain

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO). You can find details on the ICO website.

Children’s privacy

Our site and services are intended for business users and organisations. We do not knowingly collect personal data from children. If you believe that a child has provided personal data to us, please contact us so we can take appropriate steps.

Automated decision-making and profiling

We do not use your personal data to make automated decisions that produce legal or similarly significant effects for you. Where we use profiling for analytics or service improvement, we will do so in a way that does not unfairly affect your rights.

Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on our site. We encourage you to review this policy periodically.

Contact us

If you have questions about this privacy policy or our data practices, you can write to us at:

Osborne & Oxley
The Carrs,
Whitby, North Yorkshire, YO21 1RW,
United Kingdom