Legal
Privacy policy
This policy explains what personal information Cathedral Safety Services Ltd collects through this website, why we collect it, and what you can ask us to do about it. We have written it in plain English rather than legal language, because you should not need a solicitor to work out what happens to your data.
Last updated 19 July 2026
The short version
- We only ask for the details we actually need, which is usually your name and email address.
- We use them to answer your enquiry or to send you the updates you asked for.
- We never sell your information and we never pass it to anyone else for their own marketing.
- You can ask us to stop, or to delete what we hold, at any time.
1. Who we are
Cathedral Safety Services Ltd is the data controller for the personal information collected through this website. That means we decide what is collected and what happens to it.
Registered office
Eva Lett House, 1 South Crescent, Ripon, North Yorkshire, HG4 1SN
Company registration number
[to be added before publication]
ICO registration number
[to be added before publication]
Email
dawn@cathedralsafety.co.uk
Telephone
07793 942375
2. The information we collect
When you join the waitlist or sign up for updates. Your name and email address, and sometimes your company name and job role if you choose to give them.
When you contact us. Your name, email address, telephone number if you give one, and whatever you choose to put in your message.
When you simply browse the site. Some technical information is collected automatically: your IP address (shortened where we can), browser type and version, device type, the pages you looked at, how you arrived at the site, and your approximate location at city level.
We do not collect special category data such as health, ethnicity or religious belief through this website, and we would ask you not to include anything of that kind in a contact form.
3. Why we use it, and our lawful basis
UK data protection law requires us to have a lawful basis for using your information. Ours are set out below.
- Replying to an enquiry. Legitimate interests. You got in touch and you expect an answer.
- Waitlist and early access. Consent, given when you complete the form.
- Updates, insights and newsletters. Consent, given when you tick the box.
- Keeping the website secure and working properly. Legitimate interests.
- Understanding how the site is used. Consent, given through the cookie banner.
- Keeping records for tax, accounting and legal reasons. Legal obligation.
Where we rely on legitimate interests, we have thought about whether it is fair to you, and we are satisfied that our interest in running the business does not override your rights. You can object at any time and we will look at it properly.
4. Cookies and analytics
Essential cookies keep the website working and cannot be switched off. Analytics cookies are only set if you agree through the cookie banner.
We use Google Analytics to understand how many people visit, which pages are useful and where visitors come from. We look at this in aggregate. We do not use it to identify individuals and we have not enabled advertising features.
You can change your choice at any time through the cookie settings link in the footer. Fuller detail sits in our Cookie Policy.
5. Who we share it with
We do not sell your personal information, and we do not pass it to anyone else for their own marketing.
We do use a small number of suppliers who handle information on our behalf. They act only on our instructions and are bound by a written contract.
- Our website host, which stores the site and anything submitted through it.
- Brevo, which holds our mailing list and sends our emails.
- Google Analytics, for website statistics, and only where you have agreed.
- Our professional advisers, such as accountants and legal advisers, where there is a genuine need.
We may also disclose information where the law requires it, or where we need to establish or defend a legal claim.
6. Where your information is held
Wherever possible, your information stays within the United Kingdom or the European Economic Area. Some of our suppliers may process data outside the UK.
Where that happens, we make sure the transfer is covered by UK adequacy regulations, or by an International Data Transfer Agreement, or by the UK Addendum to the EU Standard Contractual Clauses, so that your information keeps the same level of protection it has here.
7. How long we keep it
- Waitlist and newsletter details. Until you unsubscribe or ask to be removed, and then a minimal record that you opted out, so we do not contact you again by mistake.
- Enquiries. Up to 24 months after our last contact with you.
- Anything with a tax or legal purpose. Six years, as required.
- Website analytics. Up to 14 months.
We review what we hold from time to time and delete anything we no longer have a reason to keep.
8. Keeping your information safe
The site runs over an encrypted connection. Access to form submissions and mailing list data is limited to the people who need it, and our suppliers are established providers with their own security standards.
No system is ever completely secure. If something did go wrong and there was a real risk to your rights, we would report it to the Information Commissioner’s Office within 72 hours and tell you directly where the risk to you was high.
9. Your rights
Under UK data protection law you have the right to:
- be told what we hold about you and be given a copy of it
- have anything inaccurate corrected
- have your information deleted where there is no good reason for us to keep it
- restrict how we use it while a concern is being looked into
- object to us using it under legitimate interests, including for marketing
- ask us to send it to you or to another provider in a common machine readable format
- withdraw your consent at any time, which does not affect anything we did before you withdrew it
To use any of these rights, email dawn@cathedralsafety.co.uk. We will normally reply within one month and there is no charge. We may ask you to confirm who you are first, so that we do not hand your information to someone else.
10. Marketing emails
We only send marketing emails to people who have asked for them. Every email carries an unsubscribe link, and it works. You can also just reply and ask us to stop, or email dawn@cathedralsafety.co.uk. We will act on it straight away.
Asking us to stop marketing does not stop essential service messages, such as confirming a form you submitted.
11. Dawn and your own documents
Dawn, our health and safety assistant, is a separate product from this website. Nothing you upload to Dawn is collected here.
If you go on to use Dawn, the documents you upload and the conversations you have with her are covered by their own terms of use and privacy notice, which we will give you before you start.
12. Children
This website is meant for people at work and is not aimed at children. We do not knowingly collect information about anyone under 18. If you believe we have, please tell us and we will remove it.
13. Links to other websites
This site links out to other websites, including the HSE and the ICO. We are not responsible for how those sites handle your information, so it is worth reading their own privacy policies.
14. Changes to this policy
We will update this page whenever the way we handle information changes. The date at the top shows when it was last revised. If a change is significant and we hold your email address, we will tell you about it.
15. Getting in touch, and complaining
If you have a question about this policy, or you are not happy with something we have done with your information, please tell us first. We would much rather put it right.
dawn@cathedralsafety.co.uk
07793 942375
Cathedral Safety Services Ltd, Eva Lett House, 1 South Crescent, Ripon, North Yorkshire, HG4 1SN
You also have the right to complain to the Information Commissioner’s Office, which regulates data protection in the UK.
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline 0303 123 1113
ico.org.uk
