Privacy policy

1. Who we are

Clark's Clarity is a health and safety consultancy based in Lincolnshire, UK. We are the data controller for personal data you provide via this website and the client portal. You can reach us at the contact details listed in the footer of every page.

2. What data we collect

We process the following categories of personal data:

• Contact form submissions: name, work email, company name, phone (optional), and whatever you write in the message field.
• Lead magnet downloads: name and work email when you request a resource such as our HSE checklist.
• Client portal accounts:name, email, role, hashed password, the company you're linked to, and your last login timestamp. Authentication uses a session cookie (`payload-token`).
• Client documents and uploads: files we deliver to you, files you upload to us, and the metadata around them.
• Cookies: see our cookie policy for the full list. We do not run advertising cookies. We do not run analytics cookies at present.

3. Why we process it (lawful basis)

• Legitimate interests: responding to enquiries, sending requested resources, and operating our website securely.
• Contract performance: delivering paid services to clients, granting portal access, and exchanging documents.
• Consent: any future marketing communications (we will ask before adding you to a marketing list).
• Legal obligation: retention of business records as required by HMRC and other UK regulators.

Clark's Clarity processes personal data in accordance with the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

4. Who we share it with

We do not sell your personal data. We do not share it with third parties for marketing. We use a small number of trusted processors (e.g. our website hosting provider, transactional email provider, and backup storage) which are bound by data-processing terms equivalent to our own. We will disclose data where required by law, regulator, or court order.

5. Retention

• Enquiry data (contact form, lead magnet): up to 2 years from last contact, unless you become a client.
• Client engagement data and documents: duration of the engagement plus 6 years (statutory retention for business records).
• Portal accounts: deactivated promptly on end of engagement; fully deleted within 12 months unless retention is required for legal reasons.

6. Your rights

Under UK GDPR you have the right to access the data we hold about you, to have inaccurate data corrected, to have data erased (in some circumstances), to restrict or object to processing, and to receive your data in a portable format. To exercise any of these rights, email us at the address in the footer. We aim to respond within one calendar month.

7. Complaints

If you're unhappy with how Clark's Clarity has handled your personal data, please contact us first and we'll do our best to resolve it. You also have the right to complain directly to the Information Commissioner's Office (ICO), the UK's data-protection regulator:

• ico.org.uk/make-a-complaint
• Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
• Helpline: 0303 123 1113

8. Changes to this policy

We'll update this page if our processing changes. Material changes will be flagged at the top. The "last updated" date above is the source of truth for the version in force.