Privacy Policy

1. Introduction

The-OHC Limited (“we”, “us”, or “our”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store and protect your personal information when you:

• Visit our website;
• Contact us through our website;
• Submit enquiries;
• Request information about our services; or
• Engage with us as a customer, supplier, or business contact.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection laws. This policy has been adapted from The-OHC Limited’s existing privacy arrangements and contact details.

2. Who we are

Telephone: +44 (0)1675 443615
Website: www.the-ohc.co.uk

For any questions regarding this Privacy Policy or how we process your personal information, please contact us using the details above.

3. Purpose

This policy provides information for website users on the information we hold or are about to hold and how we will manage and process that information.

The-OHC Limited is committed to ensuring that any data, whether electronic or paper, that we hold is processed, stored and disposed of securely.

This policy explains:

• What information is processed;
• Why we hold the information; and
• How long we hold the information.

4. What information we collect

The-OHC Limited will act as the data controller and processor for your personal and sensitive data and will process the information lawfully, fairly and transparently.

We apply the following UK GDPR provisions to justify processing personal and sensitive data:

• Article 6(1)(a) — Consent;
• Article 6(1)(b) — Contract;
• Article 6(1)(c) — Legal obligation; and
• Article 6(1)(f) — Legitimate interests.

Information you provide

• Name;
• Email address;
• Telephone number;
• Company or organisation name; and
• Job title.

When you submit an enquiry through our website, we use the information provided to respond to your request and maintain records of our communications. We only use this information for the purpose for which it was provided unless otherwise required by law.

Information collected automatically

• IP address;
• Browser type and version;
• Device information and operating system;
• Date and time of website access;
• Pages viewed and time spent on pages; and
• Referring website addresses.

How we collect information

• Website contact forms;
• Email correspondence;
• Telephone and online service enquiries;
• Newsletter sign-up forms;
• Cookies and similar technologies; and
• Website analytics tools.

Information obtained by The-OHC Limited shall be obtained and processed lawfully, fairly and transparently; used only for specified purposes; adequate, relevant and limited to what is necessary; accurate and up to date; retained only as long as necessary; held securely; and processed according to the rights of data subjects.

5. Why and how we hold your data

We use personal information to:

• Respond to enquiries and requests;
• Provide information about requested services;
• Arrange consultations, appointments or discussions;
• Manage customer and supplier relationships;
• Improve website functionality, user experience and our services;
• Understand website performance and visitor engagement;
• Ensure website security;
• Meet legal and regulatory obligations; and
• Establish, exercise or defend legal claims.

The-OHC Limited is registered with the Information Commissioner’s Office as a data controller. All information is held securely and only accessed by The-OHC Limited staff.

We do not and will never sell your information. We only share it with trusted service providers where necessary to operate our business and website.

We hold information in electronic and paper forms. Our computer server is located in England and information is not stored or held outside the EU. Electronic data is encrypted and backed up daily.

6. Legal basis for processing

Legitimate interests

We process personal information where necessary for our legitimate business interests, including responding to enquiries, managing business relationships, improving our website and services, and maintaining website security.

Consent

We rely on consent where required, including for certain marketing communications and non-essential cookies. You may withdraw your consent at any time.

Contract

Where you request services from us, we may process your information to take steps before entering into a contract or to fulfil contractual obligations.

Legal obligation

We may process information where required to comply with legal or regulatory requirements.

7. Cookies and website technologies

Our website may use cookies and similar technologies to improve user experience and understand how visitors use our website.

• Essential cookies: required for the operation and security of the website.
• Analytics cookies: help us understand website traffic and user behaviour.
• Functionality cookies: remember preferences and improve user experience.
• Marketing cookies: used only where applicable and with appropriate consent.

You can manage cookie preferences through your browser settings and through any cookie consent tool provided on our website.

8. Sharing your information

We do not sell personal information. We may share personal information with trusted third parties where necessary, including:

• Website hosting, IT support and cloud service providers;
• Professional advisers;
• Marketing service providers; and
• Regulators, courts or law enforcement agencies when legally required.

All third parties are required to process personal data securely and in accordance with applicable data protection laws.

9. International data transfers

Where personal information is transferred outside the United Kingdom, we ensure appropriate safeguards are in place, including adequacy regulations approved by the UK Government, International Data Transfer Agreements (IDTAs), or other lawful transfer mechanisms permitted by UK GDPR.

10. Data security

We take appropriate technical and organisational measures to protect personal information from unauthorised access, loss, misuse, alteration, disclosure and destruction.

Measures may include secure hosting environments, access controls, password protection, encryption where appropriate, and regular monitoring of systems and processes.

11. Data retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, including satisfying legal, accounting, tax or reporting requirements.

When information is no longer required, it will be securely deleted or anonymised.

12. Your data protection rights

Subject to applicable law, you have the right to:

• Access personal information we hold about you;
• Request correction of inaccurate information;
• Request deletion of your information;
• Restrict the processing of your information;
• Object to processing based on legitimate interests;
• Request data portability;
• Withdraw consent at any time where processing is based on consent; and
• Lodge a complaint with the Information Commissioner’s Office (ICO).

We have measures and processes in place to ensure personal information and personal data are processed in accordance with all relevant data protection laws.

13. Making a data request or complaint

If you need to complain about how we have processed your data, please write to:

You can also raise concerns directly with the Information Commissioner’s Office at ico.org.uk.

14. Access to your data

You have the right to request a copy of all personal and sensitive personal data we hold about you. To request a copy, make a Subject Access Request in writing to the Data Controller at the address above.

A request will usually be processed within one month of receipt. There is no charge to request this service.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical or business developments.

Any changes will be posted on this page and, where appropriate, notified to users through the website.