Privacy Policy

01 Who we are

Advanced Environmental Ltd is a specialist environmental compliance consultancy operating at advancedsenvironmental.org. We are the data controller for all personal information you provide when using our website, enquiring about our services, or engaging us as a client.

We are registered in England and Wales and are fully committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

02 Data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

• Full name, job title, company name, email address, and phone number
• Business address and site location details provided during audits or consultancy
• Enquiry and correspondence details submitted via our contact form or email
• Payment information for invoiced services (processed securely — we do not store card details)
• IP address, browser type, device information, and browsing behaviour via cookies and analytics
• Any information you voluntarily provide in meetings, calls, or project documentation

We do not knowingly collect data from or about children under the age of 16.

03 How we use your data

We use your personal data strictly for the following purposes:

• Responding to your enquiries and providing quotations for our services
• Delivering agreed consultancy services, audits, reports, and permit applications
• Invoicing and processing payments for services rendered
• Sending relevant service updates, regulatory alerts, and newsletter communications (with your consent)
• Improving our website and understanding how visitors interact with it
• Complying with legal, regulatory, and contractual obligations
• Preventing fraud and maintaining the security of our systems

We will never use your data for automated decision-making or profiling that has a legal or significant effect on you.

04 Legal basis for processing

Under UK GDPR we rely on the following lawful bases to process your personal data:

• Contract performance — to deliver the consultancy services you have engaged us for
• Legitimate interests — to improve our services, manage client relationships, and prevent fraud
• Consent — for marketing communications and non-essential cookies; you may withdraw at any time
• Legal obligation — for tax records, HMRC compliance, and other statutory requirements

05 Data sharing

We do not sell, rent, or trade your personal data. We share it only with carefully selected third parties who assist us in delivering our services:

• Secure cloud storage and document management providers
• Accounting and payment processing platforms (e.g. Xero, Stripe)
• Email and CRM platforms used to manage client communications
• Website analytics providers (anonymised data only)
• Regulatory bodies (e.g. the Environment Agency) where required by your project scope
• Sub-contracted technical specialists, bound by confidentiality agreements

All third-party processors are contractually required to handle your data securely and in accordance with UK GDPR. We do not transfer data outside the UK or EEA without appropriate safeguards in place.

06 Cookies

Our website uses cookies to function correctly and to help us understand how it is used. Cookies fall into the following categories:

• Essential cookies — required for the website to function; these cannot be disabled
• Analytics cookies — anonymous data on page visits and user journeys, used to improve the site (e.g. Google Analytics)
• Marketing cookies — only activated with your explicit consent via our cookie banner

You can control or disable non-essential cookies at any time through your browser settings. Continued use of our website without adjusting settings implies acceptance of essential cookies only.

07 Data retention

We retain personal data only for as long as necessary for the purposes it was collected:

• Client project data — 7 years from project completion, in line with HMRC and professional indemnity requirements
• Enquiry and contact records — 2 years from the last correspondence if no engagement follows
• Marketing consent records — retained until you withdraw consent or unsubscribe
• Website analytics data — 26 months in anonymised form

After retention periods expire, data is securely deleted or anonymised. You may request early deletion at any time, subject to our legal obligations.

08 Your rights

Under UK GDPR you have the following rights in relation to your personal data:

To exercise any of these rights, email us at privacy@advancedsenvironmental.org or use our contact form. We will respond within 30 days as required by UK GDPR.

You also have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk.

09 Contact our data team

For all privacy enquiries, data subject access requests, or to withdraw your consent to marketing, please contact us:

📧 privacy@advancedsenvironmental.org

Or complete our contact form and select "Privacy or data request" as the subject. We respond to all requests within 30 days.