Privacy Policy

Last updated: 12 June 2026

This privacy policy explains how Soteria (UK) Ltd (“we”, “us”, “our”) collects, uses, stores and protects your personal data, and the rights you have in relation to it. We are committed to protecting your privacy and to handling your personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Data (Use and Access) Act 2025.

Who we are

Soteria (UK) Ltd is a health, safety and environmental consultancy based in Warrington and providing services to clients throughout the UK and Ireland. For the purposes of data protection law, we are the “data controller” responsible for your personal data.

Our contact details are:

  • Soteria (UK) Ltd (Company No. 06233394)
  • 810 Mandarin Court, Centre Park, Warrington, Cheshire, WA1 1GG
  • Telephone: 01925 626283
  • Email: james.shahhet@soteriauk.co.uk

Our contact for data protection matters is James Shahhet.

The personal data we collect

Depending on your relationship with us, we may collect and process the following types of personal data:

Clients and prospective clients — your name, business name, job title, address, email address and telephone number, together with information you provide when requesting or receiving our services.

Information collected when delivering our services — in the course of providing health, safety and environmental consultancy we may process personal data relating to our clients’ staff and others, for example in connection with risk assessments, accident and incident investigations, audits, training records and, where we assist legal defence teams, material relevant to legal proceedings. Some of this information may include health or other sensitive information. Where we process special category data, we do so only where necessary and where we have a lawful basis to do so, such as for the establishment, exercise or defence of legal claims or another basis permitted by law.

Website visitors and enquiries — the name, email address, telephone number and message you submit through our website or by email, together with technical data such as your IP address and information collected through cookies.

Suppliers and contractors — the contact and business details needed to manage our working relationship with you.

How we collect your data

We collect personal data when you contact us by phone, email or our website; when you request or receive our services; and from our clients and third parties where this is necessary to carry out the work we have been instructed to do. We also collect some technical data automatically through cookies when you use our website.

Why we use your data and our lawful basis

We use your personal data only where the law allows us to. The lawful bases we rely on are:

  • Contract — to provide the consultancy services you have engaged us for and to manage our relationship with you.
  • Legitimate interests — to respond to enquiries, deliver and improve our services, keep records, and run and protect our business, where doing so does not override the rights of the individuals concerned.
  • Legal obligation — to comply with our legal and regulatory duties, including health and safety law, tax and accounting requirements.
  • Consent — where you have given consent, for example to receive marketing communications. You can withdraw consent at any time.

Sharing your data

We do not sell your personal data and we only share it where necessary to provide our services or where we are required to by law. Depending on the work, this may include our clients, regulators and enforcing authorities, courts and legal teams where we are instructed to assist with proceedings, and trusted service providers who support our business (such as IT, hosting and accounting providers). Any third party that processes data on our behalf is required to keep it secure and to use it only for the purposes we specify.

Cookies and analytics

Our website uses cookies and similar technologies to help it function and to understand how visitors use it. You can manage or refuse cookies through your browser settings, although some parts of the site may not work properly if you disable them.

How long we keep your data

We keep personal data only for as long as we need it for the purposes set out in this policy, or for as long as the law requires. Client and project records, including those relating to health and safety matters, are retained for the periods required to meet our legal, regulatory and professional obligations and to support any potential legal claims, after which they are securely destroyed.

How we protect your data

We take appropriate technical and organisational measures to keep your personal data secure and to protect it against unauthorised access, loss, misuse or alteration. Access to personal data is limited to those who need it to carry out their work.

Your rights

Under data protection law you have the right to: be informed about how we use your data; request a copy of the data we hold about you; ask us to correct inaccurate or incomplete data; ask us to delete your data in certain circumstances; restrict or object to our processing; request that your data be transferred to another provider; and withdraw consent where we rely on it. To exercise any of these rights, please contact James Shahhet at james.shahhet@soteriauk.co.uk. We will respond within one month.

How to make a data protection complaint

If you have any concerns about how we collect, use or store your personal data, please tell us so that we can put things right. You can raise a data protection complaint by emailing James Shahhet at james.shahhet@soteriauk.co.uk, by calling 01925 626283, or by writing to us at Soteria (UK) Ltd, 810 Mandarin Court, Centre Park, Warrington, Cheshire, WA1 1GG, marking your correspondence “Data Protection Complaint”.

We will acknowledge your complaint within 30 days of receiving it. We will then take appropriate steps to investigate it without undue delay, keep you informed of our progress, and tell you the outcome.

If you are unhappy with how we have handled your complaint, you also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator. You can contact the ICO at www.ico.org.uk, by calling 0303 123 1113, or by writing to: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. We would, however, appreciate the chance to address your concerns first.