Allied Response Group Limited respects your privacy. This notice explains what personal information we collect through this website and our business communications, why we use it, who may receive it and the rights available to you.
1. Who we are
Allied Response Group Limited is the controller of the personal information described in this notice.
- Company number
- 17268123
- Registered office
- 3rd Floor, Old Stock Exchange, St Nicholas Street, Bristol, BS1 1TG
- Telephone
- +44 (0)7487 580 821
We have not appointed a data protection officer because we are not presently required to do so. Data-protection enquiries should be sent to the email address above.
2. Information we collect
Information you give us
- Your name, work email address, telephone number and organisation.
- The content of an enquiry, correspondence, meeting request, proposal or instruction.
- Information needed to supply equipment or services, manage a client or supplier relationship, arrange training through a partner, issue invoices and maintain records.
- Feedback, complaints and information supplied when you exercise a data-protection right.
Information collected when you use the website
- Basic technical and security information that may be recorded by our hosting provider, such as IP address, browser, device, requested page, time and referring page.
- If you accept analytics, Google Analytics information such as pages viewed, approximate location, device and browser information, session statistics and interactions.
- Your cookie preference, stored locally in your browser.
We do not use the website to make solely automated decisions about you or to create advertising profiles.
3. Why we use information and our lawful bases
| Purpose | Typical information | Lawful basis |
|---|---|---|
| Responding to enquiries and discussing requirements | Contact details and enquiry content | Legitimate interests in operating and developing our business; steps requested before a contract |
| Preparing proposals and providing contracted products or services | Business contact, delivery, operational and payment information | Performance of a contract or steps before a contract; legitimate interests where the contact represents an organisation |
| Managing suppliers, partners and training arrangements | Professional contact and operational information | Contract; legitimate interests in managing reliable business relationships |
| Accounting, taxation and legal compliance | Transaction, invoice and correspondence records | Legal obligation; legitimate interests in protecting legal rights |
| Security, fraud prevention and service resilience | Technical logs and relevant correspondence | Legitimate interests in protecting the website, systems and users; legal obligation where applicable |
| Google Analytics | Online identifiers and website-use information | Consent. Analytics is not loaded unless you accept it |
| Handling complaints, claims and disputes | Correspondence, contract and evidence records | Legitimate interests in resolving issues and establishing, exercising or defending legal claims |
Where we rely on legitimate interests, we consider the purpose, necessity and effect on individuals. You may object to processing based on legitimate interests; see section 9.
4. Contact-form processing
Our enquiry form is processed by Formspree on our behalf and delivered to our business email service. Formspree may process the form content, IP address, browser information and submission time to deliver the message and prevent abuse. Form submissions must not contain sensitive personal information.
Submitting an enquiry does not enrol you in marketing. If we later introduce optional marketing, we will provide a separate choice and an unsubscribe method.
5. Who receives information
We disclose personal information only where needed and subject to appropriate arrangements. Recipients may include:
- website hosting, domain, security and technical-support providers;
- Formspree, which processes website enquiry submissions;
- Microsoft, which provides our business email and productivity services;
- Google, but only where you accept Google Analytics;
- professional advisers, insurers, auditors, banks and payment providers;
- manufacturers, authorised resellers, logistics providers, instructors or training partners where needed to fulfil an agreed request;
- courts, regulators, law-enforcement bodies or public authorities where disclosure is required or legally permitted; and
- a buyer, investor or adviser involved in a genuine business reorganisation, subject to confidentiality and lawful processing.
We do not sell personal information.
6. International transfers
Some providers may process information outside the United Kingdom. Formspree states that its service is hosted in the United States and that it relies on Standard Contractual Clauses as a processor. Microsoft and Google may also use international infrastructure.
Where UK personal information is transferred internationally, we require an applicable safeguard such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to approved Standard Contractual Clauses, together with any necessary transfer-risk assessment. Contact us if you would like more information about the safeguard relevant to a particular transfer.
7. How long we keep information
| Record | Typical retention |
|---|---|
| Enquiries that do not become a client relationship | Up to 24 months after the last meaningful contact |
| Client, proposal, project and contract records | Usually 6 years after completion or termination, longer only where a dispute, insurance requirement or legal obligation justifies it |
| Invoices and accounting records | At least 6 years from the end of the relevant financial year, or longer if required by law |
| Supplier and partner relationship records | For the relationship and normally up to 6 years afterwards |
| Website security logs | For the period reasonably required for security, fault investigation and legal compliance, normally no longer than 12 months |
| Google Analytics event data | To be configured for a maximum of 14 months when Analytics is enabled; aggregate reports may remain but should not identify an individual |
| Cookie choice | 6 months, then the website asks again |
We may delete information earlier where it is no longer needed. We may retain a limited record for longer where required to meet a legal obligation or protect legal rights.
8. Security
We use proportionate technical and organisational measures designed to protect personal information. These include access controls, secure business accounts, encrypted transport where supported, supplier review and limiting access to those who need it. No internet transmission or storage system can be guaranteed completely secure.
9. Your rights
Depending on the circumstances, you may have the right to:
- be informed about processing;
- request access to your personal information;
- ask us to correct inaccurate or incomplete information;
- ask for erasure or restriction;
- object to processing based on legitimate interests;
- receive certain information in a portable form;
- withdraw consent at any time, without affecting earlier lawful processing; and
- complain to the Information Commissioner’s Office.
These rights are not absolute and exemptions may apply. To exercise a right, email hello@allied-response.com. We may need information to verify your identity and understand your request.
You can complain to the ICO at ico.org.uk/make-a-complaint. We would appreciate the opportunity to address your concern first.
10. Changes to this notice
We will update this notice when our processing or the law changes. The date at the top shows the latest version. Material changes will be highlighted where appropriate.