Privacy policy

Last updated: 13 November 2026.

This policy explains how ETM Consultancy, trading as ETM Safety Docs ("we", "us"), uses personal data. We are the data controller for enquiries and client contact details. The best way to contact us is through the contact form on this site.

What we collect

  • Enquiries: name, company, email, phone, role and your message, when you use our contact form or email us.
  • Notify-me requests: your name and email, if you ask to be told when a product such as the toolbox talks pack is available.
  • Documents for review: RAMS and supporting documents you send us. These can contain personal data about operatives, such as names and card numbers.
  • Website: our host (Cloudflare) keeps standard server logs, such as IP address and browser type. This site does not use analytics or advertising cookies.

Why we use it, and our lawful basis

  • To reply to enquiries and provide the service (contract, or steps before entering a contract).
  • To send a one-off product availability note if you asked us to (consent, which you can withdraw at any time).
  • To keep business records, such as invoices (legal obligation).
  • To run and secure the website (legitimate interests).

Documents you send for review

For documents you send us, we act as your processor where they contain personal data. We use them only to carry out the review, and we delete them after a retention period agreed with you in writing when we accept the work. Please remove personal data that isn't needed for the review, such as home addresses. We can sign a data processing agreement on request.

Who we share it with

We share data only with service providers that help us run the business, currently website hosting and form storage (Cloudflare). If we use email, secure file storage or AI tools to help prepare a review, we will confirm those providers, and how they handle your documents, before a paid engagement. Some providers may process data outside the UK under appropriate safeguards.

How long we keep it

Enquiries: up to 2 years. Notify-me requests: until we have told you the product is available, or you ask us to delete your details, whichever is sooner. Client records and invoices: 6 years. Review documents: see above.

Your rights

You can ask for access to, correction or deletion of your data, or object to how we use it. Use the contact form on this site. You can also complain to the Information Commissioner's Office at ico.org.uk.