Privacy Policy: Hybred Consultancy

This Privacy Policy explains when and why we collect personal information, how we use it, how we keep it secure, and your legal rights. We operate in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Hybred Events Ltd (trading as Hybred Consultancy) is a company registered in England and Wales (Company No: 07911504).

Registered Office: 15 West Street, Brighton, BN1 2RL.
Correspondence Address: 15 West Street, Brighton, BN1 2RL.
Data Controller: Hybred Consultancy acts as the Data Controller for the information you provide to us.
Contact: [email protected] | 01273 112894

2. What Personal Data We Collect & Why

We process your data under the legal bases of Contractual Necessity, Legitimate Interests, and Consent.

Type of Data	Purpose / Use	Legal Basis
Client Details (Name, address, phone, email)	To manage our database and provide requested health and safety services.	Contract & Legitimate Interests
Subscriber Details (Name, email)	To send email newsletters and updates via Mailchimp.	Consent
Payment Details (Name, address, billing info)	To process payments via PayPal.	Contract & Legitimate Interests
Training Data (Course participation info)	To deliver online training and report to partners	Contract & Legitimate Interests

Note: We never send emails asking for credit card information. Payments are handled via secure, encrypted third-party processors.

3. How We Collect Your Data

We collect information when you:

Complete an online enquiry form.
Contact us via phone or email.
Make a payment via PayPal or Stripe
Participate in our online training courses (hosted via Thinkific).
Visit our website (via Cookies and Google Analytics).

4. Third-Party Data Sharing

We do not sell your data or share it with third parties for their marketing purposes. We share data only with trusted service providers (Data Processors) necessary to run our business:

Third Party	Purpose	Data Protection Measure
Google	Analytics & Business Suite	Data Privacy Framework / SCCs
Mailchimp	Newsletter Delivery	Data Privacy Framework / SCCs
PayPal / Stripe	Payment Processing	Secure Encrypted Gateway
Thinkific	Training Platform	GDPR Compliant Agreement
Calendly	Meeting Scheduling	GDPR Compliant Agreement

5. International Data Transfers

We generally store data within the UK or the EEA. Where we use US-based services (like Google or Mailchimp), we ensure they are certified under the Data Privacy Framework or use Standard Contractual Clauses (SCCs) to ensure your data receives a level of protection equivalent to UK law.

6. Security and Retention

Security: Our website uses HTTPS encryption. While no internet transmission is 100% secure, we use strict internal procedures to prevent unauthorized access.
Retention: We typically hold client data for 5 years after your last interaction with us to meet insurance and tax requirements. We review our database annually to delete data no longer required.
Payment Info: We do not store full credit card numbers on our servers. Telephone payments are destroyed immediately after processing.

7. Cookies and Tracking

We use Google Analytics to improve user experience. This tracks non-identifiable data like browser type and location. You can opt out by disabling cookies in your browser settings.

8. Your Rights

Under the UK GDPR, you have the following rights:

Access: Request a copy of the data we hold.
Correction: Ask us to fix inaccurate info.
Erasure: Ask us to delete your data (where applicable).
Object/Restrict: Opt out of marketing or limit how we use data.
Portability: Request your data be moved to another provider.

To exercise these rights, email [email protected]. You also have the right to complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.

9. Changes to this Policy

We may update this policy to reflect changes in law or service providers.

Last Updated: 15 January 2026.