Privacy Policy

1. Who we are

Calmbreeze Ltd (“Calmbreeze”, “we”, “us”) is the data controller for this website. Our registered address is 14 Hyde Lodge, 11 Pennyroyal Drive, West Drayton, UB7 9FF, United Kingdom. You can reach us at Hello@calmbreeze.co.uk or 01895 919 333.

2. What we collect

• Name, email, phone, company and message via the contact form.
• The pain points, sector and contact details you enter into the Compliance Health Check.
• Email address if you subscribe to our monthly compliance digest.
• Basic technical information (browser type, device, IP address) needed to keep the site secure.

3. Why we collect it

We only use your information to respond to your enquiry, deliver the service you have requested, send you the newsletter you have subscribed to, and meet our legal obligations.

4. Lawful basis

We process your data on the basis of (a) your consent (newsletter, optional cookies), (b) the performance of a contract (responding to a quote request), and (c) our legitimate interest in running and securing the website.

5. Who we share data with

We use a small number of trusted processors to operate the site:

• Resend — transactional email delivery.
• MongoDB Atlas — encrypted database hosting (EU region).
• Emergent — application hosting platform.

We do not sell your data and we never share it with marketing networks.

6. How long we keep it

Contact and booking submissions are kept for up to 3 years. Newsletter subscriptions are kept until you unsubscribe. Health Check responses are kept for 12 months.

7. Your rights

Under UK GDPR you have the right to access, correct, delete, restrict or object to our processing of your personal data, and to data portability. To exercise any of these rights, email Hello@calmbreeze.co.uk. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk).

8. Cookies

See our Cookies Policy for a full breakdown of the cookies we use and how to manage them.

9. Security

Submissions are sent over HTTPS, stored encrypted at rest, and we apply strict security headers (HSTS, X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Permissions-Policy) to protect this site.

10. Changes

We may update this policy from time to time. The most recent version will always live at calmbreeze.co.uk/privacy.