Sirocco Sustainability Consulting Limited · Last updated: 05/06/2025
1. Introduction
Sirocco Sustainability Consulting Limited (“Sirocco”, “we”, “us”, or “our”) is committed to protecting and respecting your privacy. This privacy policy explains how we collect, use, store, and share personal data when you visit our website, engage our services, or otherwise interact with us.
We are registered in England and Wales as a private limited company (incorporated 3 December 2024), with our registered office at 124 City Road, London, United Kingdom, EC1V 2NX.
We act as a data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This means we determine the purposes and means by which your personal data is processed.
2. What personal data we collect
We may collect and process the following categories of personal data:
- Identity data: your name, job title, and organisation
- Contact data: email address, telephone number, and postal address
- Technical data: IP address, browser type and version, time zone, browser plug-in types, operating system, and platform
- Usage data: information about how you use our website and services
- Communications data: content of messages and enquiries you send to us
3. How we collect your data
We collect personal data through the following means:
- Directly from you when you complete a contact form, subscribe to our mailing list, or engage our services
- Automatically via cookies and similar tracking technologies when you browse our website
- From third parties such as business networking platforms or referral partners
4. How we use your data
We use personal data only where we have a lawful basis to do so. Depending on context, our lawful basis may be:
- Contract: to perform a contract with you or take steps at your request prior to entering into one
- Legitimate interests: for our reasonable business purposes, such as improving our services and communicating with prospective clients
- Legal obligation: to comply with a legal duty
- Consent: where you have given explicit consent, for example to receive marketing communications
Specific purposes include responding to enquiries, providing consultancy services, sending service-related communications, and improving our website.
5. Cookies
Our website uses cookies to distinguish you from other users and improve your experience. We use strictly necessary cookies (required for the site to function), and, where you have consented, analytics and/or marketing cookies. You may withdraw cookie consent at any time via our cookie settings.
6. Data sharing
We do not sell your personal data. We may share it with:
- Service providers acting as processors on our behalf (e.g. website hosting, email services, CRM software)
- Professional advisers including lawyers and accountants
- Regulatory or law enforcement bodies where required by law
Any third parties we share data with are required to handle it lawfully and securely, and only for the purposes we specify.
7. International transfers
Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements, such as the use of UK International Data Transfer Agreements (IDTAs) or adequacy decisions.
8. How long we keep your data
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. [Note for legal review: insert specific retention periods relevant to the business.]
9. Your rights
Under UK GDPR, you have the following rights regarding your personal data:
- The right to access the personal data we hold about you
- The right to rectification if the data is inaccurate or incomplete
- The right to erasure (“right to be forgotten”) in certain circumstances
- The right to restrict processing in certain circumstances
- The right to data portability
- The right to object to processing based on legitimate interests
- The right to withdraw consent at any time, where consent is the lawful basis
To exercise any of these rights, please contact us using the details in section 11. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
10. Data security
We have implemented appropriate technical and organisational measures to protect personal data against accidental loss, destruction, alteration, unauthorised disclosure, or access. Access to personal data is restricted to those with a legitimate business need.
11. Contact us
For questions, requests, or complaints regarding this privacy policy or our data practices, please contact us at:
Sirocco Sustainability Consulting Limited
124 City Road
London, EC1V 2NX
United Kingdom
Email: hello@sirocco.org.uk
12. Changes to this policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. Where changes are significant, we will take reasonable steps to notify you.