Last updated: October 2026
This notice explains what personal information 3Sixty Health & Safety Ltd (“3Sixty”, “we”) collects through this website, how we use it, and your rights. We keep it short and in plain English. If anything is unclear, please get in touch.
1. Who we are
3Sixty Health & Safety Ltd is the controller of the personal information described in this notice. We are a company registered in England and Wales, company number 09171942.
Suite 21, Enterprise House, Telford Road, Bicester, Oxfordshire OX26 4LD
Email: info@3sixtyhealthandsafety.com
Phone: 01869 222 144
2. What we collect and why
When you contact us
If you use one of our forms (for example Contact, Free Health and Safety Review or Ask a Health & Safety Expert), or email or phone us, we collect the details you give us. This is usually your name, email address, phone number, company and your message. We use them to reply to you and, if you ask, to provide a quote or our services.
Lawful basis: our legitimate interests in responding to enquiries, or taking steps at your request before entering into a contract.
When you ask for a quote or become a client
If you use our quote and new client form, we collect the details you give us about you and your business, and any photos or documents you upload. We use them to understand your needs, prepare a quote and, if you go ahead, set up and deliver our services. We send you a copy of what you submitted. Please don’t upload photos that show people unless you need to.
Lawful basis: taking steps at your request before entering into a contract, and our legitimate interests in responding to enquiries.
When you download your DSE self-assessment
To download your completed DSE workstation self-assessment as a PDF, we ask for your name and email address. We use them to follow up on your assessment if it may help, for example to offer advice on the issues it raised. We won’t share your details or add you to a mailing list, and you can ask us not to contact you at any time.
Lawful basis: our legitimate interests in following up enquiries about our services.
When you download our COSHH assessments and other templates
To download our free COSHH assessments and some of our other templates in Word, we ask for your name and email address and note which document you downloaded. We use them to see who is using them, to tell you if one is updated and, if it may help, to follow up about your needs. If you tick the box to receive updates, we will also send you occasional health and safety news, and you can unsubscribe at any time. We won’t share your details.
Lawful basis: our legitimate interests in following up downloads of our free resources, and your consent for health and safety updates.
Our free tools
Your answers to our health and safety self-check and DSE self-assessment stay on your own device. They are not sent to us or stored on our website. Any PDF report is created on your device. Downloading most of our templates doesn’t require any personal information.
Cookies and website analytics
We use essential cookies to make the website work. With your permission, we also use Google Analytics to understand how visitors use the site, such as which pages are visited, so we can improve it. Google Analytics only runs if you accept it in our cookie banner. You can change your choice at any time using the “Manage consent” tab. See our Cookie Policy for details.
Lawful basis: your consent.
Clients
If you become a client, we use your information to deliver the services we’ve agreed and to keep the records we need. More detail is given in our terms of engagement.
Lawful basis: performing our contract with you, and meeting our legal obligations.
3. Who we share it with
We don’t sell your personal information. We only share it where we need to, with:
- service providers who help us run our business and website, such as our website host (WP Engine), our email provider (Microsoft 365) and other IT providers, and Google (for analytics, if you consent)
- associate consultants who work with us on client projects, where they need the information to deliver the work
- professional advisers, regulators, insurers or law enforcement where the law requires it or to protect our legal rights
Our service providers may only use your information on our instructions.
4. Transfers outside the UK
Some of our service providers, including Google, Microsoft and our website host, may process information outside the UK, for example in the European Economic Area or the United States. Where they do, we make sure it is protected, for example through UK adequacy regulations (including the UK–US Data Bridge) or approved contract terms such as the UK International Data Transfer Addendum.
5. How long we keep it
- Enquiries, DSE self-assessment and template download sign-ups: up to 2 years from our last contact, unless you become a client.
- Client records: for the length of our contract and up to 6 years afterwards, to meet legal, insurance and accounting requirements.
- Analytics data: for the period set in our Google Analytics account, after which Google deletes it.
6. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you
- ask us to correct information that is wrong or incomplete
- ask us to delete your information
- ask us to restrict how we use your information
- object to us using your information, including for any follow-up contact
- ask for your information in a portable format
- withdraw your consent at any time, where we rely on consent
To use any of these rights, email info@3sixtyhealthandsafety.com. There’s normally no charge, and we’ll respond within one month.
7. Keeping your information safe
We use appropriate technical and organisational measures to protect your information, including secure hosting, encrypted connections and restricted access to our systems.
8. Complaints
If you’re unhappy with how we’ve handled your information, please contact us first at info@3sixtyhealthandsafety.com. We’ll acknowledge your complaint within 30 days and let you know the outcome.
You can also complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113.
9. Changes to this notice
We may update this notice from time to time. The latest version will always be on this page, with the date it was last updated at the top.
