Privacy Policy

Privacy & Cookie Policy – SBL Support Hub

SBL Support Hub (“we”, “us”, “our”) is operated by Limbrick Consultancy LLP, which acts as the data controller for personal data processed via this website and service. We are committed to protecting your privacy and being transparent about how we use your information.

Last updated: 1 September 2025

Who we are

Data Controller: Limbrick Consultancy LLP
Website: https://www.limbrickconsultancy.com/
Address: 14 Connaught Avenue, Kidderminster, Worcestershire DY11 6LS

What personal data we collect

• Contact details (e.g. name, email address, phone number).
• Organisation details (e.g. school/MAT/setting, role/job title).
• Enquiry content – information you choose to share so we can connect you with the right support.
• Technical data such as IP address, device and browser type, pages visited, and timestamps (see Cookies & Analytics below).

How we use your information

• To respond to your enquiry and provide the SBL Support Hub service.
• To connect you with the most appropriate advocate or trusted professional who can provide support.
• To manage and keep records of the support we provide.
• To operate, secure and improve our website and services (including usage analysis where you have consented to analytics cookies).
• To meet legal, regulatory and accounting obligations.

Who we share your information with

We may share your information with:

• Advocates and trusted professionals (carefully selected individuals or organisations) where, in our judgement, they are best placed to offer support for your specific enquiry.
• Service providers who supply IT, hosting, email, analytics, and administrative services under contract (as data processors).
• Professional advisers (legal, audit, accounting) where necessary; and with regulators or law enforcement if required by law.

We do not sell your personal data to third parties for their own marketing.

Legal bases for processing

• Legitimate interests – responding to enquiries, triaging and connecting you with appropriate support, and running and improving our services in ways you would reasonably expect.
• Consent – for non-essential cookies/analytics and for any optional information you choose to provide beyond what’s needed to handle your enquiry. You can withdraw consent at any time.
• Legal obligation – where we must retain or disclose information to comply with the law.
• Contract – if we enter into an agreement to provide services directly to you/your organisation.

International transfers

Some suppliers (e.g. Google Analytics) may process data outside the UK/EEA. Where this occurs, we rely on appropriate safeguards such as the UK Addendum to the EU Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA), together with risk assessments as required.

How long we keep your data

We keep personal data only for as long as necessary for the purposes set out above, and to meet legal/accounting requirements. Enquiry records are typically retained for up to 24 months from the date of last activity unless there is an ongoing support relationship or legal requirement to keep them longer. We periodically review the data we hold and securely delete what is no longer needed.

Cookies & Analytics

Cookies are small text files placed on your device. We use essential cookies to make the site work, and (with your consent) analytics cookies to help us understand how the site is used so we can improve it.

When you first visit, our banner lets you accept or reject non-essential (analytics) cookies. Analytics cookies are not set unless you accept them. You can change your choice at any time by clearing cookies in your browser or revisiting your cookie preferences if your browser re-shows the banner.

Essential cookies (always on)

• cookieconsent_status (first-party) – remembers your cookie choice; typically stored for up to 12 months.
• Other strictly necessary cookies used by our CMS/hosting to deliver pages securely and reliably (session-based or short-lived).

Analytics cookies (only if you accept)

We use Google Analytics to measure website usage (e.g. pages visited, time on page, links clicked, device/browser type, broad location from IP). We configure Analytics to enhance privacy (e.g. IP anonymisation). Google may process this information on our behalf and may store it on servers outside the UK/EEA with appropriate transfer safeguards. For more on Google’s approach to privacy, see Google’s own policies.

• _ga (first-party, Google Analytics) – distinguishes users; typical lifespan up to 2 years.
• _ga_ (first-party, Google Analytics) – session state; typical lifespan up to 2 years.
• _gid (first-party, Google Analytics) – distinguishes users; typical lifespan 24 hours.
• _gat (first-party, Google Analytics) – request throttling; typical lifespan 1 minute.

Note: Cookie names and lifespans can change as Google updates its technology.

You can also opt out of Google Analytics by installing Google’s browser add-on: https://tools.google.com/dlpage/gaoptout.

How to manage cookies

• Use the banner on first visit to accept or reject analytics cookies.
• Clear cookies in your browser to reset your choice and see the banner again.
• Most browsers let you block or delete cookies via settings (see the help pages for Chrome, Edge, Safari or Firefox).

Your rights

You have rights under UK data protection law, including to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data where it is no longer needed or you withdraw consent (where consent was the basis).
• Restrict or object to processing in certain circumstances, including where we rely on legitimate interests.
• Data portability for information you provided to us, where our processing is based on consent or contract and done by automated means.
• Withdraw consent at any time for activities that rely on consent (e.g. analytics cookies).

To exercise your rights, email [email address]. We may need to verify your identity before acting on your request.

Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. While no system can be 100% secure, we continually review our controls and suppliers.

Children

This service is aimed at adult professionals. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

Complaints

If you have concerns about how we handle your data, please contact us first at [email address] and we will try to resolve them. You also have the right to complain to the UK Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint/.

Changes to this policy

We may update this policy from time to time. The latest version will always be available at [URL of this page]. Significant changes will be highlighted on the website.