Privacy Policy

Who We Are

Surab Ltd is the data controller responsible for the personal data collected through this website.

Contact details:
Email: info@surab.co.uk
Address: Unit C, Old Rifle Range Farm, Risborough Road, Aylesbury, Buckinghamshire HP17 0XS

Data Protection Officer (DPO): Graham Cooke
Contact email: info@surab.co.uk

What Data We Collect

We collect the following categories of personal data when you use our website or contact us:

Contact and enquiry data: information you provide when you contact us through our enquiry form, by email, or by telephone (such as your name, email address, phone number, and the content of your message).

Marketing email data: your email address and your marketing preferences where you choose to receive marketing emails from us, and records of your subscription and unsubscribe status.

Cookie consent preferences: your choices about cookies and similar technologies, recorded through our consent management system (Trustwards).

Device and technical data: information sent by your device when you access the website, such as IP address, browser type, device information, and technical logs necessary to deliver the website and keep it secure.

Usage data via analytics (with your consent): information about how you use the website collected through analytics technologies that require consent, which may include pages viewed, interactions, and approximate location derived from IP address.

Sources of data:

Directly from you when you submit an enquiry, contact us by email or telephone, or subscribe to marketing emails.

Automatically from your device and browser when you access the website (for example, IP address and technical logs).

From cookies and similar technologies, where non-essential cookies are used only after you have given your consent.

Providing contact and enquiry data is optional, but if you do not provide it, we may not be able to respond to your enquiry. Providing cookie choices is optional, but essential cookies are necessary for the website to function and for us to record your cookie preferences.

How We Use Your Data

We use your personal data for the purposes below. For each purpose, we rely on the legal basis stated.

Responding to your enquiries and communicating with you about our services (legal basis: contract).

Sending you marketing emails where you have chosen to receive them (legal basis: consent). You can unsubscribe at any time using the unsubscribe option in the email or by contacting us.

Measuring and understanding how visitors use our website using analytics technologies that require consent (legal basis: consent).

Displaying personalised advertising and using advertising network technologies that require consent (legal basis: consent).

Protecting the website and our systems, including monitoring for security threats and preventing misuse (legal basis: legitimate interests).

Producing aggregated statistics from technical information that is necessary to operate and secure the website, where this does not involve cookies or other technologies that require consent (legal basis: legitimate interests).

Who We Share Your Data With

We share personal data only where necessary for the purposes described in this policy.

We use our own consent management system (Trustwards) to record and manage your cookie preferences. This data is processed internally and not shared with third parties.

We may share data with the following categories of recipients, depending on your choices and how you interact with us:

Analytics services: where you consent to analytics, these services help us understand website usage and improve the website. They process data in accordance with their own privacy information.

Advertising networks: where you consent to personalised advertising, these services help deliver and measure advertising. They process data in accordance with their own privacy information.

Email service providers: where you subscribe to marketing emails, these providers help us send emails and manage subscription preferences. They process data in accordance with their own privacy information.

International Data Transfers

Based on the providers identified for this website from our scan results, we do not have evidence of transfers of personal data to service providers located outside the EU/EEA for the operation of this website. Our consent management system (Trustwards) is based in Spain (EU), so consent data is not transferred internationally.

If you choose to enable cookies for analytics or personalised advertising, some providers in those categories may be located outside the EU/EEA, including in the United States. Where such transfers occur, we will use an appropriate transfer mechanism, such as an adequacy decision where available, or Standard Contractual Clauses approved by the European Commission, together with additional safeguards where required.

How Long We Keep Your Data

We retain personal data only for as long as necessary to fulfil the purposes we collected it for, including satisfying legal, accounting, or reporting requirements.

Customer information may be retained for up to 6 years following the end of a working relationship in order to comply with UK tax and legal obligations.

Enquiry form submissions and general correspondence may be retained for a shorter period where no business relationship is established.

Cookie consent records: 10 years (to demonstrate compliance and address potential claims within legal limitation periods).

Security logs and technical records: 12 months.

Analytics data: until consent is withdrawn or according to the analytics tool retention settings.

Advertising/marketing tracking data: until consent is withdrawn.

Marketing email data: until consent is withdrawn or user unsubscribes.

Your Rights

If you are in the EU/EEA, the UK, Switzerland, or another jurisdiction that provides similar rights, you may have the right to:

Access your personal data.
Correct inaccurate or incomplete data.
Delete your data (the “right to be forgotten”).
Restrict how we use your data.
Receive a copy of your data in a portable format and transfer it to another provider where applicable.
Object to processing based on our legitimate interests.
Withdraw your consent at any time where we rely on consent (this will not affect processing carried out before you withdraw consent).
Not be subject to automated decision-making that produces legal effects or similarly significantly affects you.

To exercise your rights, contact us at info@surab.co.uk. We aim to respond within one month, although this may be extended where permitted if your request is complex or you make multiple requests.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Children’s Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

Data Security

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Data Breach Notification

If a personal data breach occurs that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay. Where we notify you, we will describe the nature of the breach, the likely consequences, and the measures taken or proposed to address it. We maintain procedures to detect, report, and investigate security incidents. If you suspect a security issue, please contact us at info@surab.co.uk.

How to Lodge a Complaint

You have the right to lodge a complaint with the supervisory authority in your country or region. If you are in the UK, the competent supervisory authority is the Information Commissioner’s Office. We encourage you to contact us first at info@surab.co.uk so we can try to resolve your concern promptly.

Updates to This Policy

We review and update this policy periodically. The “Last updated” date at the top of this policy shows when it was last changed. If we make significant changes, we will provide notice on our website and, where appropriate, by email. Changes take effect from the date indicated at the top of this policy. Where processing is based on consent, we will request new consent when required.

Contact Us

Email: info@surab.co.uk
Address: Unit C, Old Rifle Range Farm, Risborough Road, Aylesbury, Buckinghamshire HP17 0XS
Data Controller: Surab Ltd