Competency. Integrity. Value.

Privacy Policy

Last updated: February 2026

Introduction

NPG Fire Safety Ltd (“NPG Fire Safety”, “we”, “us”, “our”) is committed to protecting and

respecting personal data.

This Privacy Notice explains how personal data is collected, used and protected when

individuals:

  • engage our services;
  • contact us;
  • visit our website; or
  • interact with us in the course of fire safety consultancy, maintenance, installation or training services.

Our services are primarily supplied to business customers and organisations operating in the course of business.

NPG Fire Safety Ltd is the data controller for the purposes of the UK General Data

Protection Regulation (“UK GDPR”).

Contact Details

For any information regarding this Privacy Notice or personal data processing, please contact:

Name: Mica Cottam

Address: Unit 8, Clawthorpe Hall Business Centre, Burton in Kendal, Cumbria, LA6 1NU

Telephone: 0800 043 1203

Email: office@NPGFireSafety.co.uk

Website: https://npgfiresafety.co.uk/

Registered Office: Unit 8, Clawthorpe Hall Business Centre, Burton in Kendal, Cumbria, LA6 1NU

Company Registration Number: 13228800

VAT Registration Number: 390484967

Personal Data We Collect

We may collect and process:

  • names and job titles;
  • business contact details;
  • email addresses and telephone numbers;
  • billing and payment information;
  • site contact information;
  • correspondence records;
  • training attendance records;
  • photographs taken for reporting or compliance purposes; and
  • website usage and technical data, including IP addresses, browser type, device information and website interaction data.

We do not intentionally collect special category personal data.

How We Collect Data

Data may be obtained through:

  • enquiries and quotations;
  • service contracts;
  • site visits and inspections;
  • training bookings;
  • website contact forms;
  • cookies, analytics tools and server logs;
  • emails and telephone communications; and
  • accreditation or audit processes.

Lawful Basis for Processing

We process personal data under one or more of the following lawful bases:

  • Contractual necessity — delivering agreed services;
  • Pre-contractual steps — responding to enquiries, quotations and requested information prior to engagement;
  • Legal obligation — compliance with fire safety and regulatory duties;
  • Legitimate interests — operating, administering and improving our services and business operations;
  • Consent — where required for marketing communications.

Existing customers may receive service-related communications under the “soft opt-in” provisions of the Privacy and Electronic Communications Regulations (PECR). Individuals may opt out at any time.

How We Use Personal Data

Personal data may be used to:

  • provide fire safety services;
  • manage contracts and quotations;
  • issue reports and certification;
  • arrange site attendance;
  • maintain service records;
  • comply with accreditation schemes;
  • respond to enquiries;
  • improve services and internal processes; and
  • administer website functionality and analytics.

Sharing of Data

We may share data where reasonably necessary with:

  • employees and approved subcontractors;
  • accreditation bodies, including BAFE, NSI and certification auditors;
  • professional advisers and insurers;
  • software providers and cloud-based operational systems used for scheduling, reporting, certification, maintenance management, CRM and accounting functions; and enforcement or regulatory authorities where legally required.

All subcontractors and service providers processing data on behalf of NPG Fire Safety Ltd are required to process personal data in accordance with applicable data protection laws and appropriate confidentiality obligations.

We do not sell personal data.

International Data Transfers

Where personal data is processed using cloud or software providers operating internationally, appropriate safeguards are implemented in accordance with UK GDPR requirements.

Photographs and Site Records

Photographs may be taken during site visits to support:

  • fire risk assessment findings;
  • maintenance records;
  • compliance reporting; and
  • accreditation audits.

Images are limited to what is reasonably necessary for professional documentation and are not ordinarily intended to identify individuals unless required for safety, evidential or compliance purposes.

Data Retention

Personal data is retained only as long as necessary, including:

  • the duration of contractual relationships;
  • statutory limitation periods;
  • insurance and professional liability requirements (which may extend up to twelve (12) years or longer where legally required);
  • regulatory or accreditation obligations; and• where reasonably necessary for the establishment, exercise or defence of legal claims.

Records relating to fire safety compliance and professional advice may be retained for extended periods where required for insurance, legal defence or regulatory purposes.

Data Security

We implement appropriate technical and organisational measures to protect personal data against:

  • unauthorised access;
  • accidental loss;
  • alteration; or
  • unauthorised disclosure.

Your Rights

Individuals may request:

  • access to personal data;
  • correction of inaccurate data;
  • erasure where appropriate;
  • restriction of processing;
  • data portability; and objection to processing.

Requests should be made using the contact details above.

Complaints

If concerns cannot be resolved directly, individuals have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Information Commissioner’s Office

Website: www.ico.org.uk

Telephone: 0303 123 1113

Changes to this Notice

This Privacy Notice may be updated periodically. The latest version will always be available on our website