Privacy Policy

1. Who We Are

DSRVM Limited ("DSRVM", "we", "us", "our") is the data controller responsible for your personal data. We are a company registered in England and Wales.

• Company Name: DSRVM Limited
• Registered Address: Southampton, United Kingdom
• Company Registration Number: [Registration Number]
• Email: [email protected]
• Phone: +44 7780 315 635
• ICO Registration Number: [ICO Number — register at ico.org.uk]

2. What Personal Data We Collect

2.1 Information You Provide to Us

• Contact information: Name, email address, phone number, company name
• Enquiry details: Content of messages sent via our contact form or email
• Consultation information: Information shared during discovery calls
• Marketing preferences: Your consent choices regarding marketing communications

2.2 Information We Collect Automatically

• Technical data: IP address, browser type, operating system, referring URL, pages visited, time on site
• Cookies and similar technologies: See Section 8 (Cookie Policy) below
• Analytics data: Aggregated usage statistics collected via Statcounter analytics

2.3 Special Category Data

We do not intentionally collect special category personal data through our website. Any special category data processed in connection with our HR consulting services is governed by a separate Data Processing Agreement.

3. Legal Bases for Processing

We process your personal data on the following legal bases under UK GDPR Article 6:

• Contractual necessity (Art. 6(1)(b)): Processing necessary to fulfil a contract or pre-contractual steps at your request
• Legitimate interests (Art. 6(1)(f)): Where we have a legitimate business interest not overridden by your rights — for example, improving our website or communicating with prospective clients
• Consent (Art. 6(1)(a)): Where you have given explicit consent — for example, marketing communications or analytics cookies. You may withdraw consent at any time
• Legal obligation (Art. 6(1)(c)): Where required to comply with a legal obligation (e.g., HMRC requirements)

4. How We Use Your Personal Data

• To respond to your enquiries and provide information about our services
• To deliver IT consulting, HR, recruitment, and project management services
• To manage our business relationship with you and our clients
• To send marketing communications (only where consented or legitimate interest applies)
• To improve and optimise our website and service offering
• To comply with legal and regulatory obligations
• To prevent fraud and ensure security of our systems

5. How Long We Keep Your Data

• Enquiry and contact data: 3 years from last contact, unless you become a client
• Client data: 7 years from the end of the engagement (legal compliance)
• Marketing consent records: Until withdrawal of consent, plus 1 year
• Website analytics data: 26 months (aggregate, anonymised)

6. Who We Share Your Data With

We do not sell or rent your personal data. We may share with:

• Service providers: IT infrastructure, email, CRM, and analytics providers acting as processors under a DPA
• Professional advisers: Lawyers, accountants, insurers bound by confidentiality
• Regulatory authorities: HMRC, ICO, or law enforcement where required by law

Where we transfer personal data outside the UK, we ensure adequate safeguards in accordance with UK GDPR Articles 45–49.

7. Your Rights Under UK GDPR

• Right of access (Art. 15): Request a copy of personal data we hold about you
• Right to rectification (Art. 16): Request correction of inaccurate data
• Right to erasure (Art. 17): Request deletion in certain circumstances
• Right to restrict processing (Art. 18): Request limits on how we use your data
• Right to data portability (Art. 20): Receive your data in a machine-readable format
• Right to object (Art. 21): Object to processing based on legitimate interests or direct marketing
• Right to withdraw consent: Withdraw at any time without affecting prior processing

To exercise any right, email [email protected]. We will respond within one calendar month. You may also lodge a complaint with the ICO at ico.org.uk or call 0303 123 1113.

8. Cookies & Similar Technologies

8.1 Strictly Necessary Cookies

Essential for the website to function. Cannot be disabled and do not require consent under PECR. These include session and security cookies.

8.2 Analytics Cookies

We use Statcounter to collect anonymised data about visitor behaviour. These are set only with your consent.

Provider: Statcounter  |  Purpose: Web analytics  |  Duration: Session / 1 year  |  Basis: Consent

8.3 Managing Preferences

You may change cookie preferences using the consent banner displayed on your first visit, or via your browser settings. Blocking certain cookies may affect website functionality.

9. Security

We implement appropriate technical and organisational security measures to protect personal data. Our website operates over HTTPS. Access to personal data is restricted to authorised personnel on a need-to-know basis.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page. The "Last Updated" date at the top reflects the most recent revision.

11. Contact Us

• Email: [email protected]
• Post: DSRVM Limited, Southampton, United Kingdom
• Phone: +44 7780 315 635