Website Privacy & GDPR Policy
(for Winterbothams Limited)

Company Name: Winterbothams Limited

Winterbothams Limited (“we”, “us”, “our”) provides marine surveying, valuation, consultancy, and related professional services. We are the data controller for personal data collected through this website.

Contact:
Data Protection Lead: Sarah Ellyatt
Email: surveyors@winterbothams.co.uk
Address: 36 Stephenson Road, South Hampshire Industrial Estate, Southampton, SO40 3SA
Review Date: Annual

1. What Personal Data We Collect Through This Website

We collect only the information necessary to respond to enquiries or provide services. This may include:

  • Name, email address, phone number
  • Company or vessel details provided in enquiry forms
  • Any documents voluntarily uploaded (e.g., ownership proof, technical details)
  • IP address, browser type, and essential cookie data
  • Analytics data (only if you consent)

2. How We Use Your Data

We use website‑collected data to:

  • Respond to enquiries
  • Provide quotations
  • Arrange surveys or consultancy work
  • Improve website performance
  • Maintain security and prevent misuse
  • Send marketing communications only if you opt in

3. Lawful Bases for Processing

Depending on the interaction, we rely on:

  • Contractual necessity – responding to enquiries, preparing quotations
  • Legitimate interests – website security, operational analytics
  • Legal obligation – compliance with tax, insurance, or regulatory requirements
  • Consent – marketing emails, analytics cookies, optional uploads

4. How Long We Keep Your Data

We retain website enquiry data only as long as necessary for:

  • Responding to your enquiry
  • Providing services
  • Meeting legal or regulatory obligations

5. Sharing Your Data

We do not sell your data.

We may share it with:

  • IT and hosting providers
  • Email service providers
  • Professional partners (e.g., brokers, insurers, solicitors) only if relevant to your enquiry

6. Your Rights

You have the right to:

  • Access your data
  • Request correction
  • Request deletion (where legally permissible)
  • Object or restrict processing
  • Data portability
  • Withdraw consent at any time

7. Children’s Data

We do not intentionally collect children’s data.AI tools may be used for:

8. Data Security Measures

Given the sensitivity of survey reports and legal documentation, we maintain:

  • Secure storage
  • Secure transfer of reports
  • Secure disposal of paper notes, photographs, and media

9. Data Breach Procedure

If a breach occurs, we will:

  • Assess severity
  • Notify affected individuals and the ICO where required
  • Document the incident and corrective actions

10. Complaints

If you have concerns, contact our Data Protection Lead.
You may also escalate to the Information Commissioner’s Office (ICO).