Privacy notice

Who we are

Davidson Fire Risk Consultants Ltd (DFRC) is the data controller for the personal information described in this notice. We are registered in Scotland, company number SC898485, with our registered office at 39 Sinclair Court, Kilmarnock, KA3 7TH.

For any question about this notice or your information, email info [at] davidsonfireriskconsultants.co.uk.

What information we collect

• Enquiries: what you send us through the enquiry form or by email, such as your name, email address, organisation, town or area, type of premises and your message.
• Client work: contact details for the people we deal with, information about your premises, and photographs taken during site visits. We avoid photographing people wherever possible.
• Training: delegate names, attendance, knowledge check results and training records.
• Billing: invoicing details and payment records.

Why we use it and our lawful basis

• Replying to enquiries and preparing quotes: to take steps you have asked for before entering into a contract.
• Carrying out assessments, audits and training: to perform our contract with you.
• Keeping financial records: to meet our legal obligations, including tax and company law.
• Keeping records of our work: for our legitimate interests in running the business, showing the advice we gave, and dealing with any claims.

We do not use your information for marketing without your consent, and we never sell it.

Who we share it with

We only share your information when we need to, with:

• Service providers: companies that provide our email, file storage and accounting software, who process it on our behalf under contract.
• Professional advisers: such as our accountant or insurer, where needed.
• Authorities: where the law requires us to, for example the Scottish Fire and Rescue Service or HMRC.

Some of our service providers may store information outside the UK. Where they do, we rely on the safeguards UK data protection law requires, such as UK adequacy regulations or approved contract terms.

How long we keep it

• Enquiries that do not lead to work: up to 12 months.
• Client records, reports and training records: six years after the work is completed.
• Financial records: six years, as required for tax purposes.

This website

The site sets no cookies and uses no analytics or tracking. The enquiry form sends your details straight to our email inbox; they are not stored on the website. To stop spam, the form keeps a scrambled (hashed) record of the sending IP address for up to one hour. Like any website, our hosting provider may keep basic technical logs, such as IP addresses, for security and to keep the site running.

Your rights

Under UK data protection law you have the right to:

• Access: ask for a copy of the information we hold about you.
• Correction: ask us to correct anything that is wrong or incomplete.
• Erasure: ask us to delete your information, where we have no reason to keep it.
• Restriction and objection: ask us to limit or stop using your information in certain circumstances.
• Portability: ask for information you gave us in a format you can pass to someone else.

To use any of these rights, email info [at] davidsonfireriskconsultants.co.uk. We will reply within one month.

Complaints

If you are unhappy with how we have handled your information, please contact us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this notice

We may update this notice from time to time. This version was last updated in October 2026.