Shine Business Management Limited Last updated: July 2026

Shine Business Management Limited (“we”, “us”, “our”) is a company registered in England and Wales. We operate the website at www.shinebm.co.uk.

For the purposes of UK data protection law, we are the data controller responsible for your personal data.

Contact details: Shine Business Management Limited 8 Kingsbrooke Drive, Elland, UK Email: richard@shinebm.co.uk Tel: 07977 418 435

If you have any questions about this policy or how we handle your data, please contact us using the details above.

We may collect the following categories of personal data:

· Contact and enquiry data — your name, email address, telephone number, and the content of any message you submit via our contact form.

· Technical and usage data — your IP address, browser type and version, operating system, referring URLs, pages visited, and time spent on our website. This data is collected automatically through analytics tools.

· Communications data — records of any correspondence between us, including emails and telephone calls.

We do not collect sensitive personal data (special category data) through this website.

We collect personal data in the following ways:

· Directly from you, when you complete and submit our contact form or send us an email or telephone enquiry.

· Automatically, through cookies and similar tracking technologies when you browse our website. See Section 8 (Cookies) for more detail.

· Via third-party services embedded in our website, including Google reCAPTCHA and Google Maps (see Section 6).

We use your personal data for the following purposes:

Purpose

Legal Basis

To respond to your enquiry or message

Legitimate interests (responding to a request you   have made)

To provide our consultancy or advisory services to   you

Performance of a contract,   or pre-contractual steps

To manage our business relationship with you

Legitimate interests

To improve our website and understand how visitors   use it

Legitimate interests

To comply with legal or regulatory obligations

Legal obligation

To detect and prevent fraud or misuse of our   website

Legitimate interests

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another reason compatible with the original purpose.

We retain personal data only for as long as necessary for the purposes described in this policy:

· Enquiry and contact data — up to 3 years from the date of last contact, or longer where required for an ongoing business relationship or legal obligation.

· Analytics and website usage data — in accordance with the retention settings of the analytics tool in use (typically up to 26 months).

· Business correspondence — up to 6 years from the end of the relevant engagement, in line with standard limitation periods under English law.

When data is no longer required, we delete or anonymise it securely.

We do not sell your personal data. We may share your data in the following limited circumstances:

Google (third-party service providers) Our website uses Google services that may process your personal data:

· Google reCAPTCHA — used on our contact form to protect against spam and abuse. Data is processed by Google LLC in accordance with Google’s Privacy Policy.

· Google Maps — embedded on our contact page. Google may collect data when you interact with the map, subject to Google’s Privacy Policy.

· Analytics — we use an analytics tool to understand website traffic. Usage data is aggregated and anonymised where possible.

GoDaddy Our website is hosted on the GoDaddy platform, which may process technical data as part of hosting services.

Legal and regulatory authorities We may disclose personal data to law enforcement, regulators, or courts where required by law or to protect our legal rights.

We require all third parties to respect the security of your personal data and to treat it in accordance with applicable law.

Some of our third-party service providers (including Google) are based outside the UK and process data internationally. Where data is transferred outside the UK, we ensure that appropriate safeguards are in place in accordance with UK GDPR requirements, such as Standard Contractual Clauses or adequacy decisions.

Our website uses cookies. A cookie is a small text file placed on your device when you visit a website.

Cookies we use:

Cookie   Type

Purpose

Strictly   necessary

Required   for the website to function (e.g. security, form submissions)

Analytics/performance

Help us understand how visitors interact with   our website; data is aggregated

When you first visit our website, you will be shown a cookie banner. You may accept or decline non-essential cookies at that point. You can also control cookies through your browser settings; however, disabling certain cookies may affect the functionality of the website.

For more information about cookies generally, visit www.allaboutcookies.org.

Under UK GDPR, you have the following rights in relation to your personal data:

· Right of access — to request a copy of the personal data we hold about you.

· Right to rectification — to ask us to correct inaccurate or incomplete data.

· Right to erasure — to request deletion of your personal data in certain circumstances.

· Right to restriction — to ask us to limit how we process your data in certain circumstances.

· Right to object — to object to processing based on our legitimate interests.

· Right to data portability — to receive your data in a structured, machine-readable format in certain circumstances.

· Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at richard@shinebm.co.uk. We will respond within one calendar month of receiving your request. We may need to verify your identity before processing your request.

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:

Information Commissioner’s OfficeWycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Tel: 0303 123 1113 Website: www.ico.org.uk

We would, however, appreciate the opportunity to address your concerns directly before you approach the ICO, so please contact us in the first instance.

We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. The “Last updated” date at the top of this page will always show when the policy was last revised. We encourage you to review this page periodically.

Our website may contain links to third-party websites (including LinkedIn). This privacy policy applies only to www.shinebm.co.uk. We are not responsible for the privacy practices of other websites and encourage you to read their privacy policies before providing any personal data.

Shine Business Management Limited is registered in England and Wales with company registration number 15375308 and address 8 Kingsbrooke Drive, Elland, HX5 0DS.