Live now: Security · Training · Event Support — across Somerset & South West.
Legal / Privacy

Privacy Policy.
Grounded in the Live Site.

This policy explains what personal data Primal Group Services Ltd handles through this website, why it is used, who touches it, and the rights available to people in the UK under data-protection law.

Who we are

Primal Group Services Ltd is the controller for personal data collected through this website where we decide why and how that data is used.

Controller Primal Group Services Ltd
Company number SC886156
Contact [email protected]

What we collect

When you use the website we may receive your name, company name, email address, phone number, service enquiry details, contact preference, and any other information you include in the contact form or an email.

When you submit an electronic application we may receive applicant details such as legal name, contact details, address or postcode, role preference, availability, SIA and DBS indicators, right-to-work indicators, transport notes, experience notes, references, document availability, declaration confirmations, and any other information you choose to include.

We also receive limited technical information when your browser loads the site, such as IP address, browser type, referrer data, and server request logs handled through the website infrastructure.

How data reaches us

The live site uses a small number of third-party services that are directly tied to the real data path.

  • Cloudflare Pages Function receives website contact form submissions at /api/contact and forwards them to the Primal inbox through the configured server-side mail route.
  • Cloudflare Pages Function receives electronic application submissions at /api/application and forwards them to the Primal review group through the configured server-side mail route.
  • Configured transactional email delivery may process website form payloads when live delivery is enabled for contact or application submissions.
  • Direct email contact also reaches the Primal inbox when you choose to email us yourself.
  • Cloudflare Pages hosts and delivers the website and may process request logs and security data at the edge.
  • Local site storage remembers this browser's cookie notice choice for up to 180 days so the banner does not reappear on every page view.
  • Google Fonts serves the Barlow Condensed and Inter web fonts used by the site, which means your browser may connect to Google font infrastructure when pages load.

The public contact form and electronic application form post to site-owned routes. The application form asks applicants to confirm which evidence they can provide, but it does not upload identity, right-to-work, SIA, DBS or bank evidence through the public website. No marketing platform, ad network, remarketing tag, external form platform, or third-party analytics tracker is intentionally deployed on the site at the time of writing.

Why we use personal data

We use enquiry data to respond to requests, assess whether a brief fits the current service offer, provide quotations or follow-up information, keep a record of business communications, and protect the website and inbox against spam or abuse.

We use application data to assess whether an applicant may fit current or future Primal roles, contact the applicant, decide whether to progress them into vetting and onboarding, and record the application review process.

Lawful bases

Depending on the context, we rely on one or more of the following lawful bases under UK GDPR.

  • Pre-contract steps where you contact us to request information, pricing, or service availability.
  • Pre-contract steps where you apply to work with us and we assess whether to progress your application.
  • Legitimate interests in running the website, responding to enquiries, maintaining records, and protecting the site and business from misuse.
  • Legal obligations where we need to retain or disclose information for tax, accounting, insurance, regulatory, or legal reasons.

How long we keep it

We keep enquiry information for as long as it is needed to respond properly, manage follow-up conversations, evidence commercial discussions, and meet any legal or accounting obligations that apply to the business. We do not keep personal data longer than reasonably necessary for those purposes.

Sharing

We do not sell personal data. Information may be shared with service providers that help us run the site or process enquiries where that is necessary for delivery or compliance.

Your rights

Subject to the usual legal conditions, you may ask for access to your personal data, request correction, request erasure, object to certain processing, or ask for restrictions on use. To exercise those rights, email [email protected].

Complaints

If you believe your data has been handled unlawfully, you can raise the issue with us first and you also have the right to complain to the Information Commissioner's Office at ico.org.uk.

Special category data

Please do not send medical details, health records, safeguarding information, identity documents, right-to-work documents, bank details, or other sensitive evidence through the public contact form or public application form unless we have specifically asked for it and confirmed a secure route.

Changes to this policy

This page reflects the site configuration as reviewed on 17 June 2026 and may be updated if the website tooling, analytics setup, enquiry flow, application flow, or business operations change.