HKW Risk Management Ltd is a consultancy specialising in offering bespoke solutions to businesses needing to newly implement or improve and integrate existing quality, health, safety and environmental management systems.

HKW Risk Management is a B2B consultancy and as such only collects personal data for business purposes. We use the GDPR and ICO definition of ‘personal data’ which means any “information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier”. The categories of personal data we collect, and use are:

We collect your personal data in various ways such as meeting you at a networking event and you giving us your contact details, approaching you on Linked In or by being introduced by someone else.

HKW Risk Management has no need to collect sensitive personal data and does not collect or use such data.

Our lawful basis for processing as well as the purposes of the processing are detailed in the table below:

Purpose/activityType of dataLawful basis for processing
Providing proposals and quotes to youContact detailsContract
Carrying out work as agreed with youContact detailsContract
Applying for quotes from Certification Bodies on your behalfContact detailsContract
Contacting you with information about services HKW Risk Management can provideContact detailsLegitimate Interest - to grow our business
Introducing you to other contacts in our network whom we think you might find interesting or useful. We will ask permission from both parties before the introduction.Contact detailsLegitimate Interest - to grow our business


Individuals have the following rights:

Your RightHKW Risk Management Explanation
The right to be informedThis Privacy Policy provides information on what personal data we collect and what we do with it.
The right of accessIf you wish to access your personal data held by HKW Risk Management, please send an email to [email protected] with the title Subject Access Request.

We will respond within a month.

The response is likely to consist of emails and reports which mention you.

The right to rectificationIf you wish to rectify your personal data, please send an email to [email protected] with the title Request for Rectification.

We will respond in within a month

The right to erasureWe are unlikely to be able to delete your personal data as it is likely to be attached to a contract and work completed as part of that contract and we need to hold records of the work we have completed for business development reasons or in case of claims.

However, if you would like to be forgotten, please send an email to [email protected] with the title Forget Me.

We will respond within a month.

The right to restrict processingYou can request that we stop processing your data for a specified time period.
The right to data portabilityHKW Risk Management can provide a copy of your personal data on request, this will consist of your contact details in a spreadsheet.
The right to objectHKW Risk Management does not carry out any Direct Marketing
Rights in relation to automated decision making and profiling.HKW Risk Management does not carry out any automated decision making or profiling.


If you need any further information on the way we collect and use your personal data, or you have a complaint please contact us by email to [email protected]. You have the right to lodge a concern or complaint with the Information Commissioner’s Office via

This Privacy Policy will be reviewed and may be updated, any changes will be available on our website or will be emailed to you where appropriate.