Legal
How we collect, use and look after personal information — through this website, and in the course of the work we do.
Last updated: 15 September 2026
Bluco Projects Ltd is the data controller for the information described in this notice. We inspect artificial climbing structures and carry out industrial rope access work.
Registered in England, company number 12404073. Registered office: 2 Endeavour House, Parkway Court, Long Bridge Road, Plymouth, Devon PL6 8LR.
We are registered with the Information Commissioner’s Office as a data controller, registration reference ZC246638.
If you have any question about this notice, or about how we handle your information, email info@blucoprojects.com or call +44 7901 931628.
This notice covers two things: information you give us through this website, and information we hold in the course of our work — about the people we deal with at the organisations we inspect for, the subcontractors who work with us, and anyone who appears in the records we keep of an inspection.
If you use our enquiry and booking form, we collect your name, your role, your organisation or venue and its postcode, your email address and phone number, what you are looking for and when, how you heard about us, and whatever you write in your message. We use it to reply to you and, if it leads to work, to carry out that work. The lawful basis is legitimate interests — responding to someone who has asked us to get in touch — and, where it leads to an engagement, performance of a contract.
If you download a guide, we collect your name, email address and the organisation you work for. We use it to send you the guide you asked for. The lawful basis is legitimate interests: you asked us for a document and we need somewhere to send it.
If you also tick the box asking for occasional updates, we will use your email address to send you no more than four emails a year about climbing wall inspection and compliance. The lawful basis is your consent, and you can withdraw it at any time using the unsubscribe link in any email, or by emailing us. Withdrawing it does not affect anything we sent before you did.
We do not use your information for automated decision-making or profiling, and we do not sell or share it with anyone for their own marketing.
People at the organisations we work for. Names, job titles and contact details of the people who arrange, supervise or are responsible for the structures we inspect. We use them to plan the work, report to you and invoice. The lawful basis is performance of a contract and our legitimate interests in running the engagement.
Inspection records. Our reports, photographs and registers are records of equipment and structures, but they can contain personal information: the name of a person a harness or other item is issued to, the name of a duty holder or supervisor, and people who happen to appear in a photograph taken on site. We keep these because inspection records are part of how health and safety duties are met and evidenced. The lawful basis is legal obligation and our legitimate interests, and we avoid photographing identifiable people wherever we can. At schools, nurseries and other settings for children, we photograph only the structure, no image contains a child or any identifiable person, and we follow the setting’s own photography and device rules, including having photographs reviewed by the setting before we leave where it asks for that.
Subcontractors. Names, contact details, qualifications and certificates, and the signed acknowledgement of our risk assessments and method statements. We use these to confirm that the people working with us are competent and briefed. The lawful basis is legal obligation and performance of a contract.
Criminal record checks. Where a client requires it, for example at a school or nursery, the people we send to site hold an Enhanced DBS certificate, and we keep a note of the certificate number, its date and that it was checked. We use it only to meet that client’s safeguarding requirements, and we handle it under the conditions UK data protection law sets for criminal records information.
We record inspections on our own devices in an inspection app. Those records are copied to secure storage so they are not lost if a device is. Invoicing and payment records are kept in our accounting software.
We keep our own systems deliberately small, but a few other companies necessarily handle personal information as our processors:
Each handles the information under its own published data protection terms. Our accountants also see billing records in order to prepare our accounts. Some of these companies process data outside the UK, including in the European Union and the United States; those transfers rely on the safeguards set out in their terms.
Enquiries through our enquiry and booking form that do not lead to work are kept for 12 months, then deleted.
Records connected to an inspection we have carried out are kept for the life of the structure, or fifteen years from the inspection, whichever is shorter. Inspection records may be needed many years after the visit: a claim can be brought long after the event, and where the person concerned was under eighteen at the time, the period runs from their eighteenth birthday. At six years we review each file and remove the personal information it contains — staff names, contact details, photographs of identifiable people — keeping only the technical record of the structure itself.
Invoicing and accounting records are kept for six years after the end of the financial year they relate to, as the law requires.
Guide downloads and marketing consent are kept until you ask us to remove you, or after 24 months without engagement, whichever comes first.
We review retention once a year rather than deleting continuously. Where information has passed out of our live systems but still exists in backups, it is put beyond use and is not accessed.
This site does not use advertising or cross-site tracking cookies, and we do not build a profile of you. We use Cloudflare Web Analytics to understand how many people visit and which pages are read. It is cookieless — it sets no cookie, uses no persistent identifier, and cannot link your visit to you personally or to your visits on other websites; it only ever reports aggregate figures such as total visits and page views.
We rely on the "statistical purposes" exception introduced by the Data (Use and Access) Act 2025, which permits this kind of basic own-service analytics without a consent banner, provided we tell you plainly that it happens and give you a simple, free way to opt out. This paragraph is that notice. To opt out, use your browser's "Do Not Track" or privacy setting, or a privacy or ad-blocking browser extension — any of these will stop the anonymous analytics request from loading, and nothing about your visit will be counted.
Cloudflare may also set a small number of strictly necessary cookies to keep the site secure and working; these do not identify you personally and are not used for marketing.
Under UK data protection law you have the right to ask us for a copy of the information we hold about you; to have inaccurate information corrected; to have information erased in certain circumstances; to restrict or object to how we use it; to receive it in a portable form; and to withdraw consent where consent is what we relied on.
Email info@blucoprojects.com and we will respond within one month. There is no charge.
If you are unhappy with how we have handled your personal data, please tell us. Email info@blucoprojects.com, or write to Bluco Projects Ltd, 2 Endeavour House, Parkway Court, Long Bridge Road, Plymouth PL6 8LR. We will acknowledge your complaint within 30 days and tell you who is dealing with it, and we will write to you with our response and what we are doing about it.
You also have the right to complain to the Information Commissioner’s Office at any time, and you do not have to raise it with us first. The ICO can be reached on 0303 123 1113 or at ico.org.uk/make-a-complaint.
If we change how we handle personal information we will update this page and change the date at the top.
Bluco Projects