Legal
Privacy Policy
Last updated: May 2026
Supported Accommodation Providers Consultancy Ltd ("SAPC", "we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you interact with us — including through our website, social media, lead forms, and direct communications.
We are registered in England and Wales. Our registered address is Suite B, Sapphire House, Roundtree Way, Norwich, NR7 8SQ.
This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. What Data We Collect
We may collect the following categories of personal data:
- Identity data: your name, job title, and organisation name
- Contact data: your email address, phone number, and business address
- Enquiry data: information you share with us when requesting a consultation or completing a lead form
- Technical data: IP address, browser type, pages visited, and time spent on our website (collected via cookies)
- Marketing data: your preferences for receiving communications from us
2. How We Collect Your Data
We collect personal data through:
- Lead forms on Meta (Facebook and Instagram) when you request a free consultation
- Our website contact form at sapconsultancy.co.uk/contact
- Direct email, phone, or WhatsApp communication
- LinkedIn and other social media platforms when you engage with our content
- Cookies and analytics tools on our website (see Section 8)
3. How We Use Your Data
We use your personal data for the following purposes:
- To contact you about the free consultation you requested
- To provide our consultancy services to you or your organisation
- To send you relevant information about our services, updates, and compliance insights (with your consent)
- To respond to your enquiries and provide customer support
- To improve our website and marketing communications
- To comply with our legal and regulatory obligations
4. Our Legal Basis for Processing
We process your personal data under the following legal bases:
- Legitimate interests: where we have a genuine business reason to contact you as a professional in the supported accommodation sector
- Consent: where you have explicitly opted in to receive marketing communications from us
- Contract: where processing is necessary to deliver services you have engaged us for
- Legal obligation: where we are required by law to process your data
5. Who We Share Your Data With
We do not sell your personal data to any third party. We may share your data with:
- Service providers: such as email marketing platforms (Brevo/Sendinblue), CRM systems, and website hosting providers — solely to deliver our services
- Meta Platforms: if you submitted your details via a Facebook or Instagram lead form, your data is processed in accordance with Meta's data policy
- Legal authorities: where we are required to do so by law
All third-party providers are required to handle your data securely and in compliance with UK GDPR.
6. How Long We Keep Your Data
- Lead enquiries: 24 months from the date of enquiry, unless you become a client
- Client records: 6 years from the end of the engagement (in line with statutory requirements)
- Marketing contacts: until you unsubscribe or withdraw consent
- Website analytics: up to 26 months (Google Analytics default)
7. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access: request a copy of the data we hold about you
- Right to rectification: request correction of inaccurate data
- Right to erasure: request deletion of your data ("right to be forgotten")
- Right to restrict processing: ask us to limit how we use your data
- Right to data portability: receive your data in a machine-readable format
- Right to object: object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent: withdraw consent at any time where processing is consent-based
To exercise any of these rights, please contact us using the details in Section 9. We will respond within 30 days.
8. Cookies
Our website uses cookies to improve your experience and help us understand how visitors use the site. We use:
- Essential cookies: required for the website to function correctly
- Analytics cookies: to understand visitor behaviour (via Google Analytics)
- Marketing cookies: to measure the effectiveness of our advertising (via Meta Pixel)
You can control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.
9. Meta Pixel
Our website uses the Meta Pixel, a piece of code that allows us to measure the effectiveness of our Facebook and Instagram advertising. The Meta Pixel may collect your IP address, browser information, and pages visited. This data is processed by Meta Platforms in accordance with their Data Policy. You can opt out of Meta's data collection via your Facebook ad preferences.
10. Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data is stored securely and access is restricted to authorised personnel only.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The most current version will always be available at sapconsultancy.co.uk/privacy-policy. We will notify you of significant changes where we hold your contact details.
12. Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK's data protection authority:
- Information Commissioner's Office (ICO)
- Website: ico.org.uk
- Helpline: 0303 123 1113