Last updated: 22 July 2026
This policy explains how South Coast Safeguarding ("we", "us") handles personal data when you visit this website or contact us. We are committed to protecting your privacy and handling data lawfully under UK data protection legislation, including the UK GDPR and the Data Protection Act 2018.
Who we are
South Coast Safeguarding is operated by Dorota Cribb as an independent safeguarding consultancy (sole trader), trading as South Coast Safeguarding. Dorota Cribb is the data controller for personal data collected through this website and for private family work, unless another arrangement applies as described below.
Contact: dori@southcoastsafeguarding.co.uk
Postal address: 147 Honeycombe Beach, Honeycombe Chine, Boscombe, Bournemouth, BH5 1LG, United Kingdom
We are registered with the Information Commissioner's Office (ICO) as a data controller (registration reference ZC204162).
What data we collect
Contact form and email
When you use the contact form or email us, we collect your name, email address, and the message you send. We do not ask for more information than we need to respond to your enquiry.
Website use
This site is a static website. We do not currently use analytics or advertising cookies. Standard server and hosting logs (for example IP address, browser type, and pages requested) may be processed by our hosting provider to deliver the site securely. We do not use those logs to identify you personally.
Commissioned work
If you become a client, we may collect additional professional or personal information needed to deliver safeguarding services. That may include case notes, referral details, and records held in secure document storage or spreadsheets for case tracking.
Sensitive and special category data
As a safeguarding practice, we may process special category personal data where necessary for our work. This can include information about health, disability, family relationships, and safeguarding concerns. We process this data where necessary to assess risk, provide support, and meet legal safeguarding duties, using the lawful bases and conditions set out in UK GDPR for safeguarding and social care work.
Data controller roles on commissioned work
For private family work, Dorota Cribb is the data controller for the personal data needed to deliver that support.
For work commissioned by councils, schools, police, hospitals, or similar organisations, the commissioning organisation is usually the data controller for core case records. We process that information under their instructions. We retain limited records necessary for our own safeguarding, legal, and professional obligations.
The specific data protection roles for commissioned work are set out in the relevant contract or engagement letter.
How we use your data
We use contact form and enquiry data to:
- Read and respond to your enquiry
- Follow up if you ask us to contact you
- Keep a record of correspondence where appropriate for professional purposes
Lawful basis: We process enquiry data on the basis of our legitimate interests in responding to requests and running our business, and/or because you have asked us to take steps before entering a contract. Where safeguarding work involves special category data, we rely on the lawful bases and conditions set out in UK GDPR for that work, including where necessary for social care, safeguarding duties, or the protection of vital interests, as applicable.
Who we share data with
We do not sell your data. We may share information where necessary because of a safeguarding risk, a legal duty, a court requirement, or, where appropriate, with your consent to support referrals and family support.
We use the following service providers who process personal data on our instructions:
- Netlify (form processing): contact form submissions are delivered through our form hosting provider before they reach us
- Google (Gmail): enquiry emails are received and stored in our business inbox
- Google Drive: documents and simple spreadsheets used for case tracking and file storage where work goes ahead
- Wedgwood Digital: website hosting and related technical services
We do not share routine enquiry data with other third parties except where required for the reasons above or where you have asked us to.
International transfers
We aim to keep data within the UK where possible. Some providers (including Google) may process data outside the UK. Where that happens, we rely on appropriate safeguards under UK data protection law, such as UK adequacy regulations or contractual protections.
How long we keep data
If your enquiry does not lead to commissioned work, we retain correspondence for up to 12 months, then securely delete it unless we need to keep it for a dispute or legal claim.
Where work goes ahead, we generally keep records for up to 7 years after the end of the engagement, unless a contract, council requirement, or other legal obligation requires a different period.
We also follow any specific retention requirements set out in council or commissioner contracts, safeguarding guidance, or professional and insurance requirements where those apply.
Your rights
Under UK data protection law you have rights including:
- Access to the personal data we hold about you
- Correction of inaccurate data
- Erasure in certain circumstances
- Restriction of processing in certain circumstances
- Objection to processing based on legitimate interests
- Data portability where applicable
To exercise these rights, email dori@southcoastsafeguarding.co.uk. We aim to respond within one calendar month, as required by UK GDPR.
You also have the right to lodge a complaint with the ICO at ico.org.uk/make-a-complaint.
Cookies
We do not set non-essential cookies on this website. Essential cookies or similar technologies may be used by our hosting provider to deliver the site and protect against abuse (for example on form submission). If we add analytics or other optional tools in future, we will update this policy and, where required, ask for your consent before using non-essential cookies.
Security
We use reputable hosting and form providers, work on encrypted connections (HTTPS), and handle safeguarding-related information with professional confidentiality. Paper records, where used, are kept in locked secure storage and destroyed or passed to the relevant authority when required. No method of transmission over the internet is completely secure; we take reasonable steps to protect your data.
Children
This website is not intended for children to submit enquiries on their own. If you are under 18, please ask a parent, guardian, or responsible adult to contact us on your behalf.
Changes to this policy
We may update this page from time to time. The "Last updated" date at the top will change when we do. Please check this page periodically.