Privacy policy

This policy explains what personal data Breeze Network & Consult Ltd collects, why we collect it, how long we keep it and what rights you have over it. It is written to meet our obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Breeze Network & Consult Ltd is the data controller for the personal data described in this policy. That means we decide why and how your data is used.

Company: Breeze Network & Consult Ltd
Registered in: England and Wales, company number 13355102
Registered office: Apartment 2, 32 Brewery Lane Wharf House, Twickenham, London TW1 1AX, United Kingdom
Data protection contact: meltem.yilmaz@breezenetworking.com

We have not appointed a Data Protection Officer, as we are not required to under UK GDPR. Enquiries go to the address above.

2. What we collect and why

We only collect data we actually need. Under UK GDPR every use of personal data needs a lawful basis, so we have set ours out alongside each purpose.

What we collect	Why	Lawful basis
Name, email address, organisation and the content of your message, submitted through our contact form	To read and reply to your enquiry	Legitimate interests: responding to someone who has contacted us
Name, email address and chosen time slot, submitted when you book a meeting	To schedule the meeting and send you the joining details	Steps taken at your request before entering a contract
Contact details, correspondence and project documentation for clients and partner institutions	To deliver the services we have agreed and to keep records of the work	Performance of a contract
Participant names and attendance records for training programmes	To run the programme and issue certificates of attendance	Performance of a contract with the sending institution
Invoices, payment records and related correspondence	To meet accounting and tax obligations	Legal obligation

We do not collect payments through this website, we do not run advertising or analytics on it, and we do not build profiles of visitors or make automated decisions about anyone.

3. Cookies

This website does not use analytics, advertising or tracking cookies. There is nothing here that follows you around the web.

One exception is worth naming. The booking calendar on our Services page is provided by Cal.com and is loaded from their servers. When that part of the page loads, Cal.com may set cookies of its own to make the booking work. If you never open that page, it never loads. Cal.com's own privacy notice covers what they set and why.

4. Who else sees your data

We do not sell, rent or trade personal data. Data stays within Breeze except in the following cases.

At your instruction. Where a piece of work is outsourced, we share what is needed with the third party you have asked us to involve, and only on your instruction.
Our service providers. A small number of suppliers process data on our behalf, under contract and only on our instructions. These are Google Workspace (email), Cloudflare (website hosting), Cal.com (meeting bookings) and Resend (delivery of contact form messages to our inbox).
Where the law requires it. For example a valid request from a regulator, tax authority or court.
If the business changes hands. In a merger, acquisition or sale of assets, records may transfer to the new owner, who would remain bound by this policy.

5. Data outside the UK

Some of the suppliers listed above are based outside the United Kingdom, principally in the United States and the European Economic Area. Where personal data leaves the UK, it is protected either by UK adequacy regulations or by the International Data Transfer Agreement or equivalent contractual safeguards, as UK GDPR requires.

6. How long we keep things

Data	Retention
Enquiries that do not lead to work	12 months from the last message
Booking records	12 months from the meeting date
Client files and project records	6 years from the end of the engagement
Training attendance records	6 years, so we can reissue a certificate if asked
Invoices and accounting records	6 years, as required by HMRC

When a retention period ends, records are deleted or anonymised.

7. Keeping data secure

Access to personal data is limited to the people at Breeze who need it. Accounts are protected by strong authentication, data in transit is encrypted, and our suppliers are chosen partly on their security record. No system is completely secure, and we do not claim otherwise, but we take these measures seriously and review them.

8. Your rights

Under UK GDPR you have the right to:

Ask what personal data we hold about you and receive a copy of it.
Have inaccurate data corrected.
Ask us to delete data, where we have no continuing reason to keep it.
Ask us to restrict how we use your data while a concern is resolved.
Receive data you gave us in a portable format, or have it sent to another organisation.
Object to processing we carry out on the basis of legitimate interests.
Withdraw consent at any time, where consent is what we relied on.

Email meltem.yilmaz@breezenetworking.com to exercise any of these. We respond within one month. There is no charge.

9. Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the UK supervisory authority, the Information Commissioner's Office, at ico.org.uk or on 0303 123 1113.

10. Changes to this policy

We update this policy when our practices change. The date at the top shows when it last changed. Material changes affecting existing clients are communicated directly rather than left to be discovered here.

11. Contact

Email: meltem.yilmaz@breezenetworking.com
Phone (UK): +44 7824 886366
Phone (Turkey): +90 533 350 5584
Post: Apartment 2, 32 Brewery Lane Wharf House, Twickenham, London TW1 1AX