Privacy notice
Last updated: 7 October 2026
Who we are
This website is run by Tactical Hazmat Ltd (“we”, “us”), a company registered in England and Wales with company number 08025859. Our registered office is Brook House Brookfield Business Park, Gravel Pit Lane, Cheltenham, England, GL52 3NQ. Our trading address is Brook House, Brookfield Business Park, Gravel Pit Lane, Cheltenham GL52 3NQ. VAT registration number GB 163589868. We are the controller of the personal data described in this notice. We are registered with the Information Commissioner's Office (reference ZA841188). We have not appointed a data protection officer. For any privacy question or to use your rights, email
enquiries at tactical
This website
- This website does not set cookies and does not use analytics, advertising or tracking tools.
- It loads no content from other companies. Fonts and images are served from this site. There are no embedded maps, social feeds or videos. If you follow a link to another website, that site's own privacy terms apply.
- If you choose a light or dark colour theme, your choice is saved in your own browser (local storage) so we can remember it. It stays on your device and is not sent to us. Choosing Auto removes it.
- We do not keep website access logs.
- Amazon Web Services (AWS) hosts this website for us and acts as our processor under its data processing terms. Amazon CloudFront, AWS's content delivery network, carries requests between your browser and this website, so your IP address and the page you ask for pass through it. It handles each request at a server near you, which may be outside the UK. We do this on the basis of our legitimate interests in running this website.
Enquiries: what we collect, why and on what basis
When you use our enquiry form, email or phone us, we collect what you give us: normally your name, your organisation (and, if you tell us, its type), your email address, your phone number, the course or service you ask about and your message. We get this from you, or from your organisation if it enquires or books on your behalf. Please do not include sensitive personal information (such as health details) or details of live incidents, investigations, security arrangements or operational plans. If you do, we may delete it.
Do you have to give us your data? No. If you email us we need your email address and a message so that we can reply. If you would rather not email us, you can phone us.
Emails to us
The email you send us is delivered to our company mailbox, which is provided by Google Workspace. If we reply, our reply is kept in the same mailbox. If you become a customer, we keep the details we need in our booking and accounting records. We keep and delete enquiry emails as set out under “Replying to your enquiry and giving a quote”, below. We do not add you to a mailing list, and we do not send marketing because you contacted us. Enquiries sent using the form are delivered to enquiries@tacticalhazmat.com using the configured authenticated email service. Form enquiries follow the same mailbox retention policy as other enquiry emails.
-
Replying to your enquiry and giving a quote
- Data
- Contact details, message
- Lawful basis
- Legitimate interests (running our business by answering enquiries); or taking steps at your request before a contract where you are an individual
- Retention
- 24 months after our last contact with you. We are setting up a check of the mailbox every quarter to delete enquiry emails that are more than 24 months old, including from its deleted items, so an email can be kept for up to three months longer. Google then removes them from its systems under its own deletion schedule. If you become a customer, we keep the details we need in our booking and accounting records (see below).
-
Providing a course or service you book, and invoicing
- Data
- Contact and booking details
- Lawful basis
- Performing a contract with you or your organisation; legitimate interests (administering bookings and keeping business records)
- Retention
- 6 years after the end of the relationship, for tax and legal claims
-
Keeping records for legal claims, accounts and tax
- Data
- Contact and transaction records
- Lawful basis
- Legal obligation (tax and accounting records); legitimate interests (establishing, exercising or defending legal claims)
- Retention
- As above
-
Dealing with your privacy requests and complaints
- Data
- Your request or complaint, our reply, and our notes of how we dealt with it
- Lawful basis
- Legal obligation (responding to your rights requests); legitimate interests (handling complaints and defending claims)
- Retention
- 6 years after we close the matter, because claims can be brought within that time
We do not use your enquiry details to send marketing unless you ask us to, or the law allows it. You can opt out at any time.
We do not make decisions about you by automated means and we do not profile you.
Who receives your data
We do not sell your data and we do not pass it to other organisations for their own use. Service providers process data for us under written agreements: Amazon Web Services (which hosts this website); Google (Google Workspace, which provides our company email); and the provider of our accounting software, which holds customer and invoice details. Our accountants and professional advisers may see records where needed. If you ask about something we cannot provide, we may suggest another organisation, but we will not give them your details unless you ask us to.
Because AWS is part of a US group, limited access from outside the UK, for example for support, may be a restricted transfer. AWS relies on the safeguards in its data processing terms. Google may process mailbox data in several countries including the United States and relies on the safeguards in Google's data processing terms. You can ask us for a copy of the safeguards using the contact details above.
Your rights
You have the right to: be told how we use your data; see the personal data we hold about you; have inaccurate data corrected; have data erased in some circumstances; restrict our use of it in some circumstances; receive it in a portable format where we process it by automated means on the basis of consent or contract; and object to processing based on legitimate interests. Where we rely on your consent, you can withdraw it at any time. To use these rights, contact us as above. You can make a request by any means. We may need to check who you are first. We normally respond within one month and do not charge a fee.
Complaints
If you are unhappy with how we have handled your data, please tell us first by email at
enquiries at tactical
How we protect your data
Access to enquiry and customer records is limited to staff who need it. Systems are protected by passwords.
Data breaches
Where the law requires, we tell the Information Commissioner within 72 hours of becoming aware of a breach, and tell the people affected.
Company details
Registered in England and Wales, company number 08025859.
Registered office: Brook House Brookfield Business Park, Gravel Pit Lane, Cheltenham, England, GL52 3NQ
VAT registration number GB 163589868
For our website terms and disclaimer, see Website terms and disclaimer.