Last updated: 21 September 2026
This policy explains how Integrated Compliance Management Ltd (“ICM”, “we”, “us”) collects, uses and protects personal information when you visit this website, get in touch with us, or work with us. We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Integrated Compliance Management Ltd is a company registered in England & Wales, company number 17362897. Our registered office is 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. For the purposes of UK data protection law, we are the controller responsible for your personal information. You can contact us about it at info@i-c-m.co.uk. Our full details are on the Legal information page.
2. The information we collect
We may collect personal information when you contact us through this website, email or call us, book a call, ask to receive updates from us, or browse the website (through cookies and similar technologies; see our Cookie policy). This can include:
- Information you give us. Your name, work email address, phone number if you give it, your organisation and job title, the content of any message you send us, and the details of your enquiry, such as the buildings or compliance duties you want to discuss.
- Booking information. If you book through our online calendar, the scheduling provider collects the details you enter and passes them to us so we can confirm the appointment.
- Information about our clients and their buildings. If we work with you, we also hold contact details for your staff and site contacts, and the records we create or receive for your buildings, such as inspection reports, certificates and registers. These records can name the responsible people at your organisation.
- Technical information. Like most websites, our hosting provider records technical information when you visit, such as your IP address, browser type and the pages you view. We use it to keep the site secure and working.
3. How we use your information
We use your personal information to respond to your enquiries and provide the services you have asked about, to manage any ongoing client relationship, to send you information you have asked for, to keep our records and meet our legal obligations, to understand in general terms how the website is used so that we can improve it, and to keep it secure and working.
We do not sell your information, and we do not make decisions about you using solely automated processing.
4. Our legal basis for using it
We only use personal information where the law allows us to. The lawful bases we rely on are:
- Consent, for example when you ask to receive updates from us. You can withdraw your consent at any time.
- Legitimate interests, for example to answer people who contact us, to keep the website secure and working, and to tell business contacts about our services where it is relevant to their role. You can opt out of being contacted about our services at any time, and we stop when you ask.
- Contract, where we need to use information to provide services you have engaged us for, or to take steps at your request before entering into a contract.
- Legal obligation, where we must keep records or share information to comply with the law, such as accounting and tax rules.
5. Sharing your information
We do not sell your personal information. We share it only with organisations that help us run the business, and only as far as needed:
- our website hosting provider and our email and calendar providers;
- the online scheduling provider we use for booking calls;
- contractors and suppliers we appoint to carry out work at your buildings, who receive only what they need, such as a site contact and access details;
- our professional advisers, such as accountants, insurers and lawyers; and
- regulators, the police or other authorities, where the law requires us to disclose it.
Organisations that process information on our behalf act only on our instructions and are required to keep it secure.
6. Transfers outside the UK
Some of the tools and providers we use may store or process information outside the UK, including in the United States. Where this happens, we take reasonable steps to make sure your information is protected to a standard equivalent to UK law, for example through a UK adequacy decision, the UK International Data Transfer Agreement or Addendum, or standard contractual clauses.
7. How long we keep your information
We keep personal information only for as long as we need it for the purpose it was collected, and then delete it or anonymise it. Our standard periods are:
- enquiries that do not lead to work are kept for up to 12 months;
- records of work for clients are kept for the length of the contract and six years afterwards; and
- accounting records are kept for six years.
These are our standard periods. Where a contract or service level agreement with a client, or the law, requires a different period, that period applies instead.
8. Your rights
Under UK data protection law, you have the right to ask us for a copy of the personal information we hold about you, to have inaccurate information corrected, to have your information deleted, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. To use any of these rights, contact us using the details on our Legal information page, or email info@i-c-m.co.uk. We will reply within one month.
9. Keeping your information secure
We use reasonable technical and organisational measures to protect your personal information against unauthorised access, loss or misuse, including access controls and the security features of our hosting, email and scheduling providers. No system is completely secure, so if you think your information has been put at risk, please tell us straight away.
10. Complaints
If you are unhappy with how we have handled your personal information, we would like the chance to put it right, so please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113.
11. Links to other websites
This website links to other websites, such as regulators and government pages. We are not responsible for their content or privacy practices, so please read their policies.
12. Children
This website is for businesses and is not aimed at children. We do not knowingly collect information from children.
13. Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with an updated date at the top.