Request a Private Consultation

Privacy Policy.

1. Who We Are

SeaBridge SSAS Limited (“we”, “us”, “our”) is a pension consultancy specialising in Small Self-Administered Schemes (SSAS). We are registered in England and Wales.

  • Company name: SeaBridge SSAS Limited
  • Company number: 13507468
  • Registered address: Churchgates, 16-18 Langton Place, Bury St. Edmunds, Suffolk, England, IP33 1NE
  • Contact email: newbusiness@seabridgessas.co.uk

We are the data controller for the personal information we collect and process in connection with our website and services. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights under UK data protection law, including the UK GDPR and the Data Protection Act 2018.

2. What Personal Data We Collect

2.1 Information you provide to us

When you complete a contact or enquiry form on our website, we collect:

  • Your name
  • Your email address
  • Your telephone number (if provided)
  • Your company or organisation name (if provided)
  • Any details you choose to include in your message

2.2 Information collected automatically

When you visit our website, we collect certain technical information automatically. We use Plausible Analytics, a privacy-focused analytics tool that does not use cookies or collect personally identifiable information. Plausible collects:

  • Pages visited and time on site (in aggregate)
  • Referral source (e.g. search engine or referring website)
  • Browser type and device type (in aggregate)
  • Country-level location data

Plausible does not track you across websites and does not store cookies on your device. No personal data is collected or shared through this tool.

2.3 Google Fonts

Our website uses Google Fonts to display text. When a page loads, your browser may make a request to Google’s servers to retrieve font files. Google may log your IP address as part of this request. We do not control this data processing. You can review Google’s privacy policy at https://policies.google.com/privacy.

3. Our Lawful Basis for Processing

We rely on the following legal bases under UK GDPR to process your personal data:

  • Legitimate interests — to respond to your enquiries, understand how our website is used, and improve our services. We have assessed that our legitimate interests are not overridden by your rights.
  • Contractual necessity — where processing is required to take steps at your request prior to entering into, or in the performance of, a contract with you.
  • Legal obligation — where processing is necessary to comply with a legal or regulatory obligation.
  • Consent — where you have given us explicit consent to process your data for a specific purpose, such as receiving marketing communications.

4. How We Use Your Personal Data

We use the personal information we collect to:

  • Respond to enquiries and requests submitted via our contact forms
  • Provide pension consultancy and SSAS administration services
  • Comply with our legal and regulatory obligations in the pensions sector
  • Improve and maintain our website using aggregate, anonymised analytics
  • Send you relevant information about our services where you have consented or where we have a legitimate interest to do so

We will not use your personal data for purposes that are incompatible with those set out above without first obtaining your consent.

5. Sharing Your Personal Data

We do not sell your personal data. We may share your information in the following limited circumstances:

  • Service providers — trusted third parties who assist in operating our website or providing our services (e.g. IT support, hosting providers), under contractual obligations to protect your data.
  • Professional advisers — accountants, lawyers, or insurers where reasonably necessary.
  • Regulatory bodies — including The Pensions Regulator (TPR) and HMRC, where required by law.
  • Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred to the relevant third party.

Any third parties we share data with are required to process it in accordance with UK GDPR and in a manner consistent with this policy.

6. International Transfers

Your personal data is primarily stored and processed within the United Kingdom and the European Economic Area (EEA). Where data is transferred outside these areas (for example, via Plausible Analytics, which is EU-based), we ensure appropriate safeguards are in place.

Plausible Analytics is headquartered in the EU and processes data in accordance with GDPR. Google Fonts data may be processed by Google in the United States. Google operates under the EU-US Data Privacy Framework where applicable.

7. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes set out in this policy, or as required by law. Specifically:

  • Enquiry and contact form submissions — up to 2 years from last contact, unless a client relationship is established.
  • Client records relating to SSAS administration — retained for a minimum of 6 years in line with HMRC requirements, and potentially longer depending on regulatory obligations.
  • Website analytics — anonymised aggregate data with no retention limit.

When data is no longer required, it is securely deleted or anonymised.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access — to request a copy of the personal data we hold about you.
  • Right to rectification — to request correction of inaccurate or incomplete data.
  • Right to erasure — to request deletion of your data in certain circumstances.
  • Right to restrict processing — to request that we limit how we use your data.
  • Right to data portability — to receive your data in a structured, machine-readable format.
  • Right to object — to object to processing based on legitimate interests or for direct marketing.
  • Rights related to automated decision-making — we do not carry out automated decision-making or profiling.

To exercise any of these rights, please contact us at newbusiness@seabridgessas.co.uk. We will respond within one calendar month. There is no charge for making a request.

9. Cookies

Our website does not use tracking cookies. Plausible Analytics operates without cookies and your browser settings will not affect our analytics.

Google Fonts may cause your browser to store cached font files. This is standard browser behaviour and does not constitute tracking.

We may use session cookies for essential website functionality (e.g. form submissions). These are deleted when you close your browser and are not used for tracking purposes.

10. Security

We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, or unauthorised disclosure. Our website is served over HTTPS.

No method of transmission over the internet is completely secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. We encourage you to review this policy periodically. Continued use of our website following any changes constitutes your acceptance of the updated policy.

13. Complaints

If you have concerns about how we handle your personal data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:

  • Website: https://ico.org.uk
  • Telephone: 0303 123 1113
  • Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would always appreciate the opportunity to address your concerns directly before you approach the ICO. Please contact us at newbusiness@seabridgessas.co.uk in the first instance.

14. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: