Privacy Policy

PRIVACY NOTICE

We take your privacy extremely seriously and will also process your personal information with the
utmost professionalism, discretion and integrity.
With this in mind and in line with the General Data Protection Regulation (GDPR), we want to
share with you, through this Privacy Notice, more detail about how we look after the personal
data that you provide us in the course of your relationship with us and what we do with it. It tells
you how we process this, who we share it with and how we dispose of it.
This notice also informs you of your rights and how to exercise these and also refers you to some
of our other relevant data protection policies, in relation to how we keep your data secure and
therefore safeguard your privacy.

HOW WE OBTAIN YOUR PERSONAL DATA

Information provided by you

You provide us with personal data via online queries through our website, over the telephone, face to face, by email or by paper documents that you complete variety of personal information includes, but isn’t limited to, name, address, date of birth, email addresses, personal telephone numbers, bank details and medical information. We will only collect and process your personal information where we have a legal basis to do so, and our legal basis in all cases is in order to perform the contract that we are party to as a subcontractor and contractor. We may also keep information in any correspondence you may have with us by post or via email.

Information we get from other sources

We may obtain information from third parties if this is permitted by law or use legal public sources
to obtain information about you for example, to verify your identity. This may include credit safe,
dependent on your position in the Company and only when relevant.
We may ask you to undertake a DBS check, however this will only be the case when your daily
duties require you to adhere to this additional level of verification.
Personal information received will always be processed in line with our Data Protections policies
and this Privacy Notice.
This information shall only be obtained from companies that are meeting the requirements of
GDPR. You will have already submitted your data to these companies and given permission for
them to pass your information on to relevant companies.

DATA SUBJECT RIGHTS

Subject access requests

GDPR grants you the right to access particular personal data that we hold about you. This is
referred to as a subject access request. We shall respond promptly and certainly within one month
from the point of receiving the request and all necessary information from you. Our formal
response shall include details of the personal data we hold about you, including the following:
• Sources from which we acquired the information
• The purposes for processing the information
• Persons or entities with whom we are sharing the information
• Right to rectification
You have the right, without undue delay, to have any personal information about you which is
not accurate, corrected. You also have the right to any incomplete personal data completed,
including by means of providing a supplementary statement.

Right to erasure

You have a right to obtain from us the erasure of personal data concerning you without delay.
This refers only to data that we are not legally required or entitled to keep for a specified length
of time in order to comply with any legal, statutory and regulatory obligations.

Right to the restriction of processing

Subject to exemptions, you have the right to restrict the processing of your personal data when:
• You are contesting the accuracy of the data, and restrict the processing until the accuracy
of the data has been verified
• The processing is unlawful, and you oppose the erasure of the personal data but instead
request the restriction in its use.
• We no longer need the personal data for processing, but it is required by you for the
establishment, exercise or defence of claims
• You object to processing of your personal data pending the verification of whether there
are legitimate grounds for us to override these objections.
• We shall communicate any rectification or erasure of personal data as described above
to each recipient to whom the personal data has been disclosed unless this proves
impossible or involves disproportionate effort. We shall provide you with information
about those recipients if you request it.

Right to data portability

You have the right to receive your personal data, which you have provided to us, in a structured,
commonly used and machine readable format, and have the right to transmit this data to another
controller without hindrance from us.

Right to object

You have the right to object on grounds relating to your particular situation, at any time to the
processing of personal data concerning you, including any personal profiling; unless this relates
to necessary processing for the performance of a task carried out in public interest or an exercise
of official authority vested in us. We shall no longer process the personal data unless we can
demonstrate compelling legitimate grounds for the processing, which override the interests, rights
and freedoms of you, or in the establishment, exercise and defence of legal claims.

Right to not be subject to decisions based solely on automated processing

We do not carry out any automated processing, which may lead to an automated decision based
on your personal data.

Invoking your rights

If you would like to invoke any of the above data subject rights with us please write to the Data
Protection Lead