This is the Privacy Notice for Firsthand Construction Ltd issued in accordance with the General Data Protection Regulation (GDPR) – please read it carefully.
This Privacy Notice is to let you know how we handle your personal data. This includes what you tell us about yourself and your choices about what marketing you want to receive from us. This Privacy Notice explains our approach, your privacy rights and how the law protects you.
Your personal data is any information relating to you from which you can be identified.
This notice sets out:
• how we will process any personal data that we collect from you and what it will be used for;
• the information that you are entitled to receive from us when we collect your personal data; and
• your rights under the General Data Protection Regulation (GDPR) in connection with the way we handle your personal data.
Where you provide personal data about another person, this Privacy Notice will also apply to that data so please share it with that person. This Privacy Notice applies to any personal data which you may provide to us in person, over the telephone, by email, on our website and/or by post. This Privacy Notice also applies to any personal data which we may collect from third parties about you and/or which we may collect when you access our website and/or in the course of our relationship.
You can choose not to give personal data. We may need to collect personal data by law, or under the terms of a contract and/or relationship that we have with you. If you choose not to give us this personal data, it may delay or prevent us from meeting our obligations. It may also mean that we cannot perform services so we cancel a product or service you have with us.
Wherever we refer to “processing” of personal data in this Privacy Notice this includes any combination of the following activities: collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
This Privacy Notice only applies to personal data collected by or on behalf of Galliford Try via the company’s website or by any other means. The company’s website may from time to time contain links to and from other websites (partner networks, advertisers and affiliates). If you follow a link to any external website or alternatively reach our website from a third party website, please be aware that these websites will have their own privacy policies, separate from ours, and we therefore do not accept any responsibility or liability for these policies. Please check their policies before you submit any personal data to these websites.
2. Our commitment
We commit to:
• keeping your personal data safe and only processing it on a valid legal basis;
• keeping our records up-to-date and correcting inaccurate personal data where required;
• deleting your personal data after it is no longer needed for the purpose you collected it for;
• assisting you with obtaining access to your personal data;
• not selling your personal data; and
• giving you ways to manage and review your marketing choices at any time.
3. Who We Are
You can contact our Data Protection Officer (DPO) at:
Firsthand construction Ltd
63/66 Hatton gardens
Fifth floor suite
or by email to firstname.lastname@example.org.Uk
4. Legal basis for processing your personal data
We need to have a proper reason under the GDPR whenever we process your personal data ourselves or share it with others outside the Firsthand construction ltd. These reasons are:
• to fulfil a contract we have with you or to take steps at your request prior to entering into a contract with you;
• when it is our legal duty;
• when it is in our legitimate interest or the legitimate interest of a third party except where such interests are overridden by your interests or your fundamental rights or freedoms; or
• when you consent to it.
A ‘legitimate interest’ in this context is when we have a business or commercial reason to process your personal data, but this must not unfairly go against your rights. If we rely on our legitimate interest, we will tell you what that is.
The section below lists all the ways that we may process your personal data, and which of the lawful bases we rely on to do so.
Unless we have your explicit consent to do so, we will not process special categories of personal data revealing any of the following information about you: racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health, sex life or sexual orientation.
5. Information we collect and how we collect it
We may collect personal data from you in the following ways:
• when you make an enquiry, register on our website, sign-up for alerts on our website; or sign-up for another service such as webcasts on our website;
• when you contact us in person, over the telephone, by email, by post or social media;
• when you apply for our products and services;
• when you are contracted by us to provide a service;
• in customer surveys;
• when you use our services; or
• payment and transaction data.
We may collect your personal data from third parties we work with including:
• companies that introduce you to us;
• suppliers of materials and equipment;
• trade contractors;
• social networks;
• payroll service providers;
• analytics providers;
• public information sources such as Companies House;
• agents working on our behalf;
• market researchers; and
• government and law enforcement agencies.
The type of information we may ask you to provide about yourself, and therefore collect and process, is dependent upon the relationship that we have with you as a client, customer and/or supplier. This includes, but is not limited to:
• contact details such as your name, address, contact telephone number (mobile and landline) and email address;
• the nature of your enquiry;
• contractual details about the products or services we provide to you;
• locational data we get about where you are, such as data that may come from your mobile phone or the address where you connect a computer to the internet;
• behavioural details about how you use our products and services;
• technical details on the devices and technology you use;
• communications: what we learn about you from letters, emails and conversations between us;
• social relationships: your family, friends and other relationships;
• open data and public records details about you that are in public records, such as the electoral register, and information about you that is openly available on the internet;
• usage data: other data about how you use our products and services;
• documentary data details about you that are stored in documents in different formats, or copies of them. This could include things like your passport, drivers licence or birth certificate; and
• health information which may help us safeguard our employees, contractors and the wider public where appropriate.
We will only collect personal data which is needed to perform our services to you, and will not knowingly process your data outside of the reason that it was originally collected for.
Please note that we may require this information to be able to respond to your enquiry or to provide our services or marketing information to you. You can however at any time tell us to change or remove any personal data or to stop or restrict the processing of your personal data.
6. How we use your personal data
We may use the personal data collected/provided by you to:
1. ensure that content from our website is displayed in the most effective way for you and for your computer/device;
2. respond to your enquiry;
3. send you information about similar products and services;
4. notify you about changes to our services;
5. carry out analysis to make improvements to our website and/or services;
6. measure or understand the effectiveness of advertising we deliver to you and others;
7. monitor customer service including processing customer satisfaction surveys;
8. keep our records up to date;
9. develop and manage products and services, and what we charge for them;
10. define types of customers for new products or services;
11. test new products;
12. develop and carry out marketing activities;
13. study how our customers use our products and services;
14. develop and manage our brands;
15. manage how we work with other companies that provide services to us and our customers;
16. make and manage customer payments;
17. collect and recover money that is owed to us;
18. comply with laws and regulations that apply to us;
19. detect, investigate, report, and seek to prevent financial crime and fraud;
20. manage risk for us and our customers;
21. respond to complaints and seek to resolve them; and to
22. run our business in an efficient and proper way. This includes managing our financial position, business capability, planning, communications, corporate governance, and audit.
23. ensure the physical and mental wellbeing of our employees and contracted third parties.