“Richard Jones Building Ltd” is fully committed to compliance with the requirements of the General Data Protection Regulations (GDPR).
Our Data Protection Policy outlines our commitment to protecting personal data and implementing its collection and use.
“Richard Jones Building Ltd” may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from 1st June 2018.
What we collect
We will only collect information you supply to us which is restricted to:
- name and job title
- email address
- telephone number
- property details such as address and postal code
What we do with the information we gather
We require this information for the following reasons:
- to enable Richard Jones Building Ltd to provide services which have been requested
- for the performance of the contract
- to reply to an enquiry
- to respond to a request for a fee quotation
- to update records
- to comply with regulatory or government body requests
- we may use the information to improve our products and services.
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online. We will not share or sell data for marketing purposes with third parties except where further specialist advice is required to deliver our services for which we will seek your permission.
If you contact us we will keep a record of email correspondence which will be stored securely on our email system but with the individual’s right to withdraw consent and such emails at anytime by contacting email@example.com
Archive material which contains personal data is stored in a secure unit. This is destroyed after 15 years to comply with Professional Indemnity Insurance requirements and UK legislation. Data which is no longer required is destroyed securely by shredding.
Under GDPR regulations Richard Jones Building Ltd will collect and use personal data strictly for legitimate business processes. Personal data will be processed lawfully, fairly and in a transparent manner. The data will be limited to what is strictly necessary to carry out legitimate business and not be further processed.
Personal data that is inaccurate will be erased or rectified without delay.
- Individuals have the right to be informed
- Individuals have the right to access details of personal information held on our systems
- The right to request rectification if data is inaccurate
- The right to request erasure
- The right to restrict processing
- Data portability
- The right to object to processing
Minor data breaches will be reported internally to be investigated fully by Management and if appropriate our IT expert.
Major breaches where they are ‘likely to result in a risk to the rights and freedoms of individuals’ have to be reported within 72 hours of the breach.
This policy will be reviewed regularly, and updates will be placed on our web page http://www.rjbuilding.co.uk/
Although we take appropriate measures to ensure data confidentiality, integrity and availability the use of the internet and our website is at the user’s risk.
Complaints related to the processing of personal data can be addressed to the Information Commissioner’s Office (ICO).