Forrest Joinery & Construction Contracts Ltd

Privacy notice

1. Introduction

Forrest Contracts Limited (the ‘Company’, ‘us’ or ‘our’) is a company registered in England with company number 4693400, VAT registration number 100 1090 02.

The Company’s registered office is Ramsgreave Business Park, Pleckgate Road, Brownhill. Blackburn BB1 8QW
The Company’s business is the provision of a general contracting and shop fitting service. Joinery manufacture and installation. of architectural joinery

The company is registered. as a data controller with the Information Commissioner in the UK with registration number ZA381361. This registration covers the uses of personal information set out below.

This privacy notice explains what personal information we collect about you, how we use it and the steps we take to ensure that it is kept secure, it also explains the rights you have in respect of the personal information we hold about you and how to contact us.

This privacy notice is subject to periodic review. The date at the top of this page reflects when it was last updated. We will notify you by email if we make any substantial changes to this notice.

2. What is Personal Information

Personal information is any information which we collect about you that can be used to identify you and is stored either electronically or in a usable filing system.

This will include information such as your name, contact details, date of birth and bank account details that is collected by us about you for any reason, whether it be in connection with a contract for supply of plant, or when you contact us with an enquiry.

It is our intention to provide you with as much information as possible about what we do with your personal information, so that when you provide personal information to us, you do so with an awareness of how it will be used.

3. Personal information we collect and what we do with it

We collect personal information about you from various sources including:

• from you when you contact us directly in a telephone conversation, or by other means of enquiry;

We aim to only collect information that is necessary for us to perform our business operations efficiently and effectively.

• Date of birth and gender
• Bank account and payment card information
• References for credit checking purposes
• CCTV footage

We use your information for the following

• To process orders, invoices and debt collection and arrange supply of materials

4. What data do you hold about me

Your personal information is stored on secure networks, protected by firewalls, virus checking, anti- spyware and security updates and there are regular secure back-ups. In certain instances, it may also be stored on local drives, in which case the relevant files are password encrypted.

We will ensure access to personal information is restricted to employees working within our company on a need to know basis. Training will be provided to any employees working within our company who need access to your personal data to ensure it is secured at all times.

5. Legal basis that permits us to use your information

Under data protection legislation we are only permitted to use your personal information if we have a legal basis for doing so as set out in the data protection legislation. We rely on the following legal bases to use your information:

• Where we need information to perform the contract we have entered into with you.

• Where we need to comply with a legal obligation.

• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

In more limited circumstances we may also rely on the following legal bases:

• Where we need to protect your interests (or someone else's interests).

• Where it is needed in the public interest or for official purposes.

We need some of your personal information in order to perform our contract with you. For example, we need to know your bank account details so that we can perform credit checks on you.

Where information is needed for this purpose if you do not provide it we will not be able to perform our contract with you.

6 How we share your information and how long we keep it

We won't share your data with any other third party unless legally obliged to do so
However, should you place an order with us, some details may have to be shared with the supplier in order to fulfill our services

These providers are controllers of your personal information and will have their own privacy notices on how they use your personal information, which we will have no control or say over. We recommend you contact them for details regarding your personal information use.

We do not currently transfer any data to countries outside of the UK and European Economic Area.

We keep your personal information for a period of up to 7 years from the last contact from you to us. At the end of that period, we will either automatically erase your personal information or we will communicate with you and give you the option for you to request that we erase your personal information.

7. Disclosure of personal information

We will not usually disclose your personal information other than as already explained in Section
6 above. However, there may be circumstances where we need to share personal information other than as anticipated in Section 6 above. These include:

6.1 where we are legally required to disclose the information. This includes sharing the personal information with tax authorities and law enforcement agencies for the purposes of the prevention and detection of crime;

6.2 where we need to disclose the personal information for the purpose of or in connection with any legal proceedings, or for the purpose of obtaining legal advice, or the disclosure is otherwise necessary for the purposes of establishing, exercising or defending legal rights;

6.3 disclosure is required to protect our interests, or someone else's interests (for example, to prevent fraud);

6.4 disclosure is necessary in the legitimate interests of a third party for the purposes of crime prevention and the prosecution of offenders (for example, where the police request to
view CCTV footage around the time of an incident or crime);

6.5 disclosure is necessary to protect your vital interests (for example if you are unwell at our premises, we may need to seek medical assistance);

6.6 it is to a third party for the purposes of providing administrative or processing services on our behalf. If such disclosure is required we will take steps to ensure that the third party protects the personal information in the same way that we do and notify you of any changes to this privacy notice; and

6.7 to any prospective purchaser of our business assets or organisation.

8. Your rights

You have rights in respect of your personal information and this section explains a bit more about those rights that are applicable to you, what we do with your personal information and when you can exercise them. If you would like more information about any of your rights, please contact us using the details set out section 11.

8.1 Accessing your personal information

We want you to fully understand and be comfortable with how we use your personal information. You can contact us at any time to ask whether we process any personal information about you. If we do hold or use your personal information in any way, you have the right to access that personal information. All we ask is that:

8.1.1 you make your request to access in writing to the contact details in section 11;

8.1.2 you verify your identity; and

8.1.3 you are fair and reasonable with how often you make this kind of request.

Please allow us up to one month from receipt of your request in order to provide a response.

8.2 Requesting more information

We hope that you can understand that it is very difficult to cover all the possible ways in which we collect and use personal information. We have tried to be as clear and as open as we can and will continue to update this privacy notice as our use of personal information develops.However, if you have any questions regarding our use of your personal information, we will be happy to give you peace of mind by answering any questions or providing any additional information that we can. If you do have any specific questions, or need anything explaining, please get in touch on the contact details in section 11.

8.3 Additional rights

You also have some additional rights that you may exercise as set out here. We may publish a policy from time to time, to explain how we will handle such requests and what you can expect from us when you make a request to exercise your rights. If we do publish any such policy, we will provide a link to it here. In each instance we may ask you to make your request in writing to the contact addresses in section 11 and provide verification of your identity.

8.3.1 You have the right to request that we rectify any inaccuracy about you that we may hold, in which case we may ask you to verify the corrected information (for example, we may ask for a recent utility bill for proof of change of address)

8.3.2 You have the right to request that we erase your personal information. Please be aware that we can only comply with such a request if

8.3.2.1 your personal information is no longer required for the purposes it was collected for (for example, we need your personal information to respond to a communication);

8.3.2.2 the collection, storage or use of the personal information by us is prevented by law;

8.3.2.3 your personal information is not required for the purposes of establishing, exercising or defending a legal claim such as in the conduct of legal proceedings.

8.3.3 You have the right to request that we restrict or refrain from processing your personal information:

8.3.3.1 for the time it takes us to verify the accuracy of your personal information where you have disputed its accuracy;

8.3.3.2 where the collection, storage or use of the personal information by us is unlawful but you decide not to ask for erasure;

8.3.3.3 where, we no longer need your personal information but you need them for the purposes of establishing, exercising or defending a legal claim;

8.3.3.4 for the time it takes to determine whether we have an have an overriding legitimate ground to continue to process your personal information, where you have exercised your right to object to processing.

8.3.4 You have the right to data portability in respect of information we have collected from you based on consent or for the reason of entering into a contract. If you exercise this right, we will transfer a copy of the information that you have provided to us at your request.

8.3.5 You have the right to object to our use of your personal information:

8.3.5.1 where we are using that information based on our legitimate interests, and where we do not have compelling overriding grounds to continue to use your personal information; or

8.3.5.2 at any time, where we use your personal information to send you the newsletter or any other type of direct marketing in which case it will no longer be used for that purpose, but may use it for another lawful purpose.

9. Complaints

You are important to us, and so is protecting your personal information. We have high standards when it comes to collecting and using personal information. For this reason, we take any complaints we receive from you about our use of your personal information very seriously and request that you bring any issues to our attention.

Where you are communicating with us for the purpose of making a complaint, we will only use your personal information to handle, investigate and respond to the complaint and to check on the level of service we provide. Where the complaint is about a member of our team, we may have to disclose your identity to whoever the complaint is about. You may let us know that you don't want information that identifies you to be disclosed and we will try to respect your request; however, it may not be always possible to handle a complaint on an anonymous basis.

If you are unhappy, you can also contact the Information Commissioner's office to make a complaint directly.