Privacy Policy
What we hold about customers, contractors and trades, why we hold it, how long for, and what you can ask us to do about it.
Last updated [Date] · Version 1.0
This is a drafting template, not legal advice.
Complete every [bracketed] field, register with the ICO if you have not already, list your actual software suppliers, and have the finished policy reviewed before the site goes live.
1. Who we are
BIGBEST CONSTRUCTION LTD is a construction and electrical contractor registered in England and Wales under company number 16666260, with its registered office at 49 Mansell Road, Greenford, England, UB6 9EL.
Our registered activities are SIC 41202 (construction of domestic buildings), 43210 (electrical installation), 78109 (other activities of employment placement agencies) and 78200 (temporary employment agency activities).
For the purposes of the UK GDPR and the Data Protection Act 2018 we are the data controller for the personal data described in this policy. Our Information Commissioner's Office registration number is [ICO reference].
Data protection contact: info@bigbestltd.co.uk.
2. Who this policy covers
This policy applies to:
- Customers — homeowners, landlords and letting agents who enquire about or engage us for building or electrical work;
- Contractor clients — individuals at businesses we supply labour or trades to;
- Work-seekers and operatives — trades who apply to us, and those we engage or supply;
- Suppliers, referees and emergency contacts;
- Website visitors.
Where we supply operatives to a contractor's site, that contractor is a separate controller for the data it processes about those operatives on its own site — for example site induction and access records.
3. What personal data we collect
3.1 Customers
- Name, property address, postal address, email address and telephone numbers;
- Details of the property and the works — drawings, surveys, structural calculations, planning and building control references;
- Quotations, contracts, variations, invoices and payment records;
- Correspondence, site notes, and photographs of the works (see section 7);
- Certificates issued, including Electrical Installation Certificates and EICRs.
3.2 Work-seekers and operatives
- Name, address, date of birth, email address and telephone numbers;
- National Insurance number and, where we pay you, bank and payroll details;
- Right to work documentation — passport, visa, share code, biometric residence permit or similar;
- Trade, experience, CSCS card details, qualifications and certificates of competence;
- References, interview notes, timesheets, site feedback and assignment records;
- Next of kin or emergency contact details, and any accident or incident records.
3.3 Website visitors
- Whatever you type into an enquiry form;
- Technical data such as IP address, browser type, device type and pages viewed, where analytics are in use.
4. How we collect it
- Directly from you — by form, email, telephone, or at a survey or site visit;
- From your architect, structural engineer, surveyor, letting agent or managing agent where they are acting for you;
- From referees and previous employers, for work-seekers;
- From the Home Office online right to work service and the CSCS card checking service;
- From contractors we supply operatives to, where they give us feedback or attendance records;
- Automatically, through cookies and similar technologies on this website.
5. Why we use it, and our lawful basis
| Surveying, quoting and carrying out works | Performance of a contract; steps taken at your request before entering one |
| Issuing certificates and notifying building control | Legal obligation; performance of a contract |
| Engaging, paying and supplying operatives | Performance of a contract; legal obligation |
| Right to work and card verification | Legal obligation |
| Health, safety and accident records | Legal obligation; vital interests |
| Invoicing, accounts, tax and CIS returns | Legal obligation |
| Handling enquiries and managing accounts | Legitimate interests; performance of a contract |
| Marketing to businesses | Legitimate interests, subject to your right to object |
| Non-essential cookies, analytics and project photography | Consent |
Where we rely on legitimate interests we have assessed that our interest in operating the business does not override your rights and freedoms. You can ask us for a copy of that assessment.
6. Right to work and card records
Before an operative starts on any site, ours or a client's, we verify identity and right to work against original documents or the Home Office online right to work service, and we sight and record the CSCS card and any trade qualifications the role requires.
Copies are dated, signed and retained for the statutory period, which gives us — and the site we supply to — a record that the check was properly carried out. Cards are recorded with their expiry dates so they can be re-checked before they lapse.
7. Site and project photography
We photograph works in progress and on completion. Those photographs are used internally as a record of what was done and why, which forms part of our quality and dispute record and is covered by our legitimate interests.
We will not publish photographs of your property on our website, social media or marketing material without your consent, and you can withdraw that consent at any time. Where an image would identify a person, we will not publish it without their consent.
8. Who we share it with
- Building control bodies and competent person schemes, where the work must be notified or certified;
- Contractor clients, where we supply an operative to their site — name, trade and card status;
- Subcontractors and material suppliers, where they need delivery or access details to do their part of the job;
- Your professional team — architect, structural engineer, party wall surveyor or agent, where they are acting for you;
- Our software suppliers — accounting, estimating, email and hosting providers acting as our processors under written terms;
- HMRC and other authorities, including CIS reporting, where required by law;
- Professional advisers — accountants, lawyers and insurers, where necessary.
We do not sell personal data.
Current processors: [list your accounting, email, hosting and estimating providers].
9. International transfers
We aim to keep personal data within the UK and the European Economic Area. Where a supplier processes data outside those areas, we rely on UK adequacy regulations or the International Data Transfer Agreement or Addendum, together with any supplementary measures a transfer risk assessment requires. Details are available on request.
10. How long we keep it
- Enquiries that do not become jobs — [12 months], then deleted;
- Contract, quotation and invoice records — 6 years from completion, in line with the limitation period for simple contracts;
- Records relating to works executed as a deed — 12 years from completion;
- Electrical certificates and EICRs — retained for the life of the installation record, and at least until superseded;
- Payroll, CIS and tax records — 6 years after the end of the tax year to which they relate;
- Right to work documentation — 2 years after employment or supply ends;
- Accident and incident records — 3 years from the date of the entry, longer where the incident involves a young person or is reportable;
- Unsuccessful applicants — [12 months] from last contact, unless you ask us to keep you on file.
11. Cookies
Cookies are small text files placed on your device. We use:
- Strictly necessary cookies — required for the site to function and for security. These do not need your consent;
- Analytics cookies — to understand how the site is used so we can improve it. Set only with your consent;
- Marketing cookies — where used, to measure campaign performance. Set only with your consent.
You can control cookies through your browser settings and withdraw consent at any time. Blocking strictly necessary cookies may stop parts of the site working.
[If you add analytics or a consent banner, list each cookie, its purpose and its lifespan here.]
12. Your rights
Under the UK GDPR you have the right to:
- be told how your data is used, and to request access to a copy of it;
- have inaccurate data corrected, and incomplete data completed;
- have data erased, where there is no good reason for us to keep processing it;
- object to processing based on legitimate interests;
- object to direct marketing at any time, with no exceptions;
- request restriction of processing while a query is resolved;
- request transfer of your data to you or another controller in a structured, machine-readable format;
- withdraw consent at any time, where we relied on consent.
To exercise any of these, email info@bigbestltd.co.uk. We respond within one month and do not charge a fee unless a request is manifestly unfounded or excessive. We may ask you to verify your identity first.
13. How we keep it secure
We use appropriate technical and organisational measures, including access controls on a need-to-know basis, encryption in transit, multi-factor authentication on business systems, staff awareness training, and written processing terms with our suppliers.
We have procedures to deal with a suspected personal data breach and will notify you and the ICO where we are legally required to do so.
14. Automated decision-making
We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. Decisions about quotations, engagements and placements are made by people.
15. Complaints
If you are unhappy with how we have handled your personal data, please tell us first at info@bigbestltd.co.uk so we can put it right.
You also have the right to complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, or at ico.org.uk.
16. Changes to this policy
We review this policy regularly and will post any updates on this page with a revised date. Where changes are significant we will tell customers and operatives directly.
17. Contact us
BIGBEST CONSTRUCTION LTD, 49 Mansell Road, Greenford, England, UB6 9EL.
Email info@bigbestltd.co.uk · Telephone 07459 460117