Privacy Policy

Atkinson Building Contractors Ltd is committed to protecting and respecting your privacy and complying with the current UK General Data Protection Regulation. This statement sets out our privacy policy and explains what we do with the personal information that we collect from our users and clients.

Please read this policy carefully. If you have any questions, our contact details are provided at the bottom of the page. By using our services, you agree to the processing of your data as set out in this policy.

Types of Personal Data we collect and the reasons why

We may collect your personal data when you or your representative contacts us in person, via our website, by telephone, post, email or social media for some or all of the purposes set out in the table below.

Type Of Data Purpose Legal Basis
Contact details, including; Name, address, telephone number, email address • For the supply of services and fulfilment of contract;
• To respond to complaints or enquiries;
• To respond to and deal with Environmental, Health and Safety incidents;
• If the company / organisation you represent orders services and / or goods from us or if we order services and / or goods from the company / organisation you represent, we will be in contact with you to deal with any questions or complaints regarding such services and / or goods.		 • Performance of contract;
• In compliance with a legal obligation to deal with incidents;
• Legitimate interests in managing our relationship with you as a partner, supplier or client / customer
Accounting details i.e. bank details • To process data in connection with invoicing, anti-fraud purposes and fulfilment of contract • Performance of contract;
• Legitimate interests in managing our relationship with you as a partner, supplier or client / customer
Company registration number and unique tax reference number where applicable, or a sole trader’s National Insurance number, (instead of a company registration number). • For the supply of services and fulfilment of contract • For the purposes of setting up the business relationship;
• Performance of contract;
• Legitimate interests in managing our relationship with you as a partner, supplier or client / customer
Photographic, audio or video recordings • Online/social media
• News/press
• Media		 • Legal requirement to obtain permission of the subject

In the event we were to process your personal data for any other purpose than those specified above, we will inform you about this by updating this policy or at the point of collecting the personal data.

If we process your personal data for any purpose which, according to applicable legislation, requires your consent, we will collect your consent before commencing such processing.

Keeping Your Information Private

Your information will only be used for legitimate business purposes. We will not transmit your information to other parties unless it is required to fulfil contracted works. All data disclosures will only be relevant to the particular requirements of the contract works. This information will be handled in accordance with the guidelines of the General Data Protection Regulation and will only be relevant to the requirements of providing services.

We may also have a requirement to disclose your personal data to third parties, for example the police, HSE, HMRC, Building Authorities, NICEIC, GAS Safe and other public authorities and regulatory / governing bodies.

However, we will never sell your information to third parties.

Your personal data will not be transferred outside of the UK or the EEA.

We will hold the digital and physical files on record as required in line with statutory limitation periods and the relevant contracts, which may be up to 25 years. These are stored on secure servers and in secure on-site archive store.

This data is processed onto our systems, and continuously backed up onto remote servers and 3rd party secure storage using the latest technology.

Relevant Legislation

Along with our business and internal computer systems, this website is designed to comply with the following national and international legislation with regards to data protection and user privacy:

  • UK Data Protection Act 2018 (DPA)
  • EU Data Protection Directive 1995 (DPD)
  • EU General Data Protection Regulation 2018 (GDPR)

This site’s compliance with the above legislation, all of which are stringent in nature, means that this site is likely compliant with the data protection and user privacy legislation set out by many other countries and territories as well.

Web Browser Cookies

Cookies are small files stored in your browser that many websites use to remember information about your visit.

This website does not use cookies for analytics, advertising or tracking, and we do not use Google Analytics or any similar third-party service.

To understand how the site is used, we run Umami, a privacy-focused analytics tool hosted on our own server. It records aggregated information such as which pages are viewed, the type of device used and the country a visit came from. It does not set cookies, does not store your IP address, and does not create a profile of you or track you across other websites. This information cannot be used to identify you, and it is never shared with third parties.

Our security and anti-spam provider, Cloudflare, may set strictly necessary cookies to protect the site against automated abuse. These are required for the site to work securely and are not used for analytics or advertising.

If you want to learn more about cookies and how to control or delete them, please visit www.aboutcookies.org.uk for a detailed guide.

Personal Information That This Website Collects And Why We Collect It

This website collects and uses personal information for the following reasons:

Contact forms and email links

Should you contact us using the form on our Contact page, we collect the information you provide so that we can respond to your enquiry. Form submissions are retained in our content management system and notification emails are sent to our team. We use Cloudflare Turnstile to help distinguish genuine enquiries from automated spam. You can also contact us directly by email or telephone.

Career applications

Should you apply through the form on our Careers page, we collect the information you provide so that we can consider and respond to your application. If you choose to upload a CV, it is stored in private encrypted object storage and is available only to authorised staff through our content management system. CV files are not attached to notification emails or placed in the public website media library. Applications and CVs are retained only for the agreed recruitment period and are then securely deleted. We use Cloudflare Turnstile to help distinguish genuine applications from automated spam.

About This Website's Server

This website and its content management system run on a virtual private server in a United Kingdom data centre. The website, content management system and database run as separate managed services on that server.

Server Provider Certifications and Standards

The server provider publishes the following certifications and standards for its relevant infrastructure services. Certification scope varies by product and location.

  • ISO/IEC 27001:2022 — Information security management systems.
  • ISO/IEC 27017:2015 — Information security controls for cloud services.
  • ISO/IEC 27018:2019 — Protection of personal data in public cloud services.
  • ISO/IEC 27701:2019 — Privacy information management systems.
  • ISO 50001 — Energy management certification for the provider's United Kingdom data centre.
  • European Commission Code of Conduct for Data Centre Energy Efficiency — The provider reports participation for its European data centres.

Security and Data Protection

The server uses restricted administrator access, key-based SSH authentication and firewall controls. The website database is not exposed directly to the public internet. Encrypted backups are stored separately from the server.

Cloudflare provides DNS, HTTPS proxying, spam protection and object storage. Public website media and private CV files use separate storage locations. Private CV files are not publicly accessible. SMTP2GO sends website notification emails. Access to personal data is restricted to authorised staff and technical administrators.

Data Breaches

We will report any unlawful data breach of this website’s database or the database(s) of any of our third party data processors to any and all relevant persons and authorities within 72 hours of the breach if it is apparent that personal data stored in an identifiable manner has been stolen.

Data Controller

The data controller of this website is: Alex Atanasova, 1 Brancana Court, East Lakes Business Park, Penrith, Cumbria. CA11 9BB

Your Rights

In accordance with applicable data protection legislation, you have the right, at any time,

  • to be granted access to the personal data we processed about you.
  • to rectification of inaccurate personal data,
  • to request that we cease processing and delete your personal data,
  • to limit the processing of your personal data,
  • to exercise your right to data portability and
  • to object to the personal data processing.

It should be noted that in some cases, there are specific exemptions and restrictions regarding these rights. In regard to deletion, the right will not apply where the processing is necessary:

  • for exercising the right of freedom of expression and information;
  • for compliance with a legal obligation;
  • for the establishment, exercise or defence of legal claims.

With relation to limiting the processing of personal data, the personal data may still be stored and processed:

  • with the data subject's consent;
  • for the establishment, exercise or defence of legal claims; or
  • to protect the rights of another natural or legal person.

You also have the right, at any time, to lodge a complaint with the UK supervisory authority; the Information Commissioners Office (ICO). www.ico.org.uk.

Changes To Our Privacy Policy

This privacy policy may change from time to time inline with legislation or industry developments. We will not explicitly inform our clients or website users of these changes. Instead, we recommend that you check this page occasionally for any policy changes.