GDPR Data Protection Policy
Scope
Tom Blackwell Contractors & Plant Hire Ltd retains certain information about its employees, customers, suppliers, and other users to allow it to monitor performance, achievements, health and safety, and to comply with manufacturer warranties. It applies to all data held by the company relating to identifiable individuals, even if that information falls outside the Data Protection Act 2018 and UK GDPR.
To be compliant with GDPR, information is collected lawfully and used fairly, stored safely, and not disclosed to any other person unlawfully. To do this, the company complies with the Data Protection Principles set out in the Data Protection Act 2018.
Principles
Tom Blackwell Contractors & Plant Hire Ltd, as far as reasonably practicable, complies with the Data Protection Principles to ensure all data is:
- Fairly and lawfully processed.
- Processed for a lawful purpose.
- Held for no longer than is absolutely necessary.
- Processed in accordance with the rights of the data subject.
- Protected in the appropriate way.
- Handled with full accountability.
All staff who work for or with Tom Blackwell have responsibility for ensuring data is collected, stored, and handled in a safe, secure, and appropriate manner.
Data Storage
Data stored electronically must be protected from unauthorised access, accidental deletion, and malicious hacking attempts. We are committed to protecting all Personal Data we collect and use. We take all reasonable precautions to prevent the loss, misuse, or alteration of your Personal Data held within our data repositories.
Data Accuracy
Tom Blackwell’s takes all reasonable steps to ensure data is kept accurate and up to date. The more important it is that the personal data is accurate, the greater the effort staff must put in to ensure its accuracy.
Right of access
Data subjects have the right to access information held by Tom Blackwell Contractors & Plant Hire Ltd. This is known as a Subject Access Request (SAR).
Submission
Requests should be made by email to info@tomblackwell.co.uk, addressed to the Data Governance team.
Timeframe
We will respond to all valid requests without undue delay and at the latest within one calendar month of receipt.
Identity Verification
To protect your data, we may ask for information to verify your identity before releasing any records. In such cases, the one-month response period begins once your identity has been confirmed.
Fees
This service is provided free of charge, though we reserve the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.
The Disclosure of Data for Other Reasons
In certain circumstances, the Data Protection Act allows personal data to be disclosed to government and law enforcement agencies without the consent of the data subject.
Providing Information
Tom Blackwells aims to ensure that individuals are aware that their data is being processed. Tom Blackwells will not give, sell, share, or trade any Personal Data to any party outside of the company except as outlined in this Policy or with appropriate consent. We may disclose Personal Data to a third party to:
- Comply with terms of trading, policies, or other contractual requirements.
- Prevent or respond to fraud, or protect the property and safety of Tom Blackwells, our customers, suppliers, or the public.
- Comply with the law or legal proceedings.
- Assist in a potential sale, transfer, or merger of the business.
- Support business activities via third-party service providers.
Website Data
By visiting our website, we may collect anonymous information (via cookies) about your computer and your visits, such as your IP address, geographical location, browser type, and length of visit. We use this information to improve the website's usability. This information may be recorded by a third party on our behalf.
CCTV
Tom Blackwells operates a CCTV network for the purposes of crime prevention, detection, and safeguarding personnel and property.
Review
This policy summarises the main Data Protection practices written in compliance with GDPR and the Data Protection Act 2018 and is reviewed on a regular basis by Senior Management. You should revisit this page occasionally to ensure you are happy with any changes.
