- 17th May 2021
MEH Construction Management Ltd (MEH) needs to gather and use certain information about individuals but is committed to protecting your privacy.
Complies with data protection law and follows good practice.
Protects the rights of clients and staff.
Is open about how it stores and processes data.
Protects itself from the risks of a data breach.
The Data Protection Act 2018 and the UK General Data Protection Regulations (UK GDPR) describes how MEH must collect handle and store personal information. This is information that would directly identify an individual and these rules apply regardless of whether data is stored electronically or on paper.
The GDPR is underpinned by these important principles in processing personal data:
Processed lawfully, fairly and in a transparent manner.
Collected for specific, explicit, and legitimate purpose.
Adequate, relevant, and limited to what is necessary to the purpose for which is processed.
Accurate, relevant, and kept up to date.
Kept in a form that permits identification of Data Subjects for no longer than is necessary.
Processed in a manner that ensures appropriate security of data.
Must have appropriate measures in place to demonstrate compliance.
This policy applies to all data that our company holds relating to identifiable individuals, this will be:
In addition, we might also store:
National insurance numbers
UTR numbers for sub-contractors
Date of birth, gender, emergency contact details and performance reviews for employees
What information do we collect about you, and on what lawful basis?
Your data will be collected from you directly when we are asked to provide our services to you and/or your company, or to employ your services.
We will also collect data on our employees for their employment.
The lawful basis for processing the personal data we collect is for legitimate interests.
How do we store the data about you, and for how long?
The data we hold about you is kept on the MEH IT system and backed up to the cloud. We use the latest ESET antivirus, and software firewalls.
Where data is stored on paper it will be kept in a secure filing system and only accessible by authorised employees of MEH.
Your data will be held by MEH as necessary to satisfy the specified purpose for which it was collected. In addition, we will retain the minimum amount of information to fulfil out statutory obligations.
How will we use the information about you?
The processing of your data is necessary for the contract of services/work we will provide to you, or to employ your services. It may be because you have asked us to take specific steps before entering a contract. i.e., providing a quotation.
It will also be used to invoice for our services or pay you for your services to MEH.
We will only share your information with a third party directly involved with the services/work we are providing, or with HMRC.
However, if the law requires us to do so, we may share your data with:
The police and law enforcement agencies
Courts and tribunals
The Information Commissioners office (ICO)
Your personal data will be processed in the UK only.
Access to information and correction
The Law requires that MEH takes reasonable steps to ensure data is kept accurate and up to date and you have the right to request a copy of the information (known as a Subject Access Request (SAR) that we hold about you. MEH will not charge you for dealing with a SAR.
You are responsible for informing us about any changes in your personal information to help us ensure that such information is accurate and correct.
If you would like:
A copy of the information we hold about you.
You wish to request the restriction of information we hold about you.
You wish to update, correct, or delete any information we hold about you.
Please email firstname.lastname@example.org or write to us. MEH Construction Management Ltd
Creekmoor, Poole, Dorset.
How to contact us
Magnus Harding – Director 17.5.2021