ACL Engineering Ltd is a controller of your personal data. We respect your data and your privacy is important to us.
This Privacy Notice explains what personal data we collect and how it is used. This notice also explains what rights you have over your personal data and how you can use those rights.
You have the right to object to some of the processing which ACL Engineering carries out. More information about your rights and how to exercise these is set out in the “Your rights” section of this notice.
ACL Engineering Ltd registered address is Anglia House, Sandown Road, Watford, WD24 7UA.
We use your data to perform our contract with you, to comply with laws and regulations, and for safety and security purposes.
We may contact you to keep you updated on new or more efficient equipment and to remind you when your current equipment is due for service.
We will use your data to comply with laws and regulations. We may use your data to prevent and detect crime, such as fraud.
We collect information when you contact us requesting a quote or other information and during your contract with us.
We may receive your contact details from third parties to which you have requested information on the products /services we provide.
We receive information from the following third parties:
We are allowed to use your data only if we have a proper reason to do so such as:
ACL Engineering needs to hold and process personal data relating to its clients in order to keep proper records, monitor payment, performance and contractual obligations.
A legitimate interest is when we have a business or commercial reason to use your data. This involves us making an assessment of when we can rely on our legitimate interests. For more information on this assessment please e-mail us at GDPR@aclengineering.co.uk.
We have set out below how and why we may use your personal information and the legal basis we rely on. This is also where we tell you what our legitimate interests are.
When you buy our products and/or services, we use your information to fulfil our contract with you.
We take information to communicate with you, send you goods, perform a service, invoice you and comply with our legal obligations.
To run our business and pursue our legitimate interests, we use your information.
Our legitimate interests include keeping our records up to date, fulfilling our legal, compliance and contractual duties, working out which of our products/services may interest you and telling you about them.
To comply with law, assess and uphold legal or contractual rights and claims:
When you don’t have a contract with us but have consented to be contacted by us
We may contact you to inform you of our products/services that may interest you and telling you about them.
You can change your mind at any time, just let us know that you no longer want to receive communication from us, by e-mail to GDPR@aclengineering.co.uk or post to: GDPR, Steve Smithard, ACL Engineering Ltd, Anglian House, Sandown Road, Watford, WD24 7UA.
When the law requires us to process your data we will do so. This can include
When required for compliance with H&S legislations we share your data with our suppliers. We my share your data with HSE.
For some activities ACL Engineering Ltd uses third party service providers. When these service providers ask for data from you we may share information with them.
We use third party providers for the following services:
Personal data may be shared with government authorities and/or law enforcement officials for the prevention or detection of crime, if required by law or if required for a legal or contractual claim.
We always look to keep your data for the minimum time in line with data protection principles and our processes. We keep your data whilst you are a client and for five years after providing a product/service or quotation.
We may keep your data for longer if we cannot delete it for legal, regulatory or technical reasons.
You have rights over your personal data.
Some rights, however, may be limited. We may be obliged by law or regulation to keep information. We must respect other people’s privacy as well, which means we may need to redact or remove information where it includes personal data about someone else, even if it is connected to your data. On occasion there may be a compelling legitimate interest to keep processing data.
If you want a copy of your data, to object to how we use your data, or ask us to delete it or restrict how we use it or, please see ‘Contact details’ below. To process a request from you, we may need to confirm your identity to ensure we’re accessing the right data.
You have a right to complain to an EU data protection authority. This can be where you live, work or where the matter occurred. In the UK, the authority is the Information Commissioner’s Office (the “ICO”).
To exercise any of your rights and for any queries relating to data protection please contact us at GDPR@aclengineering.co.uk.
If we make any changes or updates to this notice we will communicate these.
Useful link from ICO explaining GDPR – ico.org.uk