10-07-19 (To be reviewed annually)
On 10th July 2019 The Data Protection Act 1998 was replaced by The General Data Protection Regulation (GDPR).
We have a legal duty under the data protection act to prevent your information falling into the wrong hands. We must also ensure that data we hold is accurate, adequate, relevant and not excessive.
BDD Scaffolding is the Data Controller under the Act, which means that it determines what purposes personal information held, will be used for. It is also responsible for notifying the Information Commissioner of the data it holds or is likely to hold, and the general purposes that this data will be used for.
We have reviewed our Data protection policy, implemented our findings and informed our staff members.
Introduction: We are a family run local company, data collection relates to providing scaffolding services for customers who request our work. Customers range from private home owners to large corporate companies. Data requested includes:
- Names
- Addresses
- Site details if different from address
- Contact details (phone or email)
- Bank details (suppliers)
- Employee details
We never share information with anyone or any company and use it solely for purpose. This is to enable us to provide our customers with an efficient service, invoice in order for payment to be made, to pay our suppliers, to keep staff members up to date with training and for wages to be paid. We do not deal with sensitive personal data. We do not canvas for work or contact anyone that hasn’t made initial contact with us and requested us to do so.
Data stored:
- Xero, accounting software.
- Email (contact with customers and suppliers)
- Daily log book, Initial contact with customers ad communication between staff.
- Top sheets folders, Contain all relevant job information, invoice and payment details.
- Business receipts file, record of payments made to suppliers.
- Spreadsheet for PAYE.
- Our internet security is kept up to date. Information and records relating to service users will be stored securely and will only be accessible to authorised staff.
Information will be stored for only as long as it is needed or required statute and will be disposed of appropriately.
It is BDD Scaffolding's responsibility to ensure all personal and company data is non-recoverable from any computer system previously used within the organisation, which has been passed on/sold to a third party.
BDD Scaffolding regards the lawful and correct treatment of personal information as very important to successful working, and to maintaining the confidence of those with whom we deal.
We intend to ensure that personal information is treated lawfully and correctly.