This Privacy Notice sets out the steps we follow when personal data is collected, such as our identity and how we intend to use the information, the lawful basis for processing the data, our data retention periods and that individuals have a right to complain to the ICO if they think there is a problem with the way we are handling their data.
Chambers Southern Ltd, Beaver Lodge Farm, Fontley Road, Titchfield, Fareham, Hampshire PO15 6QZ
The majority of the information we collect and hold that can be classed as ‘personal data’ is name, address and other contact details such as email address and telephone number of our existing customers, suppliers and other stakeholders, to enable us to provide the overseeing, installation and maintenance of street lighting equipment and supporting works including within road tunnel bores and associated areas. Additionally, we will hold the information required for collection and payment of invoices.
We also collect and hold information on staff and contractors necessary to manage and support our team.
For new prospects we use names, addresses and other details such as email addresses and telephone numbers, to contact individuals to gain consent to use their data for marketing purposes to generate new business. We only hold this information once we have obtained consent to retain their data and explained the purposes of doing so.
Personal data is collected when we are asked to provide a quotation for a project or job, answer enquiries on our services, or to engage the services of a supplier or contractor. This will be done by a member of our team, for example, an estimator, contracts manager, administrator etc. New prospect data may be collected in a number of ways such as from a prospect company’s web site, tender documents, meetings at exhibitions or business networking events.
Staff and contractor data is collected from the individual directly upon application to the company, then on an ongoing basis for the purposes of their employment or work allocation.
We use Google Analytics and Cookies on our web site to record quantitative data such as visitor numbers, pages viewed etc. but we do not track individuals online e.g., using Lead Forensics, or use inferred information through algorithms, or profile people by analysing data derived from combining other data sets.
We may record calls through our switch board, access to recorded calls is restricted and in the unlikely event that this captures any personal information this will be managed as outlined in our Data Protection Policy.
We are only collecting information we need and are going to use. We use the ‘personal data’ generally for carrying out our business as specialists providing installation and maintenance of street light furniture and design. For example, to provide a quotation, answer enquiries, provide competency information and generally communicate information relating to the company and our business.
We do not use your information for a particular purpose other than to carry out our business and communicate with you where appropriate, nor do we collect personal data by observation or draw inference from any individual’s behaviour. We will not share any data with third-parties for marketing purposes.
We may, however, use the data provided by an existing customer to provide a quotation, to send them information on a related product or service that we think may be beneficial to them. This would only be done in a reasonable way, and in a manner that they would expect.
We have specific retention times for each category of data which are set out in our Data Inventory Register.
Data will only be shared with external third parties when there is a specific business need,for example we might share data if we were to outsource an aspect of work, employee data will be shared with the pension provider and we are likely to share team competency information with main contractors or clients.
To cover this sharing of data, we have agreements in place with all the suppliers that may come into contact with any of the personal data we hold, to ensure the supplier is compliant with GDPR, and recognise their responsibilities when processing our data.
All reasonable steps are being taken to ensure data security both organisationally and technologically. As part of our data security measures, staff can only access our computer systems through password protected systems. We utilise brand-named backup solutions, which in turn means we are ‘sharing’ data with back up providers. They use strict security policies, strong industry-standard encryption, and world-class data centres to ensure information we share with them is protected. We utilize internal and external support to ensure data security, for example by keeping our virus protection software and firewall protection current, utilising encryption tools, and utilising IT security options available to us.
There should be no impact on the individual as a result of our processing. We aim to always be fair, transparent and ensure that people know how their information will be used. Data security is a key consideration and we do everything we can to protect the data hold.
This applies whether the personal data was obtained directly from the data subjects or from other sources.
Our use of data will not have any unjustified adverse effects on individuals. We are only using information in a way which they would expect. There are no adverse consequences of not providing information to us - for example, nonreceipt of a benefit.
The lawful bases for our data processing activity are Legitimate Interest & Contractor activities relating to staff, suppliers, existing customers and other stakeholders, and Consent for marketing communications purposes to new prospects.
In general terms, purpose of processing information is to enable us to provide, to support and manage our employees, promote and advertise our products and services, and maintain our own accounts and records.
is appropriate to most of our processing activity, in order to conduct our business as outlined above. We have balanced our commercial interests against the individual’s interests, rights and freedoms. Our processing has a minimal privacy impact.
the processing is necessary for a contract we have with an organisation, or we haven’t yet got a contract with an organisation, but they have asked us to do something as a first step (eg provide a quote) and we need to process personal data to do what they ask.
is the most appropriate legal basis for the processing of new prospect information. We would obtain consent in order to provide communications relevant to commercial requirements. We will always make it clear when requesting Consent what the data will be used for and have clear, simple ways for
We will explain our lawful basis for processing personal data when we answer a ‘subject access request’.
Although we are not required to formally designate a Data Protection Officer (DPO), we have a nominated person to take responsibility for data protection compliance, this will be the Manager.
Individuals have the right to request access to the data we hold on them by submitting a request to do so addressed to our DPO, who will provide details on any information retained by us as outlined in our Data Protection Policy.
We aim to adopt a privacy by design approach and will carry out a Privacy Impact Assessment (PIA), also referred to as ‘Data Protection Impact Assessments’ (DPIA), as part of our GDPR compliance system in situations where data processing is likely to result in high risk to individuals, for example:
If a DPIA indicates that the data processing is high risk, and we cannot sufficiently address those risks, we will consult the ICO to seek its opinion as to whether the processing operation complies with the GDPR.
If you have any questions about this privacy policy or our treatment of your personal data, please write to us by email to: office@chamberssouthern.co.uk or by post to: Chambers Southern Ltd, Beaver Lodge Farm, Fontley Road, Titchfield, Fareham, Hampshire PO15 6QZ.
We are registered with the ICO - registration reference – ZA132968
We always seek to treat an individual’s data fairly, however, individuals have the right to complain to our Quality Manager, who will investigate and respond accordingly within one month. Complaints should be sent addressed to: Business Manager, Chambers Southern Ltd, Beaver Lodge Farm, Fontley Road, Titchfield, Fareham, Hampshire PO15 6QZ.
Should the response not be resolved to the satisfaction of the complainant, the individual can also take up their issue with the Information Commissioner’s Office (the ICO) at the following address:
The Information Commissioner’s Office, Wycliffe House, Water Ln, Wilmslow SK9 5AF
Updated: Wednesday 14th September 2022