Data Protection Policy.

1. Introduction

At The Complete Carpentry Company (UK) Ltd, we are committed to processing personal data transparently, responsibly, and in accordance with applicable data protection laws. This policy sets out how we handle the personal data of our clients, suppliers, employees, and others.

2. Scope

This policy applies to all personal data processed by The Complete Carpentry Company (UK) Ltd, regardless of the medium on which that data is stored.

3. Compliance with Data Protection Principles

We adhere to the principles relating to processing of personal data set out in the General Data Protection Regulation (GDPR) which require personal data to be:

  • Processed lawfully, fairly, and transparently.

  • Collected for specified, explicit, and legitimate purposes.

  • Adequate, relevant, and limited to what is necessary.

  • Accurate and kept up to date.

  • Retained only for as long as necessary.

  • Processed in an appropriate manner to maintain its integrity and confidentiality.

4. Data Subject Rights

Individuals have rights regarding their personal data. These include rights to:

  • Request access to their personal data.

  • Request correction of inaccurate data.

  • Request erasure.

  • Object to processing.

  • Data portability.

  • Withdraw consent.

  • Complain to a supervisory authority.

5. Data Security

We have implemented appropriate technical and organisational measures to ensure a high level of security, safeguarding personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage.

6. Third-Party Processors

Any third-party processors used by The Complete Carpentry Company (UK) Ltd are carefully vetted to ensure their compliance with the GDPR and other data protection regulations. They will only process personal data based on our instructions and are subject to a duty of confidentiality.

7. Data Breaches

In case of a data breach, we have an established protocol to assess the scope and impact. Where there is any risk to the rights and freedoms of data subjects, we will notify the Information Commissioner's Office (ICO) and the impacted individuals without undue delay.

8. Data Retention

We retain personal data for no longer than is necessary for the purposes for which it was processed. The length of time for which we retain information depends on the purposes for which we collected and use it and/or as required to comply with applicable laws.

9. Training and Review

All The Complete Carpentry Company (UK) Ltd staff receive data protection training. This policy is reviewed annually or whenever changes to data protection laws or practices dictate.

10. Contact

For further information on our Data Protection Policy or any data-related inquiries, please contact our Data Protection Officer at info@thecompletecompany.co.uk.