GDPR Policy CRUK
1. Identify the Lawful basis for processing personal data
(a) Consent: the individual has given clear consent for you to process their personal data for a specific purpose.
Customers understand we take their name, email address, phone number, address to provide them with work related details. No marketing emails will be sent to customers.
(b) Contract: the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract.
Commercial Roofing Uk Ltd requires client information in order to schedule work.
2. Your business has reviewed how you ask for and record consent. Your business has systems to record and manage ongoing consent.
Commercial Roofing Uk Ltd collects customer information to schedule work and confirm booking with client.
3. When collecting personal information, we tell people how we will use it
Customers are informed on the phone that their data is only being used for job scheduling.
A Privacy Statement is available on request.
4. Right of Access
All staff have been informed to pass onto Jacky Whitten if a customer requests a copy of their personal information. Jacky Whitten will provide all information to the enquirer, free of charge within 30 days.
5. Right to rectification and data quality
Any customer can have their data corrected/rectified within the companies records and email address book.
6. Right to erasure including retention and disposal
All customer data stored can be erased at their request. This process entails:
1. Finding and removing the email address and contact information.
7. Right to restrict processing
Your business has procedures to respond to an individual’s request to restrict the processing of their personal data.
Customer data is not shared with third parties. Commercial Roofing Uk Ltd does not enter into marketing and data stored is only for work related issues
8. Right to data portability
If a customer requests their personal data. Commercial Roofing Uk Ltd will send it in a simple email or spreadsheet format via email. Allowing them to easily transfer their data to various IT environments.
9. Right to Object
If a customer verbally or written requests to have their personal data removed, Jacky Whitten will be informed and act upon it.
10. Rights related to automated decision making including profiling
“Your business has identified whether any of your processing operations constitute automated decision making and have procedures in place to deal with the requirements.”
Not applicable to Commercial Roofing Uk Ltd.
Commercial Roofing Uk Ltd has a data protection policy that is explained to all members of staff and available in the office.
12. Processor contracts
Commercial Roofing Uk Ltd has contracts with Sage.
13. Information risks
As reflected in this document. The Commercial Roofing Uk Ltd management team understand the business impacts of data risks and manage them effectively.
14. Data Protection by Design
Commercial Roofing Uk Ltd has implemented measures to protect data. These include:
Passwords are not shared.
When staff leave, passwords are changed.
Only the management team have access to payment details and Sage.
15. Data Protection Impact Assessments (DPIA)
Commercial Roofing Uk Ltd will undergo DPIA’s if new tasks that require collecting personal data are undertaken.
16. Management Responsibility
The management team demonstrate support for data protection legislation and promote a positive culture of data protection compliance across the business.
17. Breach notification
If anyone suspects a breach of personal data within Commercial Roofing Uk Ltd, the following actions will take place.
1. Jacky Whitten to be informed immediately.
2. Investigation to begin immediately to determine what data has been breach.
3. Fixes/password changes will be rolled out, and the relevant members informed.
18. International transfers
“Your business ensures an adequate level of protection for any personal data processed by others on your behalf that is transferred outside the European Economic Area.”
Not applicable to Commercial Roofing Uk Ltd, who only operator in the UK.
T&C's - CRUK
Application and Entire Agreement
1. These Terms and Conditions apply to the provision of the services detailed
In our quotation (Services) by Commercial Roofing Uk Ltd, a company registered in England and Wales under number 08269858, whose registered office is at Airport House, Suite 43-45, Purley Way, Croydon, CR0 0XZ (we or us) to the person buying the services (you).
2. You are deemed to accepted these Terms and Conditions when you accept our quotation or from the date of any performance of the services (whichever happens earlier) and these Terms and Conditions and our quotation (the Contract) are the entire agreement between us.
3. You acknowledge that you have not relied on any statement, promise or representation made or given by or on our behalf. These Conditions apply to the Contract to the exclusion of any other terms that you try to impose or incorporate, or which are implied by trade, custom, practice or course of dealing.
4. A “business day” means any day other than a Saturday, Sunday or bank holiday in England and Wales.
5. The headings in these Terms and Conditions are for convenience only and do not affect their interpretation.
6. Words imparting the singular number shall include the plural and vice-versa.
7. We warrant that we will use reasonable care and skill in our performance of the services which will comply with the quotation, including any specification in all material respects. We can make any changes to the services which are necessary to comply with any applicable law or safety requirement, and we will notify you if this is necessary.
8. We will use our reasonable endeavours to complete the performance of the services within the time agreed or as set out in the quotation; however, time shall not be of the essence in the performance of our obligations.
9. All of these Terms and Conditions apply to the supply of any goods as well as services unless we specify otherwise.
10. You must obtain any permissions, consents, licenses or otherwise that we need and must give us access to any and all relevant information, materials, properties and any other matters in which we need to provide the services.
11. If you do not comply with clause 10, we can terminate the services.
12. We are not liable for any delay or failure to provide the services if this caused by your failure to comply with the provision of this section (Your Obligations).
13. The fees (Fees) for the services are set out in the quotation and are on labour and material basis.
14. You must pay us for any addition services provided by us that are not specified in the quotation in accordance with our then current, applicable daily rate in effect at the time of performance or such other rate as may be agreed between us.
15. The fees are exclusive of any applicable VAT and other taxes or levies which are imposed or charged by any competent authority.
Cancellation and Amendment
16. We can withdraw, cancel or amend a quotation if it has not been accepted by you, or if the services have not started, within any period (unless the quotation has been withdrawn.
17. If you want to amend any of the services you must tell us in writing as soon as possible. We will use reasonable endeavours to make any required changes and additional costs will be included if necessary in the fees and invoiced to you.
18. If, due to circumstances beyond our control, including those set out in the clause below (Circumstances beyond a party’s control), we have to make any change in the service or how they are provided, we will notify you immediately. We will use reasonable endeavours to keep any such changes to a minimum.
19. We will invoice you for payment of the fees either:
a. When we have completed the services; or
b. On the invoice dates agreed previous to start of services.
20. You must pay fees due within 30 days of the date of our invoice or otherwise in accordance with and credit terms agreed between us.
21. Time of payment shall be of the essence of the contract.
22. All payments due under these Terms and Conditions must be made in full without any deduction or withholding except as required by law and neither of us can assert any credit, set-off or counterclaim against the other in order to justify withholding payment of any such amount in whole or in part.
23. If you do not pay within the period set out above, we can suspend any further provision of the services and cancel any future services which have been ordered by, or otherwise arranged with you.
24. Receipts for payment will be issued by us only at your request.
25. All payments must be made in British Pounds (Stirling) unless otherwise agreed in writing by us.
Sub-contracting and Assignment
26. We can at any time assign, transfer, charge, subcontract or deal in any other manner with all or any of our rights under these Terms and Conditions and can be subcontracted or delegated in any manner any or all of our obligations to any third party.
27. You must not, without our prior written consent, assign, transfer, charge, subcontract or deal in any other manner with all or any of your rights or obligations under these terms and Conditions.
28. We can terminate the provision of the services immediately if you:
a. Commit a material breach of you obligations under these Terms and Conditions; or
b. Fail to make pay any amount due under the contract on the due date for payment; or
c. Are or become or, in our reasonable opinion, are about to become, the subject of a bankruptcy order or take advantage of any other statutory provision for the relief of insolvent debtor; or
d. Enter into voluntary arrangement under Part 1 of the Insolvency Act 1986, or any other scheme or arrangements is made with its creditors; or
e. Convene any meeting of your creditors, enter into voluntary or compulsory liquidation, have a receiver, manager, administrator or administrative receiver appointed in respect of your assets or undertakings or any part of them, any documents are filed with the court for the appointment of an administrator in respect of you, notice of intention to appoint an administrator is given by you or any of your directors or by a qualifying floating charge holder (as defined in para.14 of Schedule B1 of the Insolvency Act 1986), a resolution or petition presented to any court for your winding up or for the granting of an administration order in respect of you, or any proceedings are commenced relating to your insolvency or possible insolvency.
29. We reserve all copyright and any other intellectual property rights which may subsist in any goods supplied in connection with the provision of the services, we reserve the right to take any appropriate action to restrain or prevent the infringement of such intellectual property rights.
Liability and Indemnity
30. Our liability under these Terms and Conditions, and in breach of statutory duty, and in tort or misrepresentation or otherwise, shall be limited as set out in this clause.
31. The total amount of our liability is limited to the total amount of fees payable by you under the contract.
32. We are not liable (whether caused by our employees, agents or otherwise) in connection with our provision of the services or the performance of any of our other obligations under these Terms and Conditions or the quotation for:
a. Any indirect, special or consequential loss, damage, costs or expenses or;
b. Any loss of profits; loss of anticipated profits; loss of business; loss of data; loss of reputation or goodwill; business interruption; or, any other third party claims; or
c. Any failure to perform any of our obligations if such delay or failure is due to any clause beyond our reasonable control; or
d. Any loss caused directly or indirectly by any failure or your breach in relation to your obligations; or
e. Any losses arising directly or indirectly from the choice of services and how they will meet your requirements or you use of the services or any goods supplied in connection with the services.
33. You must indemnify us against all damages, costs, claims and expenses suffered by us arising from any loss or damage to any equipment (including that belonging to third parties) caused by you or your agents or employees.
34. Nothing in these Terms and Conditions shall limit or exclude our liability for death or personal injury caused by our negligence, or for any fraudulent misrepresentation, or for any other matters for which it would be unlawful to exclude or limit liability.
35. When supplying the services to the customer, the service provider may gain access to and/or acquire the ability to transfer, store or process personal data of employees of the customer.
36. The parties agree that where such processing of personal data takes place, the customer shall be the ‘data controller’ and the service provider shall be the ‘data processor’ as defined in the General Data Protection Regulation (GDPR) as may be amended, extended and/or re-enacted from time to time.
37. For the avoidance of doubt, ‘Personal Data’, ‘Processing’, ‘Data Controller’, ‘Data Processor’ and ‘Data Subject’ shall have the same meaning as in the GDPR.
38. The service provider shall only process personal data to the extent reasonably required to enable it to supply the services as mentioned in these Terms and Conditions or as requested by and agreed with the customer, shall not retain any personal data longer than necessary for the processing and refrain from processing any personal data for its own or for any third party’s purposes.
39. The service provider shall not disclose personal data to any third parties other than employees, directors, agents, sub-contractors or advisors on a strict “need-to-know” basis and only under the same (or more extensive) conditions as set out in these Terms and Conditions or to the extent required by applicable legislation and/or regulations.
40. The Service provider shall implement and maintain technical and organisational security measures as are required to protect personal data processed by the service provider on behalf of the customer.
41. Further information about the service providers approach to data protection are specified in its Data Protection Policy, which can be found on our website. For any enquires or complaints regarding data privacy, you can contact the project administrator at the following email address: firstname.lastname@example.org.
Circumstances Beyond a Party’s Control
42. Neither of us is liable for any failure or delay in performing our obligations where such failure or delay results from any cause that is beyond the reasonable control of that party. Such causes include, but are not limited to: power failure, Internet Service Provider failure, industrial action, civil unrest, fire, flood, storms, earthquakes, acts of terrorism, acts of war, governmental action or any other event that is beyond the control of the party in question. If the delay continues for a period of 90 days, either of us may terminate or cancel the services to be carried out under these Terms and Conditions.
43. All Notices under these Terms and Conditions must be in writing and signed by, or on behalf of, the party giving notice (Or a duly authorised officer of that party).
44. Notices shall be deemed to have been duly given:
a. When delivered, if delivered by courier or other messenger (including registered mail) during the normal business hours of the recipient;
b. When sent, if transmitted by fax or email and a successful transmission report is generated;
c. On the fifth business day following mailing, if mailed by national ordinary mail; or
d. On the tenth business day following mailing, if mailed by airmail.
45. All notices under these Terms and Conditions must be addressed to the most recent address, email address or fax number notified to the other party.
46. No delay, act or omission by a party in exercising any right or remedy will be deemed a waiver of that, or any other, right or remedy nor stop further exercise of any other right, or remedy.
47. If one or more of these terms and Conditions is found to be unlawful, invalid or otherwise unenforceable, that/those provisions will be deemed severed from the remainder of these terms and Conditions (which will remain valid and enforceable).
Law and Jurisdiction
48. This agreement shall be governed by and interpreted according to the law of England and Wales and all disputes arising under the agreement (including non-contractual disputes or claims) shall be subject to the exclusive jurisdiction of the English and Welsh courts.
Collectively all information that you submit to Commercial Roofing Uk Ltd via the Website. This Definition incorporates, where applicable, the definitions provided in the Data protection laws;
Data Protection Laws
Any application law relating to the processing of personal Data, including but not limited to the Directive 96/46/EC (Data Protection directive) or the GDPR, and any national implementing laws, regulations and secondary legislation, for as long as the GDPR is effective in the UK;
The General Data Protection Regulation (EU) 2016/679;
Commercial Roofing UK Ltd, we or us
Commercial Roofing Uk Ltd, a company incorporated in England and Wales with registered number 08269858 whose registered office is at Airport House, Suite 43-45 Purley Way, Croydon, Surrey CR0 0XZ;
User or You
Any third party that accesses the Website and is not either (i) employed by Commercial Roofing UK Ltd and acting in the course of their employmentOr (ii) engaged as a consultant or otherwise providing services to Commercial Roofing Uk Ltd and accessing the Website in connection with the provision of such services; and
The Website that you are currently using, www.commercialroofinguk.com, and any sub-domains of this site unless expressly excluded by their own terms and conditions.
a. The singular includes the plural and vice versa;
c. A reference to a person includes forms, companies, government entities, trusts and partnerships;
d. “Including” is understood to mean “including without limitation”;
e. Reference to any statutory provision includes any modification or amendment of it;
4. For Purposes of the applicable Data Protection Laws, Commercial Roofing Uk Ltd is the “data controller”. This means that Commercial Roofing Uk Ltd determines the purposes for which, and the manner in which, your data is processed.
5. We may collect the following data, which includes personal data, from you:
b. Job Title;
c. Contact Information such as email address and telephone numbers;
How we collect data
6. We collect data in the following ways:
a. Data is given to us by you; and
b. Data is collected automatically.
Data that is given to us by you
7. Commercial Roofing Uk Ltd will collect your data in a number of ways, for example:
a. When you contact us through the website, by telephone, post, email or through any other means;
Data that is collected automatically
8. To the extent that you access the website, we will collect your data automatically, for example:
a. We automatically collect some information about your visit to the Website. This information helps us to make improvements to Website content and navigation, and includes your IP address, the date, times and frequency with which you access the Website and the way you use and interact with its content.
Our Use of Data
10. We may use your data for the above purposes if we deem it necessary to do so for our legitimate interests. If you are not satisfied with this, you have the right to object in certain circumstances (see the section headed “Your rights” below).
Who we share Data with
11. We may share your data with the following groups of people for the following reasons:
Keeping Data secure
12. We will use technical and organisational measures to safeguard your data, for example:a. Access to your account is controlled by a password unique to the administrator.b. We store data on secure servers.
13. Technical and organisational measures include measures to deal with any suspected data breach. If you suspect any misuse or loss or unauthorised access to your data, please let us know immediately by contacting us via this e-mail address: email@example.com.
14. If you want detailed information from get Safe Online on how to protect your information and your computers and devises against fraud, identity theft, viruses and many other online problems, please visit www.getsafeonline.org. Get Safe Online is supported by HM Government and leading businesses.
16. Even if we delete your data, it may persist on backup or achival media for legal, tax or regulatory purposes.
17. You have the following rights in relation to your data:
a. Right to Access – The right to request (i) copies of the information we hold about you at any time, or (ii) that we modify, update or delete such information. If we provide you with access to the information we hold about you, we will not charge you for this, unless your request is “manifestly unfounded or excessive”. Where we are legally permitted to do so, we may refuse your request. If we refuse your request, we will tell you the reasons why.
b. Right to Correct – the right to have your data rectified if it is inaccurate or incomplete.
c. Right to Erase – the right to request that we delete or remove your data from our systems.
d. Right to restrict our use of your data – the right to “block” us from using your data or limit the way in which we can use it.
e. Right to data portability – the right to request that we move, copy or transfer your data.
f. Right to Object – the right to object to the use of your data including where we use it for our legitimate interests.
18. To make enquiries, exercise any of your rights set out above, or withdraw your consent to the processing of your data (where consent is our legal basis for processing your data), please contact us via this email address: firstname.lastname@example.org.
19. If you are not satisfied with the way a complaint you make in relation to your data is handled by us, you may be able to refer your complaint to the relevant data protection authority. For the UK, this is the Information Commissioner’s Office (ICO). The ICO’s contact details can be found on their website at https://ico.org.uk/.
20. It is important that the data we hold about you is accurate and current. Please keep us informed if your data changes during the period for which we hold it.
Links to other Websites
Changes of Business Ownership and Control
23. We may also disclose data to a prospective purchaser of our business or any part of it.
24. In the above instances, we will take steps with the aim of ensuring your privacy is protected.
27. Unless otherwise agreed, no delay, act or omission by a party in exercising any right or remedy will be deemed a waiver of that, or any other, right or remedy.
28. This agreement will be governed by and interpreted according to the law of England and Wales. All disputes arising under the agreement will be subject to the exclusive jurisdiction of the English and Welsh courts.
You may contact Commercial Roofing Uk Ltd by email at: email@example.com