Privacy Notice

1. Who We Are

Romack Construction Limited (“we”, “our”, “us”) is a construction company providing commercial and residential building services.

We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Romack Construction Limited is the data controller responsible for your personal data.

2. What Information We Collect

We may collect and process the following personal data:

For Customers and Website Enquiries:

Name
Address
Email address
Phone number
Job site address
Quotation and project details
Payment and invoice details

For Employees/Subcontractors:

Name
Contact details
National Insurance number
Bank details
Emergency contact information
Qualifications, certifications and training records

We only collect personal data that is necessary to provide our services or meet our legal obligations.

3. How We Use Your Information

We use your personal data to:

Respond to enquiries and provide quotations
Enter into and perform contracts
Manage construction projects and site access
Send invoices and process payments
Communicate about works and scheduling
Comply with legal and regulatory requirements (e.g., tax, health and safety)
Maintain internal business records

We do not sell or trade personal data.

4. Lawful Basis for Processing

Under UK GDPR, we process your data based on one or more of the following lawful reasons:

To perform a contract with you
To comply with legal obligations
With your consent (where required)
For our legitimate interests (e.g., project management, security)

5. How We Share Your Data

We may share your information with:

Accountants or payroll providers
Subcontractors (only where necessary for your project)
Legal or regulatory authorities, if required
IT and cloud service providers who help us run our business securely
HMRC or other regulatory authorities where required by law

We do not sell personal data. Any third parties we engage are required to process personal data lawfully and securely.

6. Data Security and Retention

We take appropriate technical and organisational measures to protect personal data. We keep personal data only as long as necessary for the purposes it was collected, or as required by law, including to satisfy legal, accounting, or reporting requirements.

For example:

Financial and tax records are typically retained for 6 years in line with HMRC requirements.
Health and safety documentation may be retained longer where legally required.

7. Your Rights

Under UK GDPR, you have the right to:

Request access to your personal data
Request correction of inaccurate data
Request deletion of your data (where applicable)
Object to or restrict processing
Request transfer of your data
Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at: tori@romackconstruction.co.uk

We may need to verify your identity before responding.

8. Contact Us

If you have questions or concerns about this Privacy Notice or how we handle your data, please contact:

Victoria Mackenzie
Romack Construction Limited
Email: tori@romackconstruction.co.uk
Phone: 01233 621642

9. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

www.ico.org.uk

Phone: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns first.

10. Changes to This Privacy Notice

We may update this Privacy Notice from time to time. The latest version will always be available on our website.