Data Protection Policy
1. Policy Statement
In the course of our activities, Lloyd Concrete Co. Limited collects, stores, and processes personal information about employees, clients, suppliers, subcontractors, and other relevant parties. We are dedicated to upholding data protection and ensuring the security of personal information.
2. About the Policy
This policy outlines the basis on which Lloyd Concrete Co. Limited processes personal data, emphasizing compliance with Data Protection Legislation. It is not a part of any employment contract and may be amended as needed. This policy extends to all employees and covers various data protection principles and procedures.
3. Definitions of Data Protection Terms
Data: Information held electronically or in physical filing systems.
Data Subjects: Individuals about whom personal data is collected.
Personal Data: Information related to a living individual.
Data Controllers: Individuals or organizations determining the purpose and manner of data processing.
Data Processors: Persons or organizations processing personal data on the instruction of a data controller.
Data Users: Lloyd Concrete Co. Limited employees processing personal data.
4. Data Protection Principles
All personal data processing must adhere to the following principles:
Processed fairly, lawfully, and transparently.
Processed for specified, explicit, and legitimate purposes.
Adequate, relevant, and limited to the purpose.
Accurate and up-to-date.
Not kept longer than necessary.
Processed securely.
Not transferred outside the European Economic Area (EEA) without adequate protection.
5. Fair, Lawful, and Transparent Processing
Data processing must align with the rights of data subjects under the Data Protection Legislation. Legal grounds for processing include consent, contractual obligations, legal compliance, and legitimate interests.
6. Processing for Specified, Explicit, and Legitimate Purposes
Personal data will only be processed for the original specified purpose unless approval is obtained for an alternative purpose.
7. Adequate, Relevant, and Limited to the Purpose
Only necessary personal data should be collected, and access should be restricted to authorized personnel.
8. Accurate Data
Efforts will be made to ensure data accuracy, with regular checks and updates.
9. Data Retention
Personal data will not be kept longer than necessary, following the guidelines outlined in the Lloyd Concrete Co. Limited Document Retention policy.
10. Data Security
Security measures, including physical and electronic safeguards, will be implemented to protect personal data from unauthorized access or loss.
11. Data Subject's Rights under Data Protection Legislation
Data subjects have rights to access, prevent direct marketing, rectify inaccurate data, object to processing, and withdraw consent.
12. Disclosure and Sharing of Personal Information
Personal data may be shared with authorized personnel, and disclosure may occur in specific circumstances, such as business transactions or legal obligations.
13. Internal Personal Data Processing
Data users processing personal data on behalf of Lloyd Concrete Co. Limited must adhere to this policy and other applicable company policies.
14. Dealing with Subject Access Requests
Formal requests for personal data access must be made in writing, and responses will comply with statutory timeframes.
15. Notifications to, and Communications with, the Information Commissioner's Office (ICO)
The Data Protection Administrator is responsible for ICO compliance, managing notifications, and handling correspondence from the ICO.
16. Implementation, Enforcement, and Reporting Data Privacy Incidents
All employees must promptly report data security incidents to the Data Protection Administrator within 72 hours. Potential breaches will be addressed promptly, and service providers must notify Lloyd Concrete Co. Limited of any breaches.
17. Queries/Concerns
For queries or concerns related to this policy, contact the Data Protection Administrator, James Lloyd, at Tel: 07966 151920 or email: info@lloydconcrete.co.