Privacy Notice

1. Introduction

This Privacy Notice explains how ONM Joinery Ltd collects, uses, stores, and protects your personal data. As part of our commitment to data protection, we have implemented measures to ensure compliance with the Data Protection Act 2018 and the General Data Protection Regulation (GDPR).

2. Data We Collect

We collect and process personal data in relation to our employees, subcontractors, clients, and suppliers, including:

Contact information: Name, address, email, phone number.
Employment details: Job title, employment history, qualifications, payroll information.
Financial details: Bank account information, payment details, invoices.
Health and safety information: Medical information, accident records, and risk assessments where relevant.
Contractual details: Information necessary to fulfil contracts or service agreements.

3. How We Use Your Data

We use personal data for the following purposes:

To manage employee contracts, payroll, and benefits.
To communicate with clients, suppliers, and subcontractors.
To comply with legal and regulatory requirements, including health and safety obligations.
To fulfil contracts or service agreements, including providing products and services to clients.
To ensure health and safety on job sites, including risk assessments and safety compliance.

4. Legal Basis for Processing

We process personal data based on the following legal grounds:

Contractual necessity: To fulfil employment contracts and service agreements.
Legal obligation: For compliance with health and safety, tax, and employment laws.
Legitimate interest: For the administration of company business, including operational management.
Consent: Where consent has been given for specific processing activities (e.g marketing communications).

5. Data Retention

We retain personal data only as long as necessary to fulfil the purpose for which it was collected or as required by law. When the data is no longer needed, we will securely delete or anonymise it.

6. Sharing Your Data

We may share personal data with third parties where necessary to provide services, comply with legal obligations, or for business administration purposes. This includes:

Third-party service providers: Such as payroll processors, IT support services, or legal advisors.
Government authorities: As required for tax or health and safety compliance.
Subcontractors: In relation to project work, where necessary for the completion of the service.

We do not sell or rent personal data to any third parties.

7. Your Rights

Under the GDPR, individuals have several rights regarding their personal data:

Right to access: You can request a copy of the personal data we hold about you.
Right to rectification: You can request corrections to any inaccurate or incomplete personal data.
Right to erasure: You can request the deletion of your personal data in certain circumstances.
Right to restrict processing: You can request the restriction of processing of your data under certain conditions.
Right to portability: You can request to have your data transferred to another organisation.
Right to object: You can object to the processing of your personal data in certain situations.

To exercise these rights or if you have concerns about how we handle your personal data, please contact us at info@onmjoinery.co.uk.

8. Data Security

We take appropriate technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or destruction. These measures include secure systems, access controls, and employee training on data protection.

9. International Transfers

We do not transfer personal data outside of the UK or European Economic Area (EEA). If such a transfer is required in the future, we will ensure appropriate safeguards are in place.

We may update this Privacy Notice from time to time to reflect changes in our data protection practices or legal requirements. We will notify employees, subcontractors, and clients of any significant changes and update the date of the notice accordingly.

10. IT Data Security and Sensitive Data

We understand the importance of safeguarding personal data and have a comprehensive approach to securing sensitive and personal data processed by us. All employees are expected to comply with our Data Protection Policy, which outlines the responsibilities for maintaining the confidentiality and security of personal data.

Responsibility: Employees handling personal or sensitive data are required to follow strict security protocols and procedures outlined in the company’s data protection policies.
IT Security Measures: We use advanced technology, including encryption, firewalls, anti-virus protection, and secure data storage practices, to protect the data we collect and process.
Monitoring: We routinely audit our IT systems and data handling practices to ensure compliance with GDPR and the Data Protection Act 2018.

Contact Us
If you have any questions or concerns about this Privacy Notice or the way we handle personal data, please contact us:

Oliver Moverley
ONM Joinery Ltd
Unit 5, Carr Grange Business Centre, Carr Grange, Doncaster, DN4 5HY
info@onmjoinery.co.uk