Privacy Policy

1. Introduction

Giants Group Contracts (“we”, “us”, “our”) is committed to protecting the privacy and security of personal data. This Privacy Policy explains how we collect, use, and manage personal information when you interact with us, whether through our website, during project delivery, or as part of our business operations. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and guidance issued by the Information Commissioner’s Office (ICO). By using our website or engaging with our services, you confirm that you have read and understood this policy.

2. Information We Collect

Depending on your relationship with us, we may collect the following categories of personal data:

2.1 Contact & Business Information

• Name, job title, company name
• Email address and telephone number
• Business correspondence

2.2 Project & Operational Information

• Information required to deliver contracts and services
• Communication records with clients, suppliers, and subcontractors

2.3 Workforce & Subcontractor Data

• Identification details
• Qualifications and certifications (e.g. CSCS, NPORS, CPCS)
• Compliance documentation and right-to-work checks

2.4 Recruitment Data

• CVs, employment history, references
• Interview notes and application records

2.5 Health & Safety / Compliance Data

• Site access records
• Incident reports where applicable
• Training and compliance documentation

2.6 Technical & Website Data

• IP address, browser type, and device information
• Website usage behaviour (pages visited, time on site)

2.7 Cookies

• Data collected via cookies and similar technologies (see Section 9)

3. How We Use Your Data

We use personal data to:

• Deliver contracted works and manage projects
• Communicate with clients, subcontractors, and suppliers
• Meet legal obligations, including health & safety compliance
• Assess subcontractor suitability and maintain workforce records
• Manage recruitment processes
• Improve our website and services
• Send business-related communications where appropriate

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process personal data. We rely on the following:

PurposeLawful BasisDelivering contracts and servicesContractual necessityManaging client and supplier relationshipsLegitimate interestsHealth & safety and complianceLegal obligationRecruitment processingLegitimate interests / pre-contract stepsMarketing communicationsConsent (where required)Website analyticsLegitimate interests

We ensure that our legitimate interests are balanced against your rights and freedoms.

5. Data Retention

We only retain personal data for as long as necessary for the purpose it was collected, including to satisfy legal, accounting, or reporting requirements.

• Project/contract data – retained for the duration of the contract and typically up to 6 years thereafter
• Recruitment data – retained for up to 12 months unless consent is provided for longer
• General enquiries – retained for up to 6 months
• Compliance and H&S records – retained in line with legal obligations

Retention periods may vary where required by law or regulatory guidance.

6. Data Security

We take appropriate technical and organisational measures to protect personal data, including:

• Secure IT systems and restricted access controls
• Encryption and secure data transmission (e.g. SSL)
• Staff awareness and confidentiality obligations

We regularly review our security practices to ensure ongoing protection of personal data.

7. Sharing Your Information

We do not sell or commercially exploit personal data.

We may share data where necessary with:

• Clients, contractors, and subcontractors involved in project delivery
• Third-party service providers (e.g. IT systems, hosting, payroll)
• Professional advisors (legal, financial, compliance)
• Regulatory authorities where required by law

All third parties are required to process data securely and only for specified purposes.

8. Your Data Protection Rights

Under UK GDPR, you have the following rights:

• Right of access – to request a copy of your personal data
• Right to rectification – to correct inaccurate or incomplete data
• Right to erasure – to request deletion of your data where appropriate
• Right to restrict processing – in certain circumstances
• Right to object – to processing based on legitimate interests
• Right to data portability – where applicable
• Right to withdraw consent – at any time (where processing is based on consent)

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
👉 https://www.ico.org.uk

9. Cookies

Our website uses cookies to:

• Ensure the website functions properly
• Analyse traffic and user behaviour
• Improve user experience

You can control or disable cookies via your browser settings.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those websites and encourage you to review their policies separately.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our business practices.

The latest version will always be available on our website, along with the updated revision date.

12. Contact Us

For any questions about this Privacy Policy or to exercise your rights, please contact:

Giants Group Contracts
Unit 2a John Hall Close, Faversham, Kent, ME13 7TY
📞 0800 118 4006
📧 info@giantsgroupcontracts.co.uk
🌐 www.giantsgroupcontracts.co.uk