GDPR

General Data Protection Regulation-Privacy Notice

Cardigan Sand and Gravel Co Ltd (‘we’ or ‘us’ or ‘our’) gather and process your personal information in accordance with this privacy notice and in compliance with the relevant data protection Regulation and law (GDPR May 2018). This notice provides you with the necessary information regarding your rights and obligations, and explains how, why and when we collect and process your personal data.

Cardigan Sand and Gravel Co Ltd registered office is at Cnwc Y Saeson, Penparc, Cardigan, Ceredigion SA43 1RB. Our Data Protection Officer is Mike McGee, who can be contacted on 01239 612342 and at quarry@cardigansand.co.uk.

Information that we collect

CSG processes your personal information to our legal, statutory and contractual obligations and to provide you with our services. We will never collect any unnecessary personal data from you and do not process your information in any way, other than already specified in this notice. We will never provide your personal data to a third party for marketing purposes.

The personal data that we collect may include:-

  • Name • Home address/ site address • Personal Email • Business Email • Home Telephone Number • Work Telephone Number • Mobile telephone Number • Financial information • Mineral Tax Relief Form Declaration.

We collect information in the following ways:-

  • Initial visit at home or on site • Contact made to you via, post, email or telephone where you provide any personal data

 How we use your Personal Data

CSG takes your privacy very seriously and will never disclose, share or sell your data without your consent, unless required to do so by law. We only retain your data for as long as is necessary and for the purpose specified in this notice.

Your Rights

You have the right to access any personal information that CSG processes about you and to request information about:-

  • What personal data we hold about you • The purpose of the processing • The categories of personal data concerned • The recipients to whom the personal data has/will be disclosed • How long we intend to store your personal data for • If we did not collect the data directly from you, information about the source

If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information and we will strive to update/correct it as quickly as possible; unless there is a valid reason for not doing so, at which point you will be notified.

You also have the right to request erasure of your personal data or to restrict processing in accordance with data protection laws.

If we receive a request from you to exercise to above rights, we will ask you to verify your identity before acting on the relevant request; this is to ensure that your data is protected and kept secure.

Sharing and Disclosing Your Personal information

We do not share or disclose any of your personal information without your consent, other than for the purposes specified in this notice.

Safeguarding Measures

We take your privacy seriously and we take every reasonable measure and precaution to protect and secure your personal data. We work hard to protect you and your information from unauthorised access, alteration, disclosure or destruction and have several layers of security measures in place, including regular cyber security reviews. Our security measures include firewalls, anti-virus software, password protection, role based access, off-site filing cabinets (for storage of hard files) and CCTV.

Consequences of not providing your Data

You are not obliged to provide your personal information to us; however, as this information is required for us to provide you with our services, we will not be able to offer some/all of our services without it

How long we keep your data

We only ever retain personal information for as long as necessary and we have strict review and retention policies in place to meet obligations. We require under UK tax law to keep you information (invoices), basic personal data (name, address, contact details) for a minimum of 6 years after which time it will be destroyed.