Privacy and Terms

Who we are

Our website address is: https://thorntonreynolds.com. You can contact us at the postal or email addresses published throughout the site.

Cookies

The site may use basic cookies to improve your website experience, but we do not pass information to third parties or use your data in any way for advertising, etc.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

In the rare event that we collect your details, it will be used as part of our relationship with you or for our mutual benefit. We will never share data without your express consent.

How we retain your data

If we collect your data  at all, it will be held in a secure online database and only retained for as long as necessary for the benefit of our mutual relationship. You have the right to obtain any data we may hold and we will be happy to erase any data as requested, subject to any statutory or other requirements.

Terms of Use

Whilst we’ve taken every effort to ensure the accuracy of the website, we take no responsibility for any errors or omissions in the site. In the event that you find anything which may have been written or included in error, please contact us on the email or postal addresses provided throughout the website.

Privacy Policy

Applicability and Scope of this notice

This notice applies to personal information collected from the following sources:

• Visitors to our web site or other online resources we control including social media pages;
• All enquiries and communications to our company;
• Business partners and associated entities who may collect information on our behalf;
• Customers, clients, suppliers and all of those who we engage with for operational activities;
• Our employees, sub-contractors or anyone working on our behalf.

Information we may collect and process

In order to complete our business operations, we may need to collect personal data which we may collect from you directly or from a third party and this data includes the following:

• Contact details including name, address, email and telephone numbers;
• Communications content: including all correspondence you send directly to us or any of our representatives. We may also receive communications from third parties with your personal data;
• Personal identification details including national insurance / social security number, passport details, driving licence information and other ID numbers or identification information;
• Demographic information including gender;
• Contact details of family members and next of kin;
• Candidate and Staff information including CV’s, qualifications, references, employment history, payroll information etc…;
• Web site information including IP address, web browser and operating system details, Internet Service Provider, location, cookies and other tracking information.

How we use this Information and why

We use the personal information we collect to provide our services as detailed in this privacy notice. The activities that may require collection and processing of personal data are as follows:

• Providing our business services to customers and clients;
• Purchasing services from suppliers and sub-contractors;
• Employment of current staff and other operatives and meeting our obligations as an employer;
• Recruiting new staff and operatives;
• Marketing our services, collecting feedback from customers and completing market research;
• Completing internal business operations including internal auditing, staff training and appraisals and other operations required in accordance with our ISO compliant management systems;
• Management of our equipment and premises including Information Communication Technology facilities and security systems including vehicle tracking and CCTV;
• Monitoring and analysing traffic and performance of our web site and reviewing and analysing web site visitors.

Lawful Basis – we will only collect and process personal data where we have a clear reason and lawful basis. The lawful basis is dependent on the data processing activity and at least one of the following will apply:

1. Consent – where we have your consent to process your personal data;
2. Contract – the processing is necessary as part of our service provision;
3. Legal obligation – the processing is necessary for legal reasons;
4. Vital interests – the processing is necessary to protect life;
5. Public task – the processing is for a task in the public interest;
6. Legitimate interests – the processing is necessary for our legitimate interests without infringing your rights as an individual.

What we do with this Information

In completing our services, we may be required or obligated to share your personal data with other entities including;

• Trading partners including service providers;
• Sub-contractors, suppliers and other operatives working on our behalf;
• Our legal advisors, accountants, payroll providers, pension providers and auditors;
• Our IT support providers including web hosting, analytics and cloud providers;
• Our software providers including operational, sales and accounts software;
• Your former employers or other parties provided as references;
• Government agencies, regulators, law enforcement or other third parties where required for legal or regulatory compliance;
• Any other providers where you direct us to provide your information or where we have your consent.

We will never sell or share personal data with any third parties who might use it for any purpose not associated with the provision of our services.

How we store and protect this information

The personal information we collect is stored securely on our company computer systems and also in secure cloud services provided by approved providers based in the UK / EEA and we will not actively transfer your personal data internationally without consent.

We may also hold paper records with personal information and have security systems in place to ensure all records are controlled and protected at all times and disposed of in a secure manner when no longer required.

Protecting the confidentiality, integrity and availability of personal data from all threats whether internal, external, deliberate or accidental is a priority. We will ensure we have implemented appropriate controls to secure personal data using physical, procedural, staff and technical security measures.

Data Retention – we will only hold personal data as long as we need it and we have systems in place for the management of and retention of data. We need to hold some personal data to comply with legal requirements and also for our own legitimate interests.

Your Rights

You have rights relating to your personal which we hold including the right to be informed about our processing of your personal data, as covered by this privacy notice, and the right to request a copy of the personal information we hold about you as well as various other rights as follows:

1. The right to be informed;
2. The right of access;
3. The right to rectification;
4. The right to erasure;
5. The right to restrict processing;
6. The right to data portability;
7. The right to object;
8. Rights in relation to automated decision making and profiling.

Not all of these rights will apply to all personal data we hold and process and will be dependent on the category of data and our legal basis for holding this data. If our legal basis is consent you have the right to withdraw consent at any time.

Data Subject Access – please contact us using the contact details listed at the start of this notice if you wish to request a copy of your personal information or to exercise any other rights with regards your personal data.

We will respond to all data subject access requests and will do so within one month and in line with all legally mandated time limits.

There is no charge for responding to access requests unless your request is deemed to be unfounded or if you have made numerous requests which we consider to be excessive, in which case, we may notify you of a reasonable admin fee to be charged for completing the request.

You also have the right to complain to the appropriate authority for data regulation if you are unhappy with how we have used your data.