1. Introduction
ACL Contractor Solutions (“we,” “us,” “our”) is committed to safeguarding your personal data. This Privacy Policy explains how we collect, use, store, and share your personal information, as well as your rights under UK GDPR and the Data Protection Act 2018.


2. Data Controller
ACL Contractor Solutions, located in Cardiff, Wales, is the data controller responsible for your personal information. To discuss privacy matters or exercise your rights, contact us at: adminteam@acl-contractorsolutions.co.uk


3. Personal Data We Collect
We may collect the following categories of personal data:

• Identity & Contact: Name, postal address, telephone number, email.

• Professional Info: Company/employer details, role, construction-specific credentials or qualifications.

• Communications: Records of calls, emails, and service interactions.

We collect data directly from you (e.g. via forms, emails) and sometimes from third parties (e.g. industry partners)—always ensuring lawful bases are in place.


4. Purposes & Lawful Basis for Processing
We process personal data only where we have a lawful basis.

The primary reason we use your information is to manage contracts, deliver services, and communicate with you as our client. This is necessary for the performance of a contract with you.
 
We may also process your information to comply with legal obligations, such as those required by HMRC or for auditing purposes. In some cases, we use your information to send you marketing updates or newsletters, but only if you have provided your explicit consent.
 
In addition, we may process your information to improve our operations, maintain security, and enhance our services. In these circumstances, we rely on our legitimate business interests, but always balance these with your rights and freedoms.
 

5. Cookies & Automated Tools
We use cookies and analytics tools to improve our website/services. You’ll be informed and given options when you first access the site. These activities are typically based on legitimate interests or your consent where required.


6. Sharing Your Data
We may share your data with:

• Service providers (e.g. IT hosting, accounting) under binding agreements.

• Legal, regulatory, or auditing bodies when required by law.

• In the event of a business acquisition or restructuring, your data may transfer with the business—subject to privacy safeguards.

7. Data Storage & Security
Data is stored securely on encrypted servers with strict access controls. We implement firewalls, secure backups, and anti-virus software appropriate to our services.


8. Retention
We retain personal data only as long as necessary for contractual, legal, or regulatory purposes. Retention periods vary by data type but are designed with purpose limitation in mind.


9. Your Rights
You have the right to:

• Be informed about how your data is processed.

• Access your personal data (Subject Access Request).

• Correct inaccurate or incomplete data.

• Request deletion, restriction, or portability of data.

• Object to certain uses (e.g., marketing, legitimate interests).

• Withdraw consent at any time without affecting processing based on consent prior to withdrawal.

To exercise your rights, contact us at adminteam@acl-contractorsolutions.co.uk. We typically respond within one month unless complexity or volume requires extension.


10. Data Breach Notification
In line with GDPR, any breach that risks your rights will be reported to the Information Commissioner’s Office (ICO) within 72 hours, along with notification to affected individuals when required.


11. International Transfers
If we transfer your data outside the UK, it will always be safeguarded by appropriate legal measures (e.g., standard contractual clauses, adequacy decisions).


12. Accountability & Compliance
We document our processing activities and regularly review our practices to ensure ongoing compliance with GDPR principles of transparency, minimisation, and security.


13. Changes to This Policy
We may update this policy in response to legal or operational changes. The “Last Updated” date will reflect when changes were made.


14. Contact Information
For questions, to exercise your rights, or for privacy-related concerns, email us at adminteam@acl-contractorsolutions.co.uk.