Who are we?
We are Sarnian Roofing Limited a provider of roofing and associated building services; all references to “we”, “us” or “our” in this Notice mean Sarnian Roofing Limited.
What is this Privacy Notice?
This Privacy Notice (“Notice”) sets out the information we must provide to You under The Data Protection (Bailiwick of Guernsey) Law, 2017 (“Law”) in processing your personal information (“PI”) that You provide to us or we otherwise obtain in the course of operating our business. For the purposes of the Law we are the data controller.
On what legal basis do we process your PI?
We process your PI principally for the purposes of performing a contract between You and us, and pursuing our legitimate interests, in providing services to You and operating our business, but if necessary we may separately rely on your explicit consent to use your PI which You may withdraw at any time.
How do we obtain your PI?
We may obtain your PI from You when You communicate it to us directly via telephone, letter, email, or otherwise, we receive it from third parties, we obtain it from public sources, You interact with any marketing we undertake, and otherwise in the normal course of our business in providing services.
Why and for what purposes do we process your PI?
We process your PI in order to administer and operate our business in providing services to You and our clients, which includes for the purposes of complying with our legal and any regulatory obligations, and processing and responding to enquiries, job applications and complaints we receive in the course of our business.
What PI do we process about you?
The PI we process varies depending on the work we undertake for you, but PI includes your names, addresses, telephone numbers, email addresses, date of birth, nationality, residential status, references, financial information, bank details, credit rating, assets, professional and employment information, information relating to claims, court cases, information available in the public domain, social media account information, third party opinions and other information about you, the PI of persons connected to You whether professionally, personally or otherwise, and special category data relating to your health, medical details or trade union membership,.
For what purposes may we share your PI?
We may need to share your PI with various third parties for the purposes of operating our business and providing services to You (for example, in providing your name and address for materials to be supplied to your property), in seeking references and confirmation of details You have provided to us, and otherwise to the extent required by law, regulation or court order.
With whom may we share your PI?
We may share your PI with third parties including counterparties to transactions, other professional service providers, regulators, law enforcement agencies, governmental institutions, tribunals and courts, third party agents and suppliers or contractors, our IT, cloud and communications service providers, and our auditors, accountants, professional advisers, employees and consultants.
What about international transfers of your PI?
It may be necessary for us in operating our business to transfer your PI to a recipient in a jurisdiction outside the Bailiwick of Guernsey or the EU, in which case we will ensure that if it is an authorised jurisdiction an adequacy decision is in force in respect of it or it is a designated jurisdiction under the Law, and if it is an unauthorised jurisdiction that there are appropriate or suitable safeguards applying to the transfer (a copy of which we can make available at your request).
For how long do we retain your PI?
We will retain your PI and ensure we keep it securely for as long as is necessary to carry out the purposes for which it was collected, to establish, exercise or defend our legal rights or for the purposes of legal proceedings, to satisfy any reporting or accounting obligations, for statistical purposes, and to comply with all applicable laws and regulatory requirements. We will generally retain your PI for a minimum of 6 years.
What rights do You have about your PI we process?
Under the Law You have the following rights: to information for PI collected from You and indirectly collected, to data portability (subject to exceptions), of access, to object to processing for direct marketing purposes or on grounds of public interest or for historical or scientific purposes, to erasure, to restriction of processing, to be notified of rectification, erasure and restrictions, and not to be subject to decisions based on automated processing of PI (we do not undertake automated processing), and to complain to the Data Protection Authority in Guernsey under section 67 of the Law.
What about changes to this Notice?
We will keep this Notice under review and may update it from time to time.
How may You contact us?
If You wish to contact us about this Notice or to exercise any of your data protection rights, please contact us at firstname.lastname@example.org