Privacy Notice

Personal data

Under the UK General Data Protection Regulation (GDPR) personal data is defined as:

“any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”.

This statement is compliant with control A.5.34 under ISO 27001 in our Information Security Management System (ISMS).

How we use your information

Ingleton Wood recognises the importance of the correct and lawful treatment of personal information and will only use personal information as set out in this Privacy Notice.

We use various methods to collect data from and about you:

• As part of our marketing and business development activities.
• The management of our website, this includes automated analysis and profiling. We collect data by using cookies. Please see our Cookies Policy for further details.
• For the management of employee payroll, performance management or compliance with legal obligations.

Why does Ingleton Wood LLP need to collect and store personal data?

For us to provide you with a service, and for us to fulfil our contractual obligations we will need to collect personal data from you. We will only process your personal data in accordance with the law. Ingleton Wood is committed to protecting your rights and will only use your data for legitimate interests.

Will Ingleton Wood LLP share my personal data with anyone else?

We may pass your personal data on to third-party service providers contracted to Ingleton Wood while dealing with you. Any third parties that we share your data with are obliged to keep your details securely, and to use them only to fulfil the service they provide you on our behalf. When they no longer need your data to fulfil this service, they will dispose of the details in line with Ingleton Wood procedures. If we wish to pass your sensitive personal data onto a third party we will only do so once we have obtained your consent, unless we are legally required to do otherwise.

How will Ingleton Wood LLP use the personal data it collects about me?

Ingleton Wood will collect, store and process the information you provide in a manner compatible with the UK General Data Protection Regulation (GDPR). We will endeavour to keep your information accurate and up to date, and not keep it for longer than is necessary. Ingleton Wood is required to retain information in accordance with the law such as information needed for income tax (HMRC), project data in line with RICS/RIBA/CIBSE (etc) and for audit purposes. 

How long certain kinds of personal data should be kept may also be governed by specific business-sector requirements and agreed practices. Personal data may be held in addition to these periods depending on individual business needs.

Photography

Photographs may be taken at Ingleton Wood events for marketing and digital media purposes. If you are attending one of our events and do not wish to be photographed, please advise a member of the team.

Drone unmanned aerial vehicles (UAV) Surveillance

Ingleton Wood will on occasion use drones to carry out building surveys. The drones are registered with the Civil Aviation Authority (CAA), our drone operators are licensed and trained in the use of drones. Ingleton Wood take data privacy seriously, and endeavour to limit the capture of images of private areas such as houses, gardens, or offices to a minimum. Ingleton Wood notify nearby neighbouring areas ahead of the use of drones.

Under what circumstances will Ingleton Wood LLP contact me?

Our aim is not to be intrusive. We undertake not to ask irrelevant or unnecessary questions. Moreover, 
the information you provide will be subject to rigorous measures and procedures to minimise the risk of unauthorised access or disclosure.

Your Legal Rights

You have the right to:

Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected.

Request erasure of your personal data. This enables you to ask us to delete or remove personal data where we no longer have a valid reason for holding it.

Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and you object to processing as you feel it impacts your rights as an individual. In some cases, we may demonstrate that we have compelling legitimate reasons for processing your information which override your rights as an individual.

Request restriction of processing of your personal data. This enables us to suspend the processing of your personal data, in the following scenarios: a) in the event that our use of the data is unlawful but you do not want us to erase it; (b) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (c) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it; or (d) if you have an issue with the data’s accuracy.

Request the transfer of your personal data to you or to a third party. We will provide you or a third party your personal data in a structured, commonly used machine-readable format.

Withdraw consent at any time here we are relying on consent to process your personal data. Note, if you withdraw your consent, we may not be able to provide certain services to you.

Right to access your personal data (commonly known as a ‘data subject access request). This enables you to receive a copy of the personal data we hold about you. Access to your personal data is free of charge. However, we may charge a fee or refuse the request, if your request is unfounded, repetitive, or excessive.

What we may need from you 

For us to comply with any requests, we may need you to provide specific information to us in order to confirm your identity. This procedure is to ensure that your personal data is not disclosed to any person who has no right to receive such information. Ingleton Wood accepts the following forms of ID when information on your personal data is requested: Valid Passport, driving licence, birth certificate, utility bill (from last 3 months).

If you require further information in this regard, please contact Ingleton Wood LLP at GDPR@ingletonwood.co.uk.