Privacy Policy
ABOUT THIS DOCUMENT
This Privacy Notice will help you understand how we collect, use and protect your personal information. If you have any queries about this Privacy Notice or how we process your personal information, please contact SDC Ltd by email: admin@sdcemail.co.uk or by post to SDC Ltd 18a Rothesay Place, Edinburgh, EH3 7SQ.
WHO WE ARE
The organisation responsible for the processing of your personal information is SDC Ltd, located at 18a Rothesay Place, Edinburgh, EH3 7SQ. This means that we are a 'data controller' under the Data Protection Act 1998 (and, once in force, to the General Data Protection Regulation (also known as the GDPR)).
WHAT INFORMATION WE COLLECT ABOUT YOU
The personal data you have provided, we have collected from you, or we have received from third parties includes:
- name, address and address history
- contact details, including telephone numbers and email address
- financial information, including credit/debit card details if paying by this method (card information is submitted directly to Lloyds Cardnet via their secure online portal. Card information is not retained by SDC Ltd.)
HOW WE COLLECT INFORMATION ABOUT YOU
Most of the personal information we hold about you is that which we collect directly from you, for example:
- each time you interact with us, respond to communications
- when you make payment for a service
- when you register to receive information from us
WHAT WE USE YOUR INFORMATION FOR AND THE LEGAL BASES FOR PROCESSING
We may store and use your personal information for the purposes of:
- providing you with the supply of correspondence, reports, plans, technical advice and input and design certificates relating to the services agreed (as is necessary for the performance of a contract between you and us and/or as is necessary for our legitimate interests);
- using your payment details to process payments relating to the services provided (as is necessary for the performance of a contract between you and us and/or as is necessary for our legitimate interests);
- Communicating and sending you information relating to the project SDC Ltd have been appointed to undertake
Our "legitimate interests" as referred to above (and below) include our legitimate business purposes and commercial interests in operating our business in a customer-focused, efficient and sustainable manner, in accordance with all applicable legal and regulatory requirements.
USING YOUR PERSONAL DATA FOR MARKETING
It is not the intention of SDC Ltd to use your data for marketing or supply your data to any third-party marketing companies.
WHO WE SHARE YOUR DATA WITH
Where relevant given the nature of the services provided to you, we may also share your information with the following categories of third parties:
- the local authority who will deal with any building warrant application
- your Architectural Agent
- contractors involved or pricing the construction works
- third Party bodies who are required to undertake services relating to the project including contractors, Scottish Water, The Coal Authority, Radon UK, public authorities
- our bank/financial institution
- third party debt collection agencies
HOW LONG YOUR INFORMATION IS KEPT
We will retain your personal information for a number of purposes, as necessary to allow us to carry out our business. Your information will be kept for up to 12 years on our main systems after which time it may be archived, deleted or anonymised. Some of the archived information may be retained for up to 50 years. These data retention periods are subject to change without further notice as a result of changes to associated law or regulations. If you have any questions in relation to the retention of your personal data, please contact SDC Ltd at the details provided above.
YOUR RIGHTS
Under the Data Protection Act 1998 you have the following rights:
- to obtain access to, and copies of, the personal information that we hold about you;
- to require that we cease processing your personal information if the processing is causing you damage or distress; and
- to require us not to send you marketing communications.
Once the GDPR comes into force on 25 May 2018, you will also have the following rights:
- to require us to erase your personal information;
- to require us to restrict or object to our data processing activities;
- to receive from us the personal information we hold about you which you have provided to us, in a reasonable format specified by you, including for the purpose of you transmitting that personal information to another data controller; and
- to require us to correct the personal information we hold about you if it is incorrect.
Please note that these rights may be limited by data protection legislation, and we may be entitled to refuse requests where exceptions apply. If you are not satisfied with how we are processing your personal information, you can make a complaint to the Information Commissioner. You can find out more about your rights under data protection legislation from the Information Commissioner's Office website: www.ico.org.uk