Privacy Policy
Last updated: August 2026
Umberslade is committed to protecting the privacy of everyone we deal with: our clients, our supply chain, the people who work on our sites, applicants for work with us, and visitors to our website.
This policy explains what personal information we collect, why we collect it, what we do with it, who we share it with, how long we keep it and what rights you have. It applies to our website and to our wider business activities across all three of our divisions.
If you are a current employee, worker or agency operative, please also read our separate Employee Privacy Notice, which covers employment records in more detail.
1. Who we are
Umberslade has grown from a single strip out business into a group of three specialist divisions:
- Strip out and internal demolition, delivered nationwide
- Groundworks, delivered principally across the Midlands
- Diamond drilling and sawing, including wire and track sawing, robotic demolition and the installation of percussive driven earth anchors, delivered nationwide
- Plant Hire, hire of machinery, delivered nationwide
Two companies sit behind those divisions, and both are “data controllers” of the information described in this policy:
Umberslade Business Services Ltd
Company registration number 4572514
Registered office: Ladywood Farm, Elvers Green Lane, Knowle, B93 0AA
Umberslade Diamond Drilling & Sawing Limited
Company registration number 16632201
Registered office: Ladywood Farm, Elvers Green Lane, Knowle, B93 0AA
In this policy, “Umberslade”, “we”, “us” and “our” mean whichever of those companies is handling your information. Where the two companies use information together, for example shared HR, IT and finance systems, they do so as joint controllers and the same standards apply.
Umberslade Groundworks
Company registration number 10002417
Registered office: Ladywood Farm, Elvers Green Lane, Knowle, B93 0AA
Umberslade Plant Hire
Company registration number 83234061
Registered office: Ladywood Farm, Elvers Green Lane, Knowle, B93 0AA
2. How to contact us
Our data protection lead is Jeremy Emmett – Director.
- Email: info@umberslade.biz
- Telephone: 01675 443727
- Post: Data Protection, Umberslade Business Services Ltd, Ladywood Farm, Elvers Green Lane, Knowle, B93 0AA
We are registered with the Information Commissioner’s Office under registration number:
Umberslade Business Services: ZA644224
Umberslade Groundworks: ZA677092
Umberslade Plant Hire: ZB452620
Umberslade Diamond Drilling: ZC046055 .
3. Who this policy covers
Different parts of this policy will apply to you depending on how we deal with you. We have grouped people into the following categories:
- Clients and prospective clients, including main contractors, developers, consultants and their staff
- Suppliers, subcontractors and their operatives, including plant hire, waste, asbestos and specialist trades
- People who visit or work on our sites, including site inductions, sign in records and monitoring
- Applicants for work, whether direct, through an agency or speculative
- Website visitors and enquirers
4. The information we collect
Clients, prospective clients and suppliers
Name, job title, employer, business email address, business telephone number, company address, project details, tender and quotation correspondence, purchase order and invoice details, bank details for payment, and records of our communications with you. Where we extend credit or ask for it, we may also obtain credit reference information about you or your business.
Site personnel and supply chain operatives
Name, employer, emergency contact details, trade, and evidence of competence and qualification such as CSCS, CCDO, SSSTS, SMSTS, CPCS and drilling or sawing tickets. Site sign in and sign out records, induction records, records of toolbox talks and briefings, and records of any incident, near miss or accident. Where a client or an official body requires it, for example on school, healthcare, defence or other security sensitive sites, we may also process Disclosure and Barring Service check outcomes, security clearance status, right to work information and vetting information.
Applicants for work
Contact details, employment history, qualifications and tickets, references, right to work documents, driving licence details where the role requires driving, and the outcome of any pre-employment checks. We tell applicants at the point of application which checks apply to the role.
Website visitors
IP address, device and browser information, the pages viewed and when, referral source, and any information submitted through a form, quotation request, estimator tool or download. Some of this is collected through cookies and similar technologies. Please see section 12.
Health, safety and other sensitive information
Because of the nature of our work, we sometimes need to handle information that data protection law treats as “special category” data, and information about criminal offences. Section 7 explains how we do that.
5. How we collect information
We collect information:
- directly from you, when you contact us by telephone, email, post, our website or social media, when you submit a tender enquiry or quotation request, or when you apply for work
- from your employer or agency, where you work for a client, supplier or subcontractor
- from site records, inductions and site systems while work is in progress
- from publicly available sources such as company websites, Companies House and LinkedIn, where we are researching a prospective client or supplier
- from third parties acting on our behalf, such as recruitment agencies, credit reference agencies, occupational health providers and the Disclosure and Barring Service
- automatically, through our website, our IT systems, site CCTV and vehicle telematics
6. Why we use your information, and our lawful basis
Data protection law requires us to have a lawful basis for everything we do with personal information. Ours are set out below.
What we use it for | Lawful basis |
|---|---|
Responding to enquiries, preparing quotations and tenders |
|
Delivering projects, managing contracts, programme and variations |
|
Site safety, inductions, competence checks, RAMS and CDM duties |
|
Accident, incident and near miss reporting |
|
Managing our supply chain, procurement and subcontractor onboarding |
|
Invoicing, credit control, accounting and tax |
|
Fraud prevention and credit risk assessment |
|
Recruitment and pre-employment checks |
|
Sending industry news, project updates, tender opportunities and marketing |
|
Seeking feedback on our work |
|
Website analytics and improving our website |
|
Site CCTV, vehicle tracking and dash cameras |
|
Responding to legal claims, insurance and regulatory requests |
|
Managing a sale, restructure or reorganisation of our business |
|
Where we rely on legitimate interests, we have considered whether our interests are fair to you and we have recorded that assessment. You can ask us for a summary of it.
7. Health information, criminal records and other sensitive data
Construction work means we occasionally need information that carries extra protection in law.
Health and fitness for work. This may include occupational health assessments, fitness for task or medical clearance for confined space, working at height, plant operation or respiratory protective equipment, health surveillance where required by regulation, asbestos medical records, drug and alcohol testing results where a site requires it, accident and injury records, and any adjustments you need on site or at interview. We use this to meet our health and safety obligations and to protect people at work.
Criminal offence information. This may include Disclosure and Barring Service check outcomes, security vetting, and driving offence information for roles involving driving. We only process it where a client, a regulator or the law requires it, and only for as long as needed to reach and evidence a decision.
We apply additional safeguards to this information. Access is restricted to named individuals who need it, it is held separately from general project records where practical, and it is retained under the specific periods in section 11.
8. Marketing and your choices
We may send you industry news, tender opportunities, project updates, safety updates and information about our services. We do this only where you have asked us to, or where you are an existing business contact and the message is about services similar to those we have already discussed or delivered.
You can opt out at any time. Every marketing email carries an unsubscribe link, and you can also email [info@umberslade.biz] or telephone 01675 443727. We will action the request promptly and keep a suppression record, so we do not contact you again by mistake.
Opting out of marketing will not stop operational messages about a live project, a contract, a site or a payment.
9. Who we share information with
We do not sell or rent personal information, and we do not share it with third parties for their own marketing purposes.
We do share it, where necessary, with:
- Clients and main contractors, for example providing operative competence records, RAMS, sign in records and site paperwork for a project
- Subcontractors and specialist suppliers, for example asbestos surveyors and removal contractors, scaffolders, plant hire, surveyors, testing houses and waste carriers
- Professional advisers, including accountants, quantity surveyors, insurers, insurance brokers, loss adjusters and solicitors
- Service providers who support our business, including IT and cloud hosting, email, HR and payroll systems, our employee app, CRM, website hosting and analytics, occupational health providers and recruitment agencies
- Credit reference and fraud prevention agencies
- Regulators and public bodies, including HM Revenue and Customs, the Health and Safety Executive, the Environment Agency, local authorities and the police, where we are required or permitted to disclose
- A buyer or successor, if we sell or reorganise all or part of our business, or as part of any due diligence in advance of that
Where a supplier processes information on our behalf, we put a written contract in place requiring them to keep it secure, to use it only on our instructions and not to use it for their own purposes.
10. Sending information outside the UK
Some of our suppliers, particularly IT and cloud services, store or access information outside the UK. Where that happens, we make sure the transfer is protected by one of the safeguards recognised in UK law, normally an adequacy decision by the UK government, or the International Data Transfer Agreement or Addendum with appropriate additional measures. You can ask us which safeguard applies to a particular transfer.
11. How long we keep information
We keep information only as long as we need it. Our standard periods are below, and where the law sets a longer period, the legal period applies.
Information | Retention period |
|---|---|
Enquiries and quotations that do not proceed | [2] years from last contact |
Client and supplier contract records, project files and correspondence | 6 years from the end of the contract, in line with limitation periods |
Project health and safety file information under CDM | Handed to the client at the end of the project, with our copy retained for [6] years |
Site sign in records, inductions and competence records | [3] years from the end of the project |
Accident and incident records | 3 years minimum, longer where a claim is possible or a young person is involved |
Health surveillance records | 40 years, as required by health and safety regulations |
Asbestos health records and exposure records | 40 years, as required by the Control of Asbestos Regulations 2012 |
Disclosure and Barring Service check outcomes | Decision recorded, certificate information deleted within 6 months unless a dispute is ongoing |
Unsuccessful job applications | [12] months, unless you ask us to keep you on file for longer |
Accounting, invoicing and tax records | 6 years from the end of the relevant financial year |
Marketing consents and suppression records | Consent reviewed every [24] months. Suppression records kept indefinitely so we can honour your opt out |
CCTV footage | [31] days, unless retained for an incident, claim or investigation |
Vehicle telematics data | [12] months |
Website analytics | As set out in our Cookie Policy |
12. Cookies and website tracking
Our website uses cookies and similar technologies. Some are strictly necessary to make the site work. Others help us understand how the site is used, remember your preferences, or measure the performance of our advertising.
We only set non-essential cookies once you have agreed through the cookie banner that appears on your first visit. You can change or withdraw your choices at any time using the cookie settings link on our website, or by clearing cookies in your browser.
Our Cookie Policy sets out each cookie we use, what it does, whether it is first or third party, and how long it lasts. Turning off cookies may affect how parts of the website function.
13. CCTV, site monitoring and vehicle tracking
We use CCTV at our premises and on some project sites for site security, the protection of plant and materials, and the safety of people at work. Signs are displayed where cameras are in operation.
Our vehicles are fitted with telematics and, in some cases, forward facing cameras. We use this data for driver safety, vehicle security, fuel and route efficiency, and to defend or bring claims after an incident. We do not use it for continuous performance monitoring of individual drivers.
Footage and tracking data are accessible only to authorised staff, and are shared outside the business only with insurers, our legal advisers, the police or another party to an incident where there is a proper reason to do so.
14. Automated decisions and profiling
We may use automated tools as part of credit checking and fraud prevention. We do not make decisions that have a legal or similarly significant effect on you based on automated processing alone. A member of our team reviews the outcome before we act on it, and you can ask us to explain a decision.
15. Keeping information secure
We take steps to protect the information we hold, including access controls so that staff only see what their role requires, multi factor authentication on our core systems, encryption of devices and payment data, secure disposal of paper records, supplier due diligence and staff training.
Sensitive information such as bank details is held in access-controlled systems, and hard copies are kept in locked storage. Where you have a password for our employee app or any other system we provide, please keep it confidential and do not share it.
No transmission over the internet can be guaranteed to be completely secure. We do our best to protect your information but sending it to us over the internet is at your own risk.
If a personal data breach occurs and it is likely to result in a risk to people’s rights, we will report it to the Information Commissioner’s Office within 72 hours and tell affected people where the risk is high.
16. Your rights
You have the right to:
- be informed about how we use your information, which is what this policy is for
- access a copy of the information we hold about you
- rectification of information that is inaccurate or incomplete
- erasure of information, where we no longer have a good reason to keep it
- restrict how we use your information while a query is resolved
- object to processing based on legitimate interests, and to direct marketing at any time
- data portability, for information you gave us electronically under a contract or with your consent
- withdraw consent at any time, where consent is the basis we rely on
- not be subject to a solely automated decision with significant effects
To exercise any of these rights, contact us using the details in section 2. We will respond within one month. That can be extended by up to two further months for complex requests, and we will tell you if that applies. We may ask for proof of identity first. There is normally no charge.
17. Complaints
If you are unhappy with how we have handled your information, please tell us first so we have the chance to put it right.
You also have the right to complain to the Information Commissioner’s Office at any time:
- Website: ico.org.uk
- Telephone: 0303 123 1113
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
18. Links to other websites
Our website contains links to websites run by other organisations, including our divisional sites and third party tools. This policy applies only to our own websites, so please read the privacy information on any other site you visit. We are not responsible for the privacy practices of other organisations, including any third party site you followed a link from to reach us.
19. Changes to this policy
We review this policy at least annually, and whenever there is a significant change to our business or to the law. The date at the top shows when it was last updated. Where a change is material, we will make that clear on the website.
