We hold very limited personal data, along with business data that can be identified by personal data. We do not hold any sensitive personal data.
We have contractual arrangements with third parties for the processing of our data for our own business purposes.
We do not share any personal data for use by any third parties for their own purposes unrelated to our data processing.
We do share personal data with subcontractors for the sole purpose of ensuring the smooth execution of works on your projects.
Personal Data Controlled by Smart Build
Smart Build personal data is stored in the United Kingdom or other ‘adequate’ countries as defined by the EU Commission.
Here is a list of how we collect data and the processes and flows related to it:
We collect data that you provide on the contact forms on our website in order to respond to your enquiries.
When you comment on articles on the Blog, you supply personal data that is recorded in our website’s Content Management System (CMS).
Passively to us, various technical processes collect IP addresses.
Smart Build stores the following personal information:
- We store the name, address, telephone numbers and email address that you provide us as part of your enquiry.
- We store the name, address, telephone numbers and email address that you provide us as part of any works or project we undertake for you.
We use the information you provide to communicate with you in conjunction with your enquiry and works, and to form a contractual arrangement for your works.
We record the personal data in our internal systems and retain it for as long as legally required for tax and financial reporting purposes.
We may share your name and telephone numbers with subcontractors to ensure the smooth execution of works on your projects.
On our website, you may comment on articles on the Blog.
When you leave a comment, our CMS records your name, your email address and your IP address.
Your comment will only appear after we have reviewed it (moderation), which may entail contacting you at the email address you have recorded with your comment.
We cannot publish comments that include personal data other than the name recorded by our CMS.
In the process of using our website, your IP address is stored by our data processors.
Our ISP collects IP addresses in system logs for the smooth operation of the website and email servers.
Our website is connected to Google Analytics, which tracks and aggregates activity by anonymised IP addresses. We use Google Analytics to track the behaviour of visitors to our website in aggregate in order to improve the website’s utility to visitors and our sales and marketing.
We do not collect individual IP addresses for direct targeting of sales, marketing or advertising activities.
We do not do profiling or automatic decision making with your personal data.
When you click on social media icons or other external hyperlinks, your interactions with those external websites regarding personal data are no longer covered under this Smart Build policy.
Accountability and Data Management
We are aware of the GDPR guidelines. We do not have a Data Protection Officer and are not required to under Article 37 of GDPR.
Our technical security is up to date. The Smart Build website operates under the secure HTTPS protocol. Access to our internal systems are protected by passwords and firewall.
We will report a data breach involving personal data to the local authorities and to the people (data subjects) involved.
There are contracts in place with our data processors, and you can find their privacy terms as follows:
Your Rights under GDPR
Booking and Blog Comments Data
You can request to view, amend or delete personal information held in our booking and CMS systems by emailing us at firstname.lastname@example.org.
You can also request us to deliver your data to a third party. We endeavour to act on your instructions and confirm our actions to you within 48 hours.
Such communication will not give rise to the creation of further personal data.
We automatically delete data held in our booking and CMS systems that our business no longer has any use for. We review the data to identify and remove obsolete data annually.
We do not run an eCommerce system where IP addresses are collected and associated with transactions or customers.
IP addresses are not associated in our systems with any personal data from our booking system, CMS or mailing list. And in certain cases, they are required to be held by our data processors for legal reasons. Therefore, we may not be able to act on a request to view, amend or delete IP address records.
The Send button on the contact forms on our website gives your explicit consent to our use of your personal data as described in this policy. (It makes no sense to Send your data if you do not intend us to record and process it.)
Pressing the “Post Comment” button on a blog comment is explicit consent to publish your comment on our site (provided your comment passes our moderation process), with your name as you have recorded it, but not your email or IP addresses.
We regularly review policies for changes, effectiveness, changes in handling of data and changes to the state of affairs of other countries to which our data flows during data processing.