Privacy Policy

Privacy Policy


EDS Consultancy Ltd are committed to protecting and respecting your privacy and to comply with
our obligations under the General Data Protection Regulations (GDPR) and the Data Protection Act
(DPA 2018).
This privacy policy applies between you, the User of this website and EDS Consultancy Ltd, the
owner and provider of this website. EDS Consultancy Ltd takes the privacy of your information very
seriously. This privacy policy applies to our use of any and all data collected by us or provided by you
in relation to your use of the website.
Scope of this privacy policy
This privacy policy applies only to the actions of EDS Consultancy Ltd and Users with respect to this
website. It does not extend to any websites that can be accessed from this website including, but
not limited to, any links we may provide to social media websites.
Who we are
In this Privacy Policy, “EDS Consultancy Ltd”, “EDS Consultancy”, “EDS”, “We”, “Us” or “Our”
means:
EDS Consultancy Ltd (registered company in England and Wales (3416736)) who are a structural
engineering consultancy firm who specialize civil and structural engineering solutions. We offer
analysis, design, fabrication, supply and installation/construction services.
How do we collect information about you?
Most of the information that we obtain comes directly from you and is completely voluntary. This
information may be provided when you complete our online contact form. Alternatively, we can
collect information about you if you contact us via the telephone or through e‐mail, details of both
can be found throughout the website, as well as through online and telephone directories.
We may if and when required receive information about you indirectly via alternative sources in the
following scenarios. These could include via subcontractors acting on our behalf, intermediate
contacts, financial advisors or accountants. We may also obtain information about you from such
sources as credit reference agencies, public sector and trade portals or directories, corporate
websites, social media or through online and telephone directories. With the information that you
provide to these third parties you should check any privacy policy they may have.
What personal information do we collect?
We may collect, store and use the following information:
 Your name;
 Your contact details (including postal address, telephone number and e‐mail address);
 Payment details (including bank, credit or debit card details where provided to make or
receive payments);
 If you apply for a job with us, information necessary for us to process these applications and
assess your suitability (which may include things like employment status, previous
experience depending on the context, as well as any unspent criminal convictions or pending
court cases you may have);
 age, nationality and ethnicity information for monitoring purposes provided during our
recruitment process (in line with our equal opportunities policy);
 any other information you provide to us.
Certain types of personal information are in a special category under data protection laws, as they
are considered to be more sensitive. Examples of this type of sensitive data would be information
about health, race, religious beliefs, political views, trade union membership, sex life or sexuality or
genetic/biometric information.
This information is only collected as part of our equal opportunities monitoring in line with our equal
opportunities policy and would only be collected if agreed and during the recruitment process.
Wherever it is practicable to do so, we will make it clear why we are collecting this type of
information and what it will be used for.
How do we use your information?
We use the information that you provide to us in the following ways:
 to provide responses to enquiries, products or services;
 to enable follow on contact following work or contact for future assistance;
 to arrange and conduct work in accordance with agreements in place;
 to enable payment of costs of for works carried out;
 to enable checking of payments received or expected;
 to process applications as part of our recruitment process;
 as part of our equal opportunities monitoring in line with our equal opportunities policy.
Legal basis for data processing?
The legal basis for the majority of our data processing is based on direct consent provided by you
directly to us (by entering your details into the enquiry form on our website, e‐mailing us directly,
contacting us on the telephone or appearing and meeting with us at our offices).
Alternative legal basis for data processing would come in the form of contractual or legal
agreements between us and you. These would be agreed and specify data required and the
purposes for its collection.
If you are a regular customer or client of ours we may keep your details on record in between
projects to prevent the need to obtain all of the collected information again, however, if you do not
wish for us to retain this information then please let us know and it will be deleted after completion
of the project.
How do we keep your data safe and secure?
EDS is committed to protecting your data and privacy, as such to ensure your details and information
is kept safe, we keep our networks protected and routinely monitored as with our online data
collection sources.
We will use technical and organizational measures to safeguard your data. The following are used to
keep your data safe and secure:
 All company systems are password protected with the following rules followed regarding
passwords:‐
 Passwords should never be revealed to anyone.
 Passwords should never be saved or stored anywhere.
 The same password should not be used twice or for different systems.
 Default passwords should be changed immediately.
 If a password is discovered, compromised or suspected as such, it should be
changed immediately.
 All computer systems require a unique user I.D. to log in.
 Computers and servers are routinely scanned and updated to protect against, detect and
remove any malicious or harmful software, malware or virus that might try to collect or
access data stored.
 Computers, servers and any other computer systems will be suitably protected by firewalls
and data encryption.
How long do we keep your data?
In order to protect your privacy and data we do not keep information for any longer than is
necessary. For long‐term and regular customers, we will keep your data on file in‐between projects
to prevent the need for this to be resubmitted. For other customers we may retain your information
on file to assist all parties involved should our products or services be required again in the future.
All data will be retained for a minimum period of at least 7 years.
Data related to designs, drawings and any other project information will be kept for a minimum of
10 years and may be kept for the life span of product if relevant.
Your rights
You have the following rights in relation to your data:
 Right to access – the right to request copies of the information we hold about you at any
time, or that we modify, update or delete such information. Where we are legally permitted
to do so, we may refuse your request. If we refuse your request, we will tell you the reasons
why.
 Right to correct – the right to have your data rectified if it is inaccurate or incomplete.
 Right to erase – the right to request that we delete or remove your data from our systems.
 Right to restrict our us of your data – the right to prevent us from using your data or limit
the way in which we can use it.
 Right to data portability – the right to request that we move, copy or transfer your data.
 Right to object – the right to object to our use of your data including where we use it for our
legitimate interests.
To make enquiries, exercise any of your rights set out above, or withdraw your consent to the
processing of your data (where consent is our legal basis for processing your data), please contact us
via eds@eds‐consultancy.com.
Please be aware that it is important that the data that we hold about you is accurate and current.
Therefore, please keep us informed if your data changes during the period for which we hold it.