Why we hold information and what it is used for

Briggs do not sell, lease or rent Personal Data to third parties.

We hold certain Personal Data so we can communicate with you and manage our relationship. Sometimes we need this information to ensure that Briggs complies with its legal and contractual obligations with you, so for example, Briggs can pay you at the right time.

We collect data during our due diligence process, when you attend one of our Project sites or attend our offices. We do this for the reasons set out below:

• So we can manage our business with you, set-up, administer and manage your relationship, associated accounts and records;
• For compliance and legal obligations;
• To protect the vital interests of a person; or
• For purposes of legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests, rights or freedoms of the data subject

Lawful reason

Data protection law requires us to process any Personal Data fairly and lawfully.  This means that we must have a “lawful reason” for processing Personal Data from a list set out in legislation.

What personal information we hold

We collect your Personal Data when you complete our forms, through the use of online forms, if you provide us with your contact details and when you e-mail your details to us. We also hold data about the transactions you undertake with us.

Examples of data (“Personal Data”) being collected, stored and processed are:

• Forename, Surname
• Job title
• Company / Office location, street address, post / zip code
• Company name
• E-mail addresses
• Telephone numbers (landline, mobile)
• Website behaviour (via cookies)

Review

The law requires that we only hold the information we need and that we only use it for the purposes set out in this policy.  In our view, all of the information set out above is necessary for these purposes.

We will review the information that we hold once in the first year, and following this it will be every two years to confirm whether it remains necessary for the purposes set out in this policy.

Who we will share personal data with

We may disclose your Personal Data to any of the following recipients;

• any company within the CLPT Group (including to its employees and sub-contractors) that assist us in providing the services or that otherwise has a need to know such information;
• any third parties or other advisers auditing our business or who have the need to access such information for the purpose of advising us;
• Clients who we have contracts with to supply goods or services to their sites and in compliance with Health and Safety legislation (people attending sites will be given an individual privacy notice)
• any law enforcement or regulatory body which may have any reasonable requirement to access your Personal Data; or
• in the event that we sell or buy any business, assets or shares in part or whole we may disclose your personal details to such relevant third parties involved.

Transfer of data overseas

Where Personal Data is going to be transferred to another country or territory outside the EEA, we must ensure that it will be properly protected.

Where we are asked to permit the transfer of data outside the EEA, for instance where the third parties wish to carry out their services using an office outside the EEA, we will ask for information about the safeguards that the recipient will apply to any Personal Data that is transferred and ensure that an appropriate mechanism is in place to protect the Personal Data during and after the transfer, such as standard contractual clauses.  We will not transfer Personal Data until appropriate checks have been made.

Whenever we engage new data processors, we will investigate at the outset of the engagement whether the nature of their operations requires the transfer of Personal Data outside the EEA and if so, on what mechanism transfers are based.  We will not provide the new data processors with any Personal Data until we have received confirmation that satisfactory data protection measures are in place.

International legal requirement

Being part of a global organisation, Briggs stives to ensure its awareness of privacy laws internationally, including but not limited to the General Data Protection Regulation, NY Sheild Act, Mexican Privacy Laws and other global privacy standards.

Keeping information

We retain your data for no longer than is necessary. This length of time is different for each type of Personal Data that we hold. We will keep our record retention periods under review.

Recruitment

At Briggs, we take privacy very seriously. We do need your information so that we can provide excellent HR services to you, however protecting your information and respecting your privacy is fundamental to maintaining your trust.

We need to obtain and use some of your personal information so that we can:

• Recruit and retain the best people;
• Manage your working relationship with Briggs and run our business in the best possible way;
• Protect you, the Company and our assets; and
• To comply with our policies and legal and regulatory obligations.

We will always take appropriate measures to keep your personal information confidential, secure and protected, including when we need to share it with our trusted managers.

What destruction of data means:

Where data is held in a paper format, destruction means that the data will be shredded or sent to confidential waste for destruction.

Where data is held in an electronic format, destruction means that the data is put permanently beyond use.

Where data is held by third parties, we will rely on confirmation from them that data has been properly destroyed.

You may update your Personal Data at any time by contacting us using the details at the beginning of this document.

Requests for access to your Personal Data are free of charge.

Right to be forgotten and right to restrict processing

Someone can request erasure of their Personal Data “without undue delay” under certain circumstances including that it is no longer needed for the purpose(s) identified in this notice.

You can require us to stop processing your Personal Data when, for example, the person is contesting the accuracy of it.

Security

We use a number of methods to ensure that all Personal Data remains confidential.

Complaint

If you have any questions, comments or concerns about your Personal Data and how Briggs is processing it please do not hesitate to contact the Compliance Officer. They can be contacted in the following ways;

FAO The Compliance Officer,

Briggs of Burton PLC,

Briggs House,

Derby street,

Burton-on-Trent,

Staffordshire,

DE142LH

Email: compliance@briggsplc.com

Telephone: 01283 566 661

Alternatively, you may contact the Information Commissioners Officer (ICO) directly. More information about the ICO can be found here https://ico.org.uk they are the UK body responsible for managing data protection compliance.