Privacy Policy – AccessTec Ltd
Introduction
AccessTec Ltd (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, and safeguard your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other relevant laws.
Who We Are
-
Business Name: AccessTec Ltd
-
Registered Address: 61 High Street, Nailsea, Bristol, BS48 1AW
-
Telephone: +44 7968 131992
-
Email: info@accesstec.co.uk
We provide specialist services and employ contractors and subcontractors to deliver our projects.
What Personal Data We Collect
We may collect and process the following categories of personal information:
-
Names and contact details
-
Addresses
-
Date of birth
-
Payment details (including bank or card details for direct debits or transfers)
-
Health information (including dietary requirements, allergies, and health conditions)
-
Health and safety information
-
Account information
-
Identification documents
-
Records of meetings and decisions
-
Information relating to compliments or complaints
Purposes of Processing
We collect and use your personal data for:
-
Delivering services and fulfilling client contracts
-
Operating customer and subcontractor accounts
-
Managing bookings, schedules, and payments
-
Meeting legal and regulatory requirements
-
Managing recruitment processes
-
Communicating updates, service information, or marketing
-
Ensuring the health and safety of staff, subcontractors, and clients
Lawful Bases for Processing
We process your personal data based on:
-
Consent: Where you provide clear consent for specific purposes (e.g. marketing communications).
-
Contract: To take steps at your request prior to entering into a contract, or to fulfil a contract.
-
Legitimate Interests: For business operations such as managing subcontractors and service delivery, where this does not override your rights.
-
Vital Interests: To protect life, safety, or wellbeing (e.g. sharing information with emergency services).
-
Legal Obligation: Where we are required to process personal data by law (e.g. tax records, regulatory compliance).
Legitimate Interests
Our legitimate interests include:
-
Retaining information about subcontractors and employees to plan and deliver projects effectively.
-
Managing operational communications with suppliers, clients, and contractors.
-
Ensuring efficient business administration and compliance.
A Legitimate Interests Assessment has been completed to ensure data use is necessary, proportionate, and not intrusive.
Where We Get Your Data From
-
Directly from you (via forms, email, phone, or post)
-
From subcontractors completing forms or providing compliance details
Sub-Processors and Systems
We use the following systems and processors to manage personal data securely:
-
FreeAgent – For accounting, including subcontractor and supplier billing
-
Google Drive – For file storage and document management
Data Sharing
We may share personal data with:
-
Insurance companies – for cover and claims handling
-
Emergency services – if required for health and safety purposes
-
Regulators and authorities – where legally required
-
Other relevant professional parties – where necessary to fulfil our contractual or legal obligations
We do not sell or share your personal information with third parties for marketing purposes.
Data Retention
We retain personal data only for as long as necessary to meet the purposes described in this policy or to comply with legal requirements. Business records are typically kept for up to six years, in line with HMRC and company law obligations.
International Transfers
Some of our systems, such as Google Drive, may transfer or store data outside of the UK. Where this occurs, your data is protected using approved safeguards, such as:
-
Adequacy Decisions by the UK Government (where available)
-
Standard Contractual Clauses (SCCs)
-
International Data Transfer Agreements (IDTAs)
These mechanisms ensure your personal data is protected to UK GDPR standards.
Data Security
We take the protection of your data seriously and apply the following measures:
-
Encryption for data in transit and at rest
-
Two-Factor Authentication (2FA) for cloud storage
-
Secure file storage systems with restricted access
-
Policies for confidentiality and secure record handling
Your Rights
You have the right to:
-
Access the personal data we hold about you
-
Request correction of inaccurate or incomplete data
-
Request deletion of your personal data (where legally applicable)
-
Restrict or object to certain types of processing
-
Withdraw consent (where processing is based on consent)
-
Data portability (to receive your data in a structured format)
How to Complain
If you have concerns about how we handle your data, please contact us at: info@accesstec.co.uk
If you are not satisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
-
Website: www.ico.org.uk
-
Helpline: +44 303 123 1113