1. Introduction

Prestige Contractors UK is committed to ensuring compliance with the General Data Protection Regulation (GDPR). This GDPR Policy outlines how we collect, process, and protect personal data in line with the GDPR.

2. Data Controller

Prestige Contractors UK, located in the United Kingdom, is the Data Controller responsible for your personal data. If you have any concerns regarding your data, please contact us at [insert email/contact form link].

3. Lawful Basis for Processing

Under the GDPR, we process personal data only when we have a lawful basis for doing so. This includes:

• Contractual Necessity: Processing required to fulfill our obligations to you as a member or user of our platform.
• Consent: When you have given us clear consent to process your data for specific purposes (e.g., marketing emails).
• Legitimate Interests: Processing that is necessary for our legitimate business interests (e.g., improving services), provided that those interests are not overridden by your rights.
• Legal Obligation: When we are required by law to process personal data.

4. Data Subjects’ Rights

As a data subject, you have the following rights under GDPR:

• Right to Access: You can request information about the personal data we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete data.
• Right to Erasure (Right to Be Forgotten): You can request that we delete your personal data where there is no longer a lawful reason for us to keep it.
• Right to Restrict Processing: You can ask us to restrict the processing of your data in certain circumstances.
• Right to Object: You have the right to object to the processing of your data based on legitimate interests or direct marketing.
• Right to Data Portability: You can request that your data be provided to you in a structured, commonly used, and machine-readable format or transferred to another controller.
• Right to Withdraw Consent: Where we process data based on your consent, you can withdraw it at any time.

5. Data Security

We employ industry-standard security measures to protect your data from unauthorized access, alteration, or destruction. These measures include encryption, secure data storage, and access control.

6. Data Breaches

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority (the Information Commissioner’s Office) within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights, we will also inform you without undue delay.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside the UK or European Economic Area (EEA). When such transfers occur, we ensure they are subject to appropriate safeguards to protect your rights under GDPR.

8. Data Retention

We will retain your personal data for no longer than is necessary for the purposes for which it was collected. When we no longer need your data, we will either delete or anonymize it securely.

9. Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [insert email/contact form link]. We will respond to your request within one month, as required by GDPR, unless the request is particularly complex or involves numerous requests.

10. Complaints

If you are not satisfied with our handling of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK. Visit the ICO website for more details: https://ico.org.uk.

11. Changes to This GDPR Policy

We reserve the right to modify this GDPR Policy at any time. Any changes will be posted on this page, and we will notify you of significant updates.

Contact Us

If you have any questions regarding this GDPR Policy or how we process your personal data, please contact us at: