Privacy Policy

Introduction
At Grangewood Constructions Limited, we respect your privacy and are committed to protecting your personal information. This policy explains the types of data we collect, how we use and protect it, and the rights you have under data protection laws, including the General Data Protection Regulation (GDPR).

What Personal Data We Collect
We collect personal information to deliver our services and meet legal requirements. The type of data we collect depends on how you interact with us and may include:

• Basic details: Your name, date of birth, gender, nationality, and employment information.

• Contact information: Your home address, email address, and telephone number(s).

• Identity verification data: Passport number, driving licence, National Insurance number, or similar identification details.

• Payment and banking details: Bank account numbers, sort codes, payment records, and transactional data.

• Communications: Records of emails, calls, and other interactions with our team.

• Website activity: IP addresses, browsing patterns, and cookie data from visits to our website.

• Publicly available information: Data sourced from professional networks like LinkedIn or from other publicly accessible records.

Occasionally, we may process sensitive data, such as health-related information, where it is necessary and permitted by law.
How We Collect Your Information
We gather personal data from several sources, including:

• Directly from you – When you sign up for services, contact us, or submit forms.

• Third parties – Information from business partners, credit agencies, identity verification services, and regulatory authorities.

• Automatically – When you visit our website, we collect data using cookies, tracking tools, and system logs.

How We Use Your Data
Your data is processed for purposes such as:

• Delivering our services: Setting up accounts, processing payments, and providing customer support.

• Compliance with legal obligations: Meeting requirements under financial regulations, anti-money laundering laws, and other legal obligations.

• Business operations: Monitoring service quality, analysing trends, and improving our operations.

• Security and fraud prevention: Identifying suspicious transactions and protecting our systems from misuse.

• Communication: Responding to enquiries, sending updates, and managing relationships.

• Marketing (where applicable): Sending relevant promotions and offers (only if you’ve agreed to receive them).

• Business transactions: Sharing data with potential investors or buyers if the business is restructured, merged, or sold.

Where possible, we anonymise data for reporting and analysis purposes.
Legal Grounds for Processing Your Data
We only process personal data where we have a legal reason to do so. This includes:

• Your consent – When you’ve given permission (e.g., for marketing). You can withdraw your consent at any time.

• Contract performance – When processing is necessary to fulfil a contract or service agreement with you.

• Legal obligations – When we are required by law to collect and process your data.

• Legitimate interests – When processing helps us run our business, provided it does not infringe on your rights.

Who We Share Your Data With
We may need to share your personal data with:

• Service providers and suppliers – Including IT providers, cloud storage services, and payment processors.

• Professional advisers – Including legal advisors, auditors, and accountants.

• Regulators and law enforcement agencies – When required to comply with legal obligations.

• Potential investors or buyers – If our business undergoes a sale, merger, or similar corporate transaction.

All third parties must comply with data protection laws and keep your data confidential.
International Data Transfers
If we need to transfer your data outside the UK or the European Economic Area (EEA), we will:

• Ensure the destination country has adequate data protection laws, or

• Put legally approved safeguards in place, such as standard contractual clauses, to protect your data.

We will inform you in advance if such transfers take place where required by law.
Keeping Your Data Secure
We have strict security measures in place to protect your personal data, including:

• Encryption and secure servers to store data.

• Access controls ensuring only authorised personnel can access your data.

• Ongoing staff training to ensure data protection is embedded in our business practices.

• Regular system monitoring to detect potential security threats.

While we do our best to safeguard your data, no online transmission can ever be completely secure. Any data you send is at your own risk.
How Long We Keep Your Data
We retain personal data for as long as necessary for:

• Delivering services and maintaining our business relationship.

• Meeting legal, tax, and regulatory requirements.

• Responding to any claims or legal disputes.

For example, under the Money Laundering Regulations 2017, we may retain records for up to six years after our relationship ends. Once data is no longer needed, it will be securely deleted or anonymised.
Your Rights
You have several rights under data protection laws, including:

• Access: Request a copy of your personal data.

• Correction: Ask us to correct inaccurate or incomplete data.

• Erasure: Ask us to delete your data when it’s no longer needed or legally required.

• Restriction: Ask us to limit how we process your data in certain circumstances.

• Object: Object to processing, particularly if based on legitimate interests.

• Withdraw consent: Stop receiving marketing communications at any time.

• Data portability: Request a copy of your data in a structured format to transfer to another provider.

To exercise any of these rights, contact us using the details provided above. We may need to confirm your identity before processing your request.
Cookies and Tracking Technologies
Our website uses cookies and similar technologies to:

• Improve site performance and tailor your experience.

• Track visitor behaviour to understand how our website is used.

• Support security and fraud prevention.

You can adjust your cookie preferences through your browser settings at any time. Please note some features may not work correctly if cookies are disabled.
Contact Us
For any questions, to exercise your rights, or to request further details, please get in touch:
Grangewood Constructions Limited
Bartle House, 9 Oxford Court, Manchester, England, M2 3WQ 
Email: enquires@grangewoodconstructions.com
Policy Updates
We may update this Privacy Policy occasionally to reflect changes in the law or in how we handle your data. When we make significant changes, we will notify you where appropriate.