Business 

Privacy and Cookie Policy

 

Codetronix Ltd.

This Privacy Policy sets out how Codetronix Ltd. (the Company) uses, stores and protects any information that you give us whether through this website, over the phone, by email, in person or otherwise.

The Company is committed to ensuring that both your privacy is protected and that we remain compliant with all relevant data protection legislation, including the General Data Protection Regulation (EU) 2016/679.

We may change this Privacy Policy from time to time by updating this page. You should check this page intermittently to ensure that you are happy with any changes. This Privacy Policy is effective from 01 May 2020.

What personal information do we collect?

We routinely collect and process personal information relating to our prospects, customers, suppliers, sub-contractors and other third parties. This collection of data takes place when we contact you, you contact us and also if you are a visitor to our offices or sites.

Any personal information we collect will be used by us strictly in accordance with current data protection legislation and this Privacy Policy.

Examples of the data that we hold and the basis for holding are below:

Who?	What is held?	Basis for holding
Representatives of prospects and customers	Business contact details — names, addresses, job titles, email addresses and telephone numbers.	We hold this information in order to negotiate, quote and fulfil contracts. (GDPR Legal Basis – Contractual Necessity)
Representatives of sub-contractors and suppliers	Business contact details — names, addresses, job titles, email addresses and telephone numbers.	We hold this information in order to negotiate, quote and fulfil contracts. (GDPR Legal Basis – Contractual Necessity)

 

 

Representatives of sub-contractors and suppliers — on site inductions	Induction records — names, signatures, company names, telephone numbers, postcodes, car registrations, emergency contact details and medical records.	We hold this information to ensure that only suitably qualified, inducted and trained persons are permitted onto sites and that our sites are suitable workspace environments. This ensures that we are compliant with relevant legislation, including the Health and Safety at Work etc Act 1974 and the Equality Act 2010. (GDPR Legal Basis – processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law in so far as it is authorised by Union or Member State law or a collective agreement pursuant to Member State law providing for appropriate safeguards for the fundamental rights and the interests of the data subject)
Prospective employees and unsuccessful candidates	Contact details and other information usually found on a CV — names, addresses, email addresses, employment histories, qualifications and telephone numbers.	We hold this information in order to: (1) recruit new employees; and (2) contact unsuccessful candidates and invite them to apply for future vacancies. (GDPR Legal Basis – Contractual Necessity for Successful Candidates and Legitimate Interest for Unsuccessful Candidates)
Visitors to the website	IP address.	We use this information to analyse traffic to our website in order to enhance the website that we provide. (GDPR Legal Basis – Legitimate Interest and Consent for non-essential cookies, etc)
Marketing and Promotional Content	Name, Business Address, Email Address, Contact Number	Consent

Should we ask you to provide certain information by which you can be identified then you can be assured that it will only be used in accordance with this Privacy Policy.

Why do we collect this information?

This information is collected, stored and processed by us to pursue our legitimate interests in:

a. fulfilling contracts with our customers.

b. quoting, tendering, negotiating and fulfilling orders for the supply of goods and services with subcontractors and suppliers.

c. ensuring that our company practices are safe, secure, and compliant with all necessary legislation.

d. marketing and promoting our business, both generally and specifically in relation to ongoing and completed projects.

Lawful Basis for Processing Data

• the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
• processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
• processing is necessary for compliance with a legal obligation to which the controller is subject;
• processing is necessary in order to protect the vital interests of the data subject or of another natural person;
• processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
• processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Where is the data stored and how long for?

We hold personal data in a variety of forms, which include paper records, electronically on cloud-based systems, electronically on local servers and on company hardware.

We will hold the data for as long as we continue to have a legitimate interest to do so.

These timescales will be kept under review from time to time.

How We Store Your Data

We take appropriate technical and organisational measures to protect your personal data. This includes encryption, access control, and regular security assessments to prevent unauthorised access, loss, or misuse of personal data.

Personal data will only be stored for as long as necessary to fulfil the purposes outlined in this Privacy Notice or required by law.

International Data Transfers

As a company based in the UK, we may transfer personal data to countries within the EEA, particularly the Republic of Ireland. The UK has made an adequacy decision regarding the transfer of personal data to EEA (European Economic Area) countries (which includes EU member states, as well as Norway, Iceland, and Liechtenstein). As a result, personal data can be transferred from the UK to these countries without the need for additional safeguards, as they are deemed to offer an adequate level of data protection under UK GDPR.

If we need to transfer personal data to countries outside the UK that are not covered by an adequacy decision, we will ensure that appropriate safeguards are in place, such as;

• Standard Contractual Clauses (SCCs): We will use UK-approved SCCs to ensure that your personal data is adequately protected during the transfer.
• Binding Corporate Rules (BCRs): Where applicable, we may rely on approved BCRs to facilitate international data transfers within our organisation.
• Other Safeguards: Where necessary, we will implement additional measures to ensure compliance with UK GDPR and protect personal data.

We are committed to ensuring that personal data is handled securely and in line with applicable data protection laws.

Your rights

You have a number of rights in relation to the personal data that we hold. These include:

1. Right to be Informed: Data subjects have the right to be informed about the collection and use of their personal data.
2. Right to Access: Data subjects have the right to view and request copies of their personal data.
3. Right to Rectification: Data subjects have the right to request inaccurate or outdated personal information be updated or corrected.
4. Right to be Forgotten/Right to Erasure: Data subjects have the right to request their personal data be deleted. Note that this is not an absolute right and may be subject to exemptions based on certain laws.
5. Right to Data Portability: Data subjects have the right to ask for their data to be transferred to another controller or provided to them. The data must be provided in a machine-readable electronic format.
6. Right to Restrict Processing: Data subjects have the right to request the restriction or suppression of their personal data.
7. Right to Withdraw Consent: Data subjects have the right to withdraw previously given consent to process their personal Please note that this is not an absolute right and may be subject to exemptions based on certain laws.
8. Right to Object: Data subjects have the right to object to the processing of their personal data.
9. Right to Object to Automated Processing: Data subjects have the right to object to decisions being made with the data solely based on automated decision-making or
10. Right to Make a Complaint: Data subjects have the right to file a complaint with the Information Commissioner’s Office (ICO). 

Complaints or Enquiries

If you would like to exercise any of your rights, please use the contact information above, FAO the Data Protection Officer.

If you believe that we are processing your personal data unlawfully, you have the legal right to lodge a complaint with the Information Commissioner’s Office (ICO) at:

Information Commissioner’s Office

Wycliffe House, Water Lane,

Wilmslow,

Cheshire,

SK9 5AF

Telephone: 0303 123 1113

Further information on these rights can be found on the website of the Information Commissioner’s Office at https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulationgdpr/individual-rights/

If you are concerned that any of the information we hold on you is incorrect or if you wish to object to the use we have made of your personal data, please contact us by telephone or email to: [email protected]

Cookie Policy

Effective Date: 26-Mar-2025
Last Updated: 26-Mar-2025

 

What are cookies?

 

How do we use cookies?

 

Types of Cookies we use

 

Manage cookie preferences

Cookie Settings

Third Party Privacy Policies

• Google Analytics Privacy Policy:

  • Google Privacy & Terms

• Google Tag Manager Privacy Policy:

  • Google Tag Manager Privacy Policy

• YouTube Privacy Policy (Owned by Google):

  • YouTube Privacy Policy 

Cookie Policy Generated By CookieYes – Cookie Policy Generator.