This policy explains what personal information First Call collects when you visit our website, contact us, apply for a job or work with us, how we use it, and the rights you have over it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
First Call is a highways, traffic management, civil engineering and utilities contractor operating from Newmarket, Norwich and South Mymms. For the purposes of data protection law, First Call is the controller of the personal information described in this policy.
- Controller
- First Call
- Address
- Newmarket, Suffolk CB8 7LG
- ICO registration
- ZA658892
- info@firstcalltm.co.uk
- Phone
- 01707 244593
If you have any questions about this policy or how we handle your information, contact us using the details above.
What we collect
When you contact us
If you email or phone us, we collect the details you give us, such as your name, organisation, job title, email address, phone number and the content of your enquiry.
When you apply for a job
If you apply for a vacancy, we collect the information in your CV and covering message, such as your contact details, work history, qualifications, training cards and certifications, and references. If your application progresses, we may also collect right-to-work documents and, where a role requires it, information needed for client vetting or site access.
When you work with us
If you are a client, supplier or subcontractor, or work for one, we hold business contact details and records of our dealings with you, such as correspondence, contracts, orders and invoices.
When you visit our website
Our website does not have user accounts or online forms. Our hosting provider automatically records basic technical information when pages are requested, such as your IP address, browser type and the date and time of your visit. This is used to deliver the site and keep it secure.
How we use it
We only use personal information where the law allows us to. The table below sets out what we use it for and our legal basis for doing so.
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and quotation requests | Legitimate interests in running our business and responding to people who contact us |
| Assessing job applications and recruiting | Steps taken at your request before entering into a contract; legitimate interests in recruiting suitable people |
| Checking right to work in the UK | Legal obligation |
| Delivering contracts with clients, suppliers and subcontractors | Performance of a contract; legitimate interests where the contract is with your employer |
| Keeping financial, health and safety and accreditation records | Legal obligation; legitimate interests in meeting the standards our clients and certification bodies require |
| Operating and securing our website | Legitimate interests in providing a secure, working website |
We do not sell personal information, and we do not use it for automated decision-making or profiling.
International transfers
Some of our service providers, including our website host, may process information outside the UK. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement approved by the Information Commissioner.
How long we keep it
We keep personal information only for as long as we need it for the purpose it was collected for, including any legal, accounting or reporting requirements.
- General enquiries: up to 2 years from our last contact, unless they lead to ongoing work
- Unsuccessful job applications: 6 months after the recruitment decision
- Contract and financial records: 6 years from the end of the financial year they relate to
- Website server logs: in line with our hosting provider's standard retention
If you are offered and accept a job, your application becomes part of your employee record and is handled under our employee privacy notice.
Keeping it secure
We use appropriate technical and organisational measures to protect personal information against loss, misuse and unauthorised access. Access is limited to people who need it for their role, and our management systems are certified to ISO 9001, ISO 14001 and ISO 45001.
Your rights
You have the right to:
- ask for a copy of the personal information we hold about you
- ask us to correct information that is inaccurate or incomplete
- ask us to delete your information
- ask us to restrict how we use your information
- object to us using your information where we rely on legitimate interests
- ask us to transfer information you gave us to another organisation
Some of these rights only apply in certain circumstances. To make a request, email info@firstcalltm.co.uk. We will respond within one month, and there is normally no charge.
Complaints
If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection, at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.