Data protection policy

This policy applies to all personal data processed by SiteSafe Solution, whether it relates to enquirers, clients, client staff, suppliers or anyone else. It sits alongside our privacy policy (which explains website data in detail) and our GDPR compliance procedures (which set out how we act on this policy day to day).

We process personal data in line with the UK GDPR principles:

• Lawfully, fairly and transparently. We only process data where we have a lawful basis, and we tell people what we do with it.
• For specified purposes. We collect data for clear reasons, such as answering enquiries and delivering engagements, and don't reuse it for something incompatible.
• Data minimisation. We collect only what we actually need.
• Accuracy. We keep records up to date and correct them when told they are wrong.
• Storage limitation. We keep data only as long as needed, then delete it securely.
• Integrity and confidentiality. We protect data with appropriate technical and organisational measures.
• Accountability. We can show how we meet these principles.

Health and safety work often involves personal data belonging to our clients' staff, for example in accident records, training registers or audit findings. We treat that data as confidential, process it only as needed for the engagement, and return or securely delete it when the engagement ends, unless we are required to keep it by law or professional obligation.

• Data is stored with reputable providers offering encryption in transit and at rest.
• Access is limited to those who need it for their work.
• Devices used for our work are protected with authentication and kept updated.
• Paper records, where unavoidable, are stored securely and destroyed when no longer needed.

Responsibility for data protection rests with the owner of SiteSafe Solution. Any questions, concerns or requests about personal data can be sent to Nedim@sitesafesolution.co.uk.

This policy is reviewed at least annually and whenever our processing, suppliers or the law change in a way that affects it.