Privacy Policy

Last updated: 8/12/2025

Spectra (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, store, and protect personal information across all Spectra services, including enabling works, demolition, asbestos management, fire protection, environmental remediation, damp and mould removal, carpentry services, surveys, consultancy, and associated operations.

We comply fully with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

---

1. Who We Are

Spectra operates as a multidisciplinary service provider offering construction, safety, and environmental solutions throughout the UK.
For any privacy or data protection queries, you can contact us at:

Email: info@spectraholdings.co.uk
Telephone: 01268 534380
Address: Spectra, 2 Olympic Business Centre, Paycocke Road, Essex SS14 3EX

---

2. Personal Data We Collect

We may collect and process the following types of personal information:

Information you provide directly

• Name, job title and contact information

• Email address and telephone number

• Project or service enquiry details

• Billing, payment, and invoicing information

• Any documents you submit to us

• Recruitment information (CVs, qualifications, right-to-work evidence)

Information we collect automatically

• Website usage data (via analytics tools)

• IP address, browser type, device information

• Cookie-based activity (see Cookies section)

Information received from third parties

• Main contractors, local authorities, consultants or partners you are working with

• Training and accreditation bodies

• Regulatory bodies (e.g., HSE, Environment Agency)

---

3. How We Use Your Personal Data

We use personal information for purposes including:

• Responding to enquiries and providing quotations

• Delivering our services and managing projects

• Maintaining compliance documentation (e.g., CAR2012, HSG 264, fire protection certification)

• Managing contractual and financial relationships

• Health and safety records, audits, and site access requirements

• Customer service, aftercare and warranty support

• Improving website performance and user experience

• Recruitment and HR administration

• Meeting legal, regulatory and insurance obligations

We will only process your data where we have a legal basis, such as consent, performance of a contract, legal obligation, or legitimate business interest.

---

4. Sharing Your Personal Data

We do not sell or licence your personal data to third parties.

We may share information with:

• Subcontractors or service partners involved in your project

• UKAS-accredited testing laboratories

• Regulatory bodies such as the HSE or local authorities

• Insurance providers and auditors

• IT providers and secure third-party storage solutions

• Professional advisers (lawyers, accountants, consultants)

Any third party we work with must comply with GDPR and handle your data securely.

---

5. International Transfers

We do not routinely transfer data outside the UK.
If a transfer is required (e.g., cloud storage), we ensure appropriate safeguards are in place such as adequacy decisions or Standard Contractual Clauses (SCCs).

---

6. Data Retention

We retain personal data only as long as necessary for:

• Contractual requirements

• Legal and regulatory compliance

• Warranty, certification and audit purposes

• Legitimate operational needs

Typical retention periods range from 1 to 10 years, depending on the type of record.

---

7. How We Protect Your Data

We implement strict technical and organisational measures, including:

• Secure servers and encrypted data storage

• Access controls and authentication

• Staff training on data protection and confidentiality

• Secure disposal of documents and digital files

• Regular audits and compliance checks

---

8. Your Rights Under UK GDPR

You have the following rights:

• Access – Request a copy of your personal data

• Rectification – Correct inaccurate or incomplete information

• Erasure – Request deletion of your data (where lawful)

• Restriction – Limit how your data is processed

• Objection – Object to processing based on legitimate interest

• Data Portability – Request data be transferred to another provider

• Withdraw Consent – Where processing is based on your consent

To exercise your rights, contact: info@spectraholdings.co.uk

---

9. Cookies

Our website may use cookies to improve user experience, monitor site performance, and analyse traffic.
You can control cookie preferences through your browser settings.
A full cookie policy can be provided upon request.

---

10. Links to Third-Party Websites

Our website may contain links to other websites.
We are not responsible for the privacy practices or content of those sites.

---

11. Updates to This Privacy Policy

We may update this policy occasionally.
The latest version will always be available on our website with the updated date displayed at the top.

---

12. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact:

Spectra – Data Protection Enquiries
📧 info@spectraholdings.co.uk
📞 01268 534380