WHO WE ARE
​
We are CS Mitchell Ltd (registered in England and Wales under company registration number 04143041) and are the controller and responsible for your personal data (referred to as “CS Mitchell”, “Company”, “we”, “us” or “our” in this privacy policy).
​
CS Mitchell undertakes to meet its obligations under the Data Protection Act, the Privacy and Electronic Communications Regulations and the EU General Data Protection Regulation (GDPR).
​
Our contact details for CS Mitchell Ltd:
Unit 1, Southdown Enterprise Park,
Brunswick Road,
Ashford,
Kent,
TN23 1EL
Email address: privacy@mitchellhighways.com
​
​
YOUR DUTY TO INFORM US OF CHANGES
​
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
​
​
HOW WILL WE USE YOUR PERSONAL DATA?
​
​
Most commonly, we will use your personal data in the following circumstances:
​
-
Where we need to perform the contract we are about to enter into or have entered into with you.
-
Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests;
-
Where we need to comply with a legal or regulatory obligation;
-
To respond to questions or complaints you have about our services
-
To assess your suitability for employment and process your application;
-
To evidence company practices;
-
To contact you to ensure that our records of your personal information are correct;
-
To respond to questions or complaints you have about our services;
​
​
LAWFUL BASIS FOR COLLECTION OF YOUR PERSONAL DATA
​
We shall ensure that we have a lawful basis for collection of personal data, namely either:
-
Where we need it to perform a contract we are about to enter into, or have entered into, with you;
-
For the purposes of the legitimate interest pursued by us.
-
Where you have given consent.
​
​
DISCLOSURES/SHARING OF YOUR PERSONAL DATA
​
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
​
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
​
We keep information on unsuccessful employment applications for six (6) months in case another alternative role becomes available that we think you may be suitable for.
​
We keep basic personal data about our customers for the duration of your business relationship with us and thereafter as required for legal and audit purposes.
​
​
DATA SECURITY
​
We will ensure that your data is only accessible to authorised people in our firm and will remain confidential at all times. Appropriate security measures will be in place to prevent unauthorised access, alteration, disclosure, loss, damage or destruction of your information. If we have a contract with another organisation to provide us with services or a service on our behalf to process your personal information, we’ll make sure they give reassurances regarding appropriate security measures in place and only process your information in the way we’ve authorised them to. These organisations won’t be entitled to use your personal information for their own purposes. If necessary, our security teams will check them to make sure they meet the security requirements we’ve set.
​
We have put in place procedures to deal with any suspected personal data breach.
​
​
HOW LONG WILL WE HOLD YOUR PERSONAL DATA FOR?
​
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
​
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
​
We keep information on unsuccessful employment applications for six (6) months in case another alternative role becomes available that we think you may be suitable for.
​
We keep basic personal data about our customers for the duration of your business relationship with us and thereafter as required for legal and audit purposes.
​
​
IMPORTANT RIGHTS
​
You have the right, on grounds relating to your situation, at any time to object to processing which is carried out as part of our legitimate interests or in the performance of a task carried out in the public interest. We will no longer process your data unless we can demonstrate there are compelling legitimate grounds which override your rights and freedoms or unless processing is necessary for the establishment, exercise or defence of legal claims.
​
You have the right to object at any time to processing your personal data for marketing activities. In such a case we must stop processing for this purpose.
​
​
REQUESTING A COPY OF THE INFORMATION WE HOLD
​
You may at any time ask for a copy of the information we hold about you – it is your legal right. We will provide you with a copy of any non-exempt personal information within one month unless we ask you for an extension of time. To protect your personal data, we will ask you to verify your identity before we release any information. We may refuse your request if we are unable to confirm your identity.
​
​
COMPLAINTS
​
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO. Therefore, please contact our Data Protection Officer (privacy@mitchellhighways.com) in the first instance.
​