PRIVACY POLICY

WHO WE ARE?

This privacy notice is issued by CompetentRoofer Limited a company registered in England and Wales (company number 5704588) with the registered address 31 Worship Street, London EC2A 2DY and known as ‘CompetentRoofer’ (collectively referred to as “we”; “us” and “our”) and relates to our use of any personal data, concerning you, (referred to as “data”, “you”, “your”, “user” and “end-user”) collected by us; where you are a CompetentRoofer registered (contractor) Business, an individual who works for or with a CompetentRoofer registered (contractor) Business or consumer.

We respect your privacy rights and your rights as a data subject. We will manage and protect your data accordingly whilst it is in our hands in accordance with all applicable data protection legislation and in accordance with this notice. This notice supersedes any previous Privacy Notice. We may update this Privacy Notice from time to time to ensure that is remains accurate.

WHO IS THE DATA CONTROLLER?

CompetentRoofer acts as a Data Controller in respect of your personal data that we process. If you have any questions about this Privacy Notice and how we use your personal data please get in touch using the details below:

CompetentRoofer Limited
31 Worship Street
London
EC2A 2DY

Tel: 020 448 3189

E-Mail: admin@competentroofer.co.uk

HOW DID WE RECEIVE YOUR DATA?

Your data was submitted to us, in order to arrange your certification services, by the CompetentRoofer registered contractor (business). Your data was not sourced, by us, from a publicly accessible source. We collect personal data via: Website forms, Secure CompetentRoofer registered contractor (business) Login Member Portal, Telephone, Email, Face to Face, Written documentation via Post.

WHAT TYPES OF DATA DO WE PROCESS?

Below is a list of data subject types and the information we collect and use:

CompetentRoofer registered (contractor) Business:

A company that is registered with CompetentRoofer Limited and is using one of our services. Information held will include: Contact Names, Contact telephone number, Contact Email.

Individual (who works for or with a CompetentRoofer registered (contractor) Business):

A person named as the key membership contact, a person responsible for Health and Safety, Person/s that provide installation work, for a CompetentRoofer registered contractor (Business) with those that provide installation work assessed by CompetentRoofer to carry out installation work that the CompetentRoofer Registered Business is certified for by CompetentRoofer.

Information held will include: Contact Name, Contact telephone number, Contact Email, Qualification, Training and Opinions of Competence records

Consumer:

A customer of the CompetentRoofer registered contractor (Business). Information will include Contact Name, Contact Telephone Number, Contact Email, Address.

In respect of your data: We do not hold or process special categories of data (those relating to your racial or ethnic origin; political opinions; religious or philosophical beliefs; trade union membership; sex life or orientation; genetic data; biometric data; or data relating to any criminal convictions or offences).

WHAT IS THE PURPOSE OF DATA PROCESSING?

We need to process your data in order to fulfil processes which determine if CompetentRoofer registered contractor (Businesses) meet CompetentRoofer Certification scheme criteria, which may include Government authorised schemes.

The legal basis for processing your data are:

  • Processing your data is necessary in order to protect the vital interests of building occupants and users by providing a framework for ensuring installation work meets industry standards and, where applicable, Building Regulation requirements.
  • Where your data is processed for a Competent Person Government endorsed scheme, processing your data is necessary in order to perform a public task in the public interest and the task has a required legislative requirement
  • Processing your data is necessary in pursuit of our legitimate interests in certifying CompetentRoofer registered contractor’s (Business) installation work.
  • Processing your data is necessary for the fulfilment of the certification contract between the CompetentRoofer registered contractor (business) and us.

HOW WILL WE USE YOUR DATA?

We will use your data, in the normal course of business to:

  • Certify installation work.
  • Handle consumer complaints.
  • Deal with any complaints that you may have.
  • Verify identity.
  • Confirm with third parties that you have, where applicable, met scheme requirements.
  • CompetentRoofer registered contractor’s (business) will be listed in a directory on CompetentRoofer.co.uk to enable consumers to contact or identify them.

Your data will not be used by us for the purposes of any automated decision-making or profiling.

WHAT TYPES OF DATA DO WE PROCESS?

CompetentRoofer registered (contractor) Business key contacts:

The data we hold is limited to your name, contact details, relevant qualifications, address; and information we receive as part of a complaint made by you.

Individual (who works for or with a CompetentRoofer registered (contractor) Business):

The data we hold is limited to your name, contact details, relevant qualifications and information we receive as part of a complaint made by you.

Consumer:

The data we hold is limited to your name; address; contact details; information about your installation; and information we receive as part of a complaint made by you.

WILL THIRD PARTIES RECEIVE YOUR DATA? WHAT ARE THEIR INTERESTS?

Your data shall be passed to the insurer, nominated by CompetentRoofer for them to perform the contract of insurance for installation works in line with CompetentRoofer certification scheme requirements and/or where we are bound by specific legal obligations to ensure that installation works carried out by CompetentRoofer registered contractor’s (Business) receive appropriate financial protection.

Certain administrative functions are carried out by Certass Limited on our behalf, the Certass CR Privacy notice is located at www.members.competentroofer.info/CCR-Privacy

Where CompetentRoofer has a legal duty, or is bound by scheme license holder requirements, CompetentRoofer will share information with national and local Government departments and scheme license holders.

We shall not transfer your data to organisations located in countries outside of the United Kingdom.

HOW LONG WILL WE KEEP YOUR DATA?

Your data will be retained only for as long as is necessary for us to effectively monitor the performance of the certified installed works or product during its life cycle. This means that your data will be retained until expected life of the installation work/products; or as long as is necessary to defend against legal claims; whichever period is the longest.

WHAT ARE YOUR RIGHTS TO THE DATA?

Right of Subject Access

You can request details of all data we hold about you by submitting a subject access request to the Data Protection Officer, at the address provided above.

We aim to comply with such a request from you within one month of the request being made. Where we cannot provide you with this information within one month; we shall inform you of this and provide the reasons why this cannot be achieved; at which point, we shall have a total of 3 months to comply with this request.

In the normal course of business, we shall not charge a fee for a subject access request. However, in the event that you make a subject access request that is of a manifestly unfounded, repetitive or excessive nature, we reserve the right to charge a fee of £10 per request.

Right of Rectification

In the event that your data is incorrect; you have the right to have this rectified by us. In the event that any of your data is incorrect, please contact the Data Controller at the address provided above. The only instance of a charge being applied for data to be rectified is when incorrect contact and/or property location details are provided or after 28 days from completion of a notification.

Right of Objection

You have the right to object to our processing of your data. Please note, that where we require to continue to process your data for reasons such as the defence of certification claims, we shall not be required to cease processing your data. In the event that you wish to object to us processing your data, please contact the Data Protection Officer at the address provided above.

Right of Erasure