Skip to main content
Header image Advisors

Privacy Policy

Severfield plc respects your privacy and is committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website and will tell you about your privacy rights and how the law protects you.

This privacy policy will inform you as to how we look after your personal data when you visit our website and will tell you about your privacy rights and how the law protects you.

Privacy

1. Important information and who we are

Purpose of this Privacy Policy

This privacy notice explains how Severfield collects, uses, stores and protects personal data when you visit this website, contact us, submit information through the website, or otherwise interact with us online.

This website is not intended for children, and we do not knowingly collect personal data from children through this website.

For data protection purposes, the controller will be the relevant Severfield group company responsible for the website or for the services, recruitment activity or communications connected with the personal data collected. When we refer to “Severfield”, “we”, “us” or “our” in this notice, we mean the relevant company in the Severfield group acting as controller of your personal data.

Contact details

If you have questions about this privacy notice or wish to exercise your data protection rights, please contact:

Severfield plc

Contact: Company Secretary

Email: mark.sanderson@severfield.com

Address: Severs House, Dalton Airfield Industrial Estate, Dalton, Thirsk, North Yorkshire, YO7 3JN, UK

Telephone: +44 (0) 1845 577896

You have the right to raise a complaint with us if you are unhappy with how we have handled your personal data.

You can make a complaint by contacting us using the details set out above. We will:

  • acknowledge your complaint within 30 days, and
  • investigate and respond without undue delay.

We encourage you to contact us first so we can try to resolve your concern. However, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at any time ([http://www.ico.org.uk)]www.ico.org.uk).

For individuals in the Netherlands, complaints may also be made to the Autoriteit Persoonsgegevens (AP), the Dutch data protection authority. The AP supervises compliance with the GDPR in the Netherlands.

Changes to this privacy notice

We may update this privacy notice from time to time. Any changes will be published on this page, and where appropriate we will take additional steps to bring material changes to your attention.

Please also let us know if the personal data you have provided to us changes and it is important that our records are kept accurate and up to date.

2. The personal data we collect

We may collect, use, store and transfer different kinds of personal data about you, including:

  • Identity data, such as your name
  • Contact data, such as your email address, telephone number, postal address or company details where provided
  • Correspondence data, such as the contents of messages you send through contact forms, email or other website enquiries
  • Recruitment data, such as information contained in a CV, covering letter or job application submitted through the website
  • Technical data, such as IP address, browser type and version, time zone and location, operating system, device type and other technology on the devices you use to access the website
  • Usage data, such as information about how you use our website, pages viewed, navigation paths and interactions with the site
  • Cookie and preference data, where cookies or similar technologies are used in accordance with our cookie settings and cookie policy

We do not intentionally collect special category personal data through the general use of this website unless you choose to provide it, for example in a recruitment application or free-text form. Please avoid including unnecessary sensitive personal information in website enquiries.

3. How your personal data is collected

We collect personal data:

  • directly from you, when you complete forms, contact us, subscribe to communications, submit an enquiry, or apply for a role
  • automatically, through cookies, server logs and similar technologies when you use the website
  • from third parties, where relevant, such as analytics providers, recruitment service providers, IT service providers, or publicly available sources

Where cookies or similar technologies are used, further information should be provided in the website’s cookie policy and cookie controls.

4. How we use your personal data and our legal bases

Data protection law requires us to have a lawful basis for processing personal data. Depending on the context, we may use your personal data on one or more of the following legal bases:

  • Consent, for example where you ask to receive certain communications or where non-essential cookies are used and consent is required
  • Performance of a contract or taking steps at your request before entering into a contract
  • Legitimate interests, where it is necessary for our legitimate business interests and those interests are not overridden by your rights and interests
  • Compliance with a legal obligation
  • In limited cases, another lawful basis permitted by applicable data protection law

We may use personal data for the following purposes:

  • to respond to enquiries and requests sent through the website
  • to provide information, services or materials you request from us
  • to manage recruitment activity and assess applications
  • to operate, maintain, secure and improve the website and user experience
  • to administer and protect our business and website, including troubleshooting, testing, system maintenance, support, reporting and hosting of data
  • to analyse website use and improve content, structure and performance
  • to comply with legal, regulatory and governance obligations
  • to establish, exercise or defend legal claims

Where we rely on legitimate interests, those interests may include operating our business effectively, managing website performance, improving our services, ensuring network and information security, and responding to enquiries appropriately.

5. Cookies and analytics

  • This website may use cookies and similar technologies to distinguish you from other users, to enable website functionality, to understand how the website is used, and to improve website performance and user experience.
  • Where required by law, non-essential cookies will only be used with your consent. You can manage cookie preferences through the cookie banner or settings tool made available on the website. More information should be provided in our Cookie Policy.

6. Disclosure of your personal data

We may share personal data where necessary with:

  • other companies within the Severfield group
  • service providers acting on our behalf, such as website hosting, IT support, analytics, recruitment platform, professional advisers and communications providers
  • regulators, supervisory authorities, courts, law enforcement agencies or other public authorities where required by law or to protect our rights
  • potential buyers, investors, funders or successors in title in connection with a business sale, merger, acquisition or reorganisation

We require service providers acting on our behalf to respect the security of personal data and to process it only on our instructions where they act as processors.

7. International transfers

Your personal data may be stored or processed outside the UK or outside the European Economic Area in some circumstances, for example where a service provider uses international infrastructure or support services.

Where personal data is transferred internationally, we will ensure that an appropriate safeguard is used where required by law. This may include:

  • transfer to a country that benefits from an adequacy decision or adequacy regulations, where applicable, or
  • use of approved contractual safeguards, such as the International Data Transfer Agreement, the UK Addendum or the European Commission’s Standard Contractual Clauses, together with any supplementary measures required

The ICO explains that where UK adequacy regulations apply, additional transfer safeguards such as a transfer risk assessment are not required for that restricted transfer.

8. Data security

We have put in place appropriate technical and organisational security measures intended to protect personal data from accidental loss, unauthorised access, alteration, disclosure or destruction.

Access to personal data is limited to those employees, agents, contractors and service providers who have a business need to know. They will only process personal data on our instructions or under appropriate legal obligations.

Please note that transmission of information over the internet is never completely secure. While we take appropriate steps to protect personal data, we cannot guarantee the absolute security of information transmitted to the website.

9. Data retention

We will retain personal data only for as long as necessary for the purposes for which it was collected, including for legal, regulatory, tax, accounting, reporting and legitimate business needs.

The retention period will depend on the type of data, the purpose for which it is used, and any legal or regulatory obligations that apply. When personal data is no longer required, we will delete it securely or anonymise it.

Where appropriate, more detailed retention periods may be set out in an internal retention schedule or in specific notices provided at the point of collection, such as recruitment privacy information.

10. Your legal rights

Depending on your location and the circumstances of the processing, you may have the following rights under applicable data protection law:

  • the right to be informed about how your personal data is used
  • the right of access to your personal data
  • the right to rectification of inaccurate personal data
  • the right to erasure in certain circumstances
  • the right to restrict processing in certain circumstances
  • the right to object to processing in certain circumstances, including certain processing based on legitimate interests and direct marketing
  • the right to data portability in certain circumstances
  • the right to withdraw consent at any time where processing is based on consent
  • rights relating to complaints to the relevant supervisory authority

The UK ICO’s guidance states that privacy information should explain people’s rights, including access, rectification, erasure, restriction, objection, portability, withdrawal of consent where applicable, and the right to complain to a supervisory authority.

If you wish to exercise any of these rights, please contact us using the details above.

You will not usually have to pay a fee to exercise your rights, although we may charge a reasonable fee or refuse a request where the law allows us to do so, for example if a request is manifestly unfounded or excessive.

We may need to request information from you to verify your identity before responding to your request.

We aim to respond within one month, although this period may be extended where the law permits, for example where requests are complex or numerous.

11. Third-party websites

This website may contain links to third-party websites, plug-ins or applications. If you follow a link to a third-party website, that website will have its own privacy information and practices. We do not control those third-party websites and are not responsible for their privacy practices.