Privacy Policy

---

1. Introduction

Harrison Steel Properties Ltd (“we”, “us”, “our”) is committed to protecting the privacy and security of our clients, suppliers, contractors, and website visitors. This Privacy Policy explains how we collect, use, store, and protect personal data when providing Non-Domestic Energy Performance Certificate (EPC) services. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable laws.

2. Information We Collect

We may collect the following personal and business information:

• Contact Information: Name, address, email address, phone number.
• Business Details: Company name, premises address, property      ownership/tenancy information.
• EPC Assessment Data: Building plans, meter readings, photographs, site notes, technical details, and energy usage information.
• Payment Information: Bank details or payment-related data for invoicing purposes.
• Communications: Emails, telephone records, and written correspondence.

3. How We Collect Your Information

We may collect your personal data via:

• Direct communication (email, phone, forms, or in person).
• Site visits and surveys during EPC assessments.
• Third-party sources such as public property records or government registers (where legally permitted).
• Our website (via contact forms, cookies, or analytics tools).

4. How We Use Your Information

We use your personal data to:

• Provide and complete Non-Domestic EPC assessments.
• Produce and lodge EPCs on the government’s EPC register.
• Communicate with you about appointments, reports, and billing.
• Maintain accurate internal records.
• Comply with legal and regulatory obligations.

5. Legal Basis for Processing

We process your personal data under one or more of the following legal grounds:

• Contract: Processing is necessary to deliver our EPC services.
• Legal Obligation: Required to lodge EPCs and maintain assessment records.
• Legitimate Interests: For administration, record keeping, and improving services.
• Consent: For specific marketing or communications (where applicable).

6. Data Sharing & Disclosure

We will never sell your personal data. We may share your data with:

• The official government EPC register (as legally required).
• Our accreditation body (for audit and compliance purposes).
• Subcontractors or consultants working on our behalf (bound by confidentiality).
• Legal, regulatory, or enforcement bodies when required by law.

7. Data Retention

We keep personal data only for as long as necessary to meet legal, contractual, and operational requirements.

• EPC-related data is retained for 15 years in line with EPC validity unless otherwise required by law.

8. Data Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or destruction, including:

• Secure, password-protected systems.
• Encrypted data storage where applicable.
• Restricted access to sensitive information.

9. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate information.
• Request deletion of your data (where legally permissible).
• Restrict or object to data processing.
• Request a copy of your data in a portable format.

To exercise these rights, please contact us using the details below.

10. Cookies & Website Use

Our website may use cookies or similar tracking technologies to improve your browsing experience and analyse site usage. You can control or disable cookies through your browser settings.

11. Contact Us

Harrison Steel Properties Ltd
Sixty Six, North Quay, Great Yarmouth, Norfolk, United Kingdom, NR30 1HE
Email: info@steelharrison.co.uk
ICO Registration Number: ZB640083

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website and, where appropriate, notified to you directly.