Privacy Notice

This notice explains how Spiral Renewables collects and uses personal data, and what rights you have. It is written to meet our obligations under the UK GDPR and the Data Protection Act 2018.

Who we are

Spiral Renewables Ltd is the data controller for the personal data described in this notice.

• Registered office: C/O TaxAssist Accountants, Derby, Derbyshire, DE23 4TD, England
• Company number: 14300212
• ICO registration number: [to be provided — please confirm the current registration number]
• Contact for data protection matters: info@spiralrenewables.com

What we collect and why

If you contact us through this website

We collect your name, email address, telephone number, organisation, and whatever you tell us in your message.

We use it to respond to your enquiry and, if it leads somewhere, to prepare a proposal and manage the relationship. Our lawful basis is legitimate interests — responding to someone who has approached us about our services. Where we later send you marketing, we rely on your consent or on the soft opt-in for existing business contacts, and every message includes an unsubscribe.

If you are a client, supplier or subcontractor contact

We hold the business contact details of the people we deal with, together with records of correspondence, meetings, site attendance and project documentation.

We use this to perform the contract, to manage projects safely, and to meet our legal obligations. Our lawful bases are performance of a contract, legal obligation, and legitimate interests in running our business.

If you work on our sites

We hold names, qualifications and card details, training and induction records, emergency contact details, and records of any accident or incident.

We are required to hold much of this by health and safety law — CDM 2015, RIDDOR and the Management of Health and Safety at Work Regulations. Our lawful bases are legal obligation and legitimate interests in site safety. Where records touch on health, we rely on the condition in Article 9(2)(b) UK GDPR relating to employment, social security and social protection law.

If you apply for a job with us

We hold your application, CV, references and interview notes, on the basis of legitimate interests and steps taken at your request prior to entering a contract.

Who we share it with

We share personal data only where we need to:

• Network operators (DNOs and IDNOs) where a connection application requires it
• Clients and site operators where site access, permits or safety records require it
• Subcontractors and suppliers where they need it to carry out work
• Our professional advisers — accountants, solicitors, insurers and insurance brokers
• Regulators — including the HSE, the Environment Agency and the ICO, where required
• Our IT and software providers, who process data on our behalf under contract

We do not sell personal data, and we do not share it for anyone else's marketing.

Sending data outside the UK

Some of our software providers store data outside the UK. Where that happens we rely on UK adequacy regulations or, where none applies, on the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses, together with a transfer risk assessment.

How long we keep it

Your rights

You have the right to ask us to give you a copy of the personal data we hold about you, to correct it if it is wrong, to erase it, to restrict how we use it, and to give you a portable copy. You can object to processing we carry out on the basis of legitimate interests, and you can withdraw consent at any time where consent is the basis we rely on.

Write to us at info@spiralrenewables.com. We will respond within one month.

If you are not satisfied with how we handle your data or your request, you can complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113. We would rather you came to us first so we can put it right.

Cookies

We use cookies and similar technologies on this website. Cookies are small files placed on your device that let a site work properly and, in some cases, let us understand how it is used.

Cookies we use

We do not currently set any analytics or marketing cookies. The only storage item we use is strictly necessary to remember your cookie preference.

Your choices

We ask for your consent before setting any cookie that is not strictly necessary. You can change your choice at any time using the cookie settings link in the site footer, and you can block or delete cookies through your browser settings — though blocking necessary cookies may stop parts of the site working.

Changes

We may update this notice. The version in force is the one published on this page.

This notice sits alongside our Terms of Use.