HAPRO Ltd is committed to protecting the privacy of our clients, suppliers, clients and users of our website. HAPRO Ltd, in common with other businesses, collects and manages client and non-client data as part of the day to day running of our business. We are committed to protecting your personal data and this policy sets out how we collect and process that. Please read the following carefully to understand your rights under the General Data Protection Regulations (GDPR) to understand your rights and our practices regarding your personal data.

HAPRO Ltd acts as a “data controller” and will ensure that the information you submit to us via our website or through any other means is only used of the purposes set out in this privacy notice.

What data is being collected?

Examples of the “personal data” we handle for the above purposes are your name, home address, email address, telephone and other contact numbers as well as some financial/bank information to allow us to collect or make payments.

We collect this in a number of different ways. For example, you may provide this data to us directly online or over the telephone, or when corresponding with us by email or letter.

We do not process sensitive classes of information.

Cookies

When visiting our website, cookies may be used to collect information to collect standard internet log and visitor behaviour information as well as to check and improve performance and content of our website. See our Cookie Policy for more information.

HAPRO Ltd uses certain third parties (for example, providers of customer support and IT services) to help us provide, improve, protect and promote our services. These third parties will only access your information to perform tasks on our behalf in compliance with this Privacy Policy, and we will remain responsible for their handling of your information in accordance with our instructions.

We have set out below:

• What we use the personal data for
• Our legal basis for processing the data
• Sharing of personal data with third-party organisations

We use some personal data to administer our relationship with you, provide and advise on services. The lawful basis for this is to comply with the requirements of a contract. We may share this data with our IT advisors in relation to the functionality of databases when appropriate.

We may use personal data to respond to enquiries. The lawful basis for this is to comply with the requirements of a contract or where appropriate to act/advise before entering into a contract. We may share this data with sub-contractors where appropriate (such as archaeological excavation units, specialist researchers or consultants e.g. relating to asbestos) for the purposes of undertaking the contractual works in line with preferences.

We may use personal data to administer our billing and payment processes. The lawful basis of this is to comply with the requirements of a contract and legitimate interest. We may share this data with Government VAT and tax inspectors, external auditors, internal auditors.

We may use personal data to enable business development e.g. updates, newsletters and invitations to events/networking opportunities which are relevant to your interests and preferences. We will seek consent from individuals before sending them the information and to ensure it is in line with their preferences.

We may use personal data to process and respond to complaints or to comply with a legal obligation.

We may use personal data to monitor and record information relating to the use of our services and our website. The lawful basis of this is compliance with a legitimate interest in order to improve our services generally and website content and functionality. We may share this data with web service providers and cookie providers.

We may capture photographs and videos to be used for marketing and promotional material for the firm, including our website, brochures, bids and tenders. We will seek explicit consent prior to collecting and using this information.

We may use personal data to conduct human resource administration and to fulfil contractual obligations which includes steps prior to entering into a contract. This data may be shared with our recruitment agents, lawyers, accountants and HMRC where appropriate.

Under the terms of data protection legislation, you have the following rights:

Right to Be Informed

This privacy notice.

Right to Access

You have the right to ask us for a copy of any personal data that we hold about you. You can obtain this information at no cost and we will send you a copy of the information within 30 days of your request unless there are grounds for an extension of time. To make your request, please contact us at the address below*

Right to Rectification

If any personal data we hold is inaccurate and you would like us to rectify it please contact us at the address below*

Right to Be Forgotten

You can request that we erase all personal information that we hold about you. Where it is appropriate that we comply, your request will be actioned within 30 days unless there are grounds for an extension of time. Please contact us at the address below

Right to Restrict Processing

You may wish us to restrict the use of your data because:

• You think it is inaccurate (we will restrict usage until the data is verified);
• You believe our data processing is unlawful, but you do not want your data erased and would prefer restriction;
• You want us to retain your data in order to establish, exercise or defend a legal claim.

Right to Data Portability

If you would like to move, copy or transfer the electronic personal data that we hold about you to another organisation, please contact us*.

Right to Object

You may object to us processing personal data. If this is in relation to direct marketing, we will stop. If it is in relation to other grounds we will stop processing the personal data unless we can demonstrate compelling legitimate grounds for the processing, which override the interests, rights and freedoms of the individual; or the processing is for the establishment, exercise or defence of legal claims.

Rights Related to Automated Decision-Making

HAPRO Ltd does not undertake this

*To exercise any of these rights please contact Paul White by email dataprotection@hapro.co.uk

Period of Retention of Information

HAPRO will retain information for a period of up to 12 years. This is due to the requirements of our clients in relation to land transactions and to ensure we comply with insurance requirements.

If you have any queries you may contact our Data Protection Manager, Paul White, at HAPRO Ltd, 17 Ashfield Road, Andover, SP10 3PE. Alternatively, you have the right to lodge a complaint with the Information Commissioner’s Office who may be contacted at Wycliffe House, Water Lane, Wilmslow SK9 5AF or https://ico.org.uk.

Changes

If we change our Privacy Policy, we will post the changes on this page. If we decide to, we may also email you.

Our details

This website is owned and operated by HAPRO Ltd.

We are registered in England and Wales under registration number 16536457 and our registered office is at 37-39 Southgate Chambers, Southgate Chambers, Winchester, SO23 9EH.

Our principal place of business is at 17 Ashfield Road. Andover, SP10 3PE.

You can contact us:

• by post, to the postal address given above;
• using our website contact form;
• by telephone, on the contact number published on our website from time to time; or
• by email, using the email address published on our website from time to time.