Business Safety Systems Ltd Customer Privacy Notice

Contact details

Telephone: 01785-430430

Email: accounts@business-safety.com

What information we collect, use, and why

We collect or use the following personal information for the operation of client or customer accounts:

  • Names and contact details
  • Addresses
  • Purchase or service history
  • Account information, including registration details
  • Information used for security purposes
  • Marketing preferences
  • Technical data, including information about browser and operating systems

We collect or use the following personal information for the prevention, detection, investigation or prosecution of crimes:

  • Names and contact information
  • Client accounts and records
  • Location data

We also collect or use the following information for the prevention, detection, investigation or prosecution of crimes:

  • Health information

We collect or use the following personal information for information updates or marketing purposes:

  • Names and contact details
  • Profile information
  • Marketing preferences
  • Purchase or account history
  • IP addresses

We collect or use the following personal information for research or archiving purposes:

  • Names and contact details
  • Purchase or client account history
  • Website and app user journey information
  • IP addresses

We also collect or use the following information for research or archiving purposes:

  • Health information

We collect or use the following personal information to comply with legal requirements:

  • Name
  • Contact information
  • Any other personal information required to comply with legal obligations
  • Criminal offence data

We also collect or use the following information to comply with legal requirements:

  • Health information

We collect or use the following personal information to protect client welfare:

  • Names and contact information
  • Client account information
  • Health and wellbeing information
  • Emergency contact details

We also collect or use the following information to protect client welfare:

  • Health information

Lawful bases and data protection rights

Our lawful bases for the collection and use of your data

Our lawful bases for collecting or using personal information for the operation of client or customer accounts are:

  • Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
    • We collect and use personal information for the legitimate interest of managing and operating client or customer accounts. This includes processing transactions, providing customer support, fulfilling contractual obligations, improving services, and ensuring compliance with legal and regulatory requirements.
  • Vital interests – collecting or using the information is needed when someone’s physical or mental health or wellbeing is at urgent or serious risk. This includes an urgent need for life sustaining food, water, clothing or shelter. All of your data protection rights may apply, except the right to object and the right to portability.
  • Public task – we have to collect or use your information to carry out a task laid down in law, which the law intends to be performed by an organisation such as ours. All of your data protection rights may apply, except the right to erasure and the right to portability.

Our lawful bases for collecting or using personal information for the prevention, detection, investigation or prosecution of crimes are:

  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
    • We collect and use personal information to support the prevention, detection, and investigation of crimes related to breaches of the Health and Safety at Work Act. Specifically: Incident Reporting and Investigation: To document and analyze incidents involving potential criminal breaches of workplace health and safety regulations. Regulatory Compliance: To assist in ensuring compliance with the Health and Safety at Work Act and support any legal or regulatory investigations into potential violations. Crime Prevention and Prosecution: To prevent, identify, and report actions that constitute criminal offenses under workplace safety laws, safeguarding employees and maintaining legal standards. These activities are critical to promoting safe work environments, supporting our customers’ compliance efforts, and addressing criminal behavior effectively.
  • Vital interests – collecting or using the information is needed when someone’s physical or mental health or wellbeing is at urgent or serious risk. This includes an urgent need for life sustaining food, water, clothing or shelter. All of your data protection rights may apply, except the right to object and the right to portability.
  • Public task – we have to collect or use your information to carry out a task laid down in law, which the law intends to be performed by an organisation such as ours. All of your data protection rights may apply, except the right to erasure and the right to portability.

Our lawful bases for collecting or using personal information for information updates or marketing purposes are:

  • Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Our lawful bases for collecting or using personal information for research or archiving purposes:

  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
    • We collect and use personal information for research and archiving purposes to support improvements in workplace health and safety and to enhance compliance with the Health and Safety at Work Act. Specifically: Research and Analysis: To analyze trends, patterns, and root causes of health and safety incidents for the purpose of improving workplace safety standards and preventing future occurrences. Data Archiving for Compliance: To maintain accurate records of incidents and related information as required for legal and regulatory compliance, enabling historical review and evidence preservation. Service Enhancement: To use anonymized data insights to improve our software solutions, ensuring they effectively meet the needs of our customers in managing workplace health and safety.
  • Vital interests – collecting or using the information is needed when someone’s physical or mental health or wellbeing is at urgent or serious risk. This includes an urgent need for life sustaining food, water, clothing or shelter. All of your data protection rights may apply, except the right to object and the right to portability.
  • Public task – we have to collect or use your information to carry out a task laid down in law, which the law intends to be performed by an organisation such as ours. All of your data protection rights may apply, except the right to erasure and the right to portability.

Our lawful bases for collecting or using personal information to comply with legal requirements:

  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
    • We collect and use personal information to fulfill our obligations under applicable laws and regulations, particularly those related to workplace health and safety. Specifically: Compliance with Health and Safety Legislation: To meet the requirements of the Health and Safety at Work Act and other relevant regulations by documenting and addressing incidents and ensuring adherence to legal standards. Regulatory Reporting: To provide accurate information to regulatory bodies, law enforcement, or other authorities as mandated by law in the context of workplace health and safety compliance. Legal Recordkeeping: To maintain comprehensive records of incidents and safety measures to demonstrate compliance with legal obligations and to support audits, investigations, or legal proceedings. These activities are essential for fulfilling our legal responsibilities and supporting our customers in maintaining compliance with health and safety laws
  • Vital interests – collecting or using the information is needed when someone’s physical or mental health or wellbeing is at urgent or serious risk. This includes an urgent need for life sustaining food, water, clothing or shelter. All of your data protection rights may apply, except the right to object and the right to portability.
  • Public task – we have to collect or use your information to carry out a task laid down in law, which the law intends to be performed by an organisation such as ours. All of your data protection rights may apply, except the right to erasure and the right to portability.

Our lawful bases for collecting or using personal information to protect client welfare are:

  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
  • Legal obligation – we have to collect or use your information so we can comply with the law. All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.
  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
    • We collect and use personal information to ensure the health, safety, and welfare of our clients in the workplace. Specifically: Incident Management: To identify, document, and address health and safety risks or incidents that could impact the welfare of clients or their employees. Compliance and Risk Reduction: To support compliance with workplace safety laws, such as the Health and Safety at Work Act, and mitigate risks that could jeopardize the well-being of individuals. Service Improvement: To analyze workplace safety data and enhance our software solutions, ensuring they effectively safeguard client welfare. These activities are fundamental to creating safer work environments, supporting our clients in maintaining compliance, and preventing harm.
  • Vital interests – collecting or using the information is needed when someone’s physical or mental health or wellbeing is at urgent or serious risk. This includes an urgent need for life sustaining food, water, clothing or shelter. All of your data protection rights may apply, except the right to object and the right to portability.
  • Public task – we have to collect or use your information to carry out a task laid down in law, which the law intends to be performed by an organisation such as ours. All of your data protection rights may apply, except the right to erasure and the right to portability.

Where we get personal information from

Directly from you

How long we keep information

Unless otherwise advised, information related to safety related matters is kept indefinitely due to the possibility of an insurance claim up to 40 years later.

Who we share information with

Others we share personal information with

  • Emergency services

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

Last updated: 10 December 2024