Building20 privacy notice
At Building20 we care about, respect and value all the people we interact and work with. This includes your privacy and how we use your personal data. This privacy notice tells you what to expect us (Amanda Woolley, and any associates operating under the Building20 brand) to do with your personal information.
If you have any questions, concerns or complaints to make about this privacy notice or how we are using or have used your personal data. Please use the contact form on this website to let us know.
What information we collect, use, and why
The table below shows the personal data we collect, use and why. It also indicates our lawful bases for collecting and using this personal information in UK GDPR (see more about this below).
| Personal data we use, purpose and our lawful bases for its collection and use | ||
| Personal Data | Purposes for which we have a legitimate interest | Purposes we will only use your data for with your explicit consent |
| Names and contact details | provide and improve products and services for clients, operation of client or customer accounts, protect client welfare | information updates or marketing purposes, research purposes |
| Occupation | provide and improve products and services for clients | |
| Payment details (including card or bank information for transfers and direct debits) | provide and improve products and services for clients | |
| Transaction data (including details about payments to and from you and details of products and services you have purchased) | provide and improve products and services for clients | |
| Usage data (including information about how you interact with and use our website, products and services) | provide and improve products and services for clients | |
| Video recordings | provide and improve products and services for clients | |
| Audio recordings (eg calls) | provide and improve products and services for clients | |
| Records of meetings and decisions | provide and improve products and services for clients | |
| Addresses | operation of client or customer accounts, dealing with queries, complaints or claims | information updates or marketing purposes |
| Purchase or service history | operation of client or customer accounts | |
| Account information, including registration details | operation of client or customer accounts | |
| Marketing preferences | operation of client or customer accounts | information updates or marketing purposes |
| Profile information | information updates or marketing purposes | |
| Purchase or account history | information updates or marketing purposes, research purposes | |
| Protected characteristics: Racial or ethnic origin, Political opinions, Religious or philosophical beliefs, Health information, Sexual orientation information | research purposes | |
| Emergency contact details | protect client welfare | |
| Address | ||
| Payment details | ||
| Account information | dealing with queries, complaints or claims | |
| Customer or client accounts and records | dealing with queries, complaints or claims | |
| Financial transaction information | dealing with queries, complaints or claims | |
| Correspondence | dealing with queries, complaints or claims | |
Lawful bases and data protection rights
Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.
Which lawful basis we rely on may affect your data protection rights which are in brief set out below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:
- Your right of access – You have the right to ask us for copies of your personal information. You can request other information such as details about where we get personal information from and who we share personal information with. There are some exemptions which means you may not receive all the information you ask for. You can read more about this right here.
- Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete. You can read more about this right here.
- Your right to erasure – You have the right to ask us to delete your personal information. You can read more about this right here.
- Your right to restriction of processing – You have the right to ask us to limit how we can use your personal information. You can read more about this right here.
- Your right to object to processing – You have the right to object to the processing of your personal data. You can read more about this right here.
- Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. You can read more about this right here.
- Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time. You can read more about this right here.
If you make a request, we must respond to you without undue delay and in any event within one month.
To make a data protection rights request, please contact us using the contact link at the top of this privacy notice.
Where we get personal information from
We mainly collect personal information directly from you. At times we may collect and use personal information from publicly available sources. We also occasionally work with clients who will share personal information with us of their delegates in order to deliver our services on their behalf.
How long we keep information
We only keep your data as long as reasonably necessary to fulfil the purposes for which we collected it and/or for business continuity.
Who we share information with
We use Microsoft 365 to provide our digital document storage (OneDrive) and our online meeting and messaging services (MSTeams and Outlook).
We may also share information with emergency services if necessary (see above).
How to complain
If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.
If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint
Last updated
9 December 2024