GDPR Policy

This policy sets out how Impression Electrical & Building Ltd complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and explains the rights you have over your personal information.

Data controller

Impression Electrical & Building Ltd, Seafield House, 2 Seafield Lane, Redditch, B98 9DL, is the data controller responsible for your personal information. You can contact us about any data protection matter at info@ieb.services or 07990 012914.

Our legal basis for processing

We only process personal information where we have a valid legal basis to do so, which may include:

• Consent — where you’ve given us clear consent to process your information for a specific purpose, such as submitting an enquiry form.
• Contract — where processing is necessary to carry out work you’ve asked us to do, or to take steps at your request before entering into a contract.
• Legal obligation — where we need to process information to comply with the law, such as keeping financial records.
• Legitimate interests — where processing is necessary for our legitimate business interests, provided this doesn’t override your rights and interests.

Your rights under the UK GDPR

You have the following rights in relation to your personal information:

• Right of access — to ask us for a copy of the personal information we hold about you.
• Right to rectification — to ask us to correct information that is inaccurate or incomplete.
• Right to erasure — to ask us to delete your personal information in certain circumstances.
• Right to restrict processing — to ask us to limit how we use your information in certain circumstances.
• Right to data portability — to ask us to transfer your information to another organisation, where technically feasible.
• Right to object — to object to us processing your information, including for direct marketing.
• Right to withdraw consent — where we rely on your consent, you can withdraw it at any time.

To exercise any of these rights, contact us at info@ieb.services. We will respond within one month, as required by law. We may need to verify your identity before acting on a request.

Keeping your information secure

We take appropriate technical and organisational measures to protect the personal information we hold against unauthorised access, loss, misuse or alteration.

International transfers

Where any service provider we use stores or processes information outside the UK, we take steps to ensure it is protected to a standard equivalent to the UK GDPR.

How to complain

If you’re unhappy with how we’ve handled your personal information, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. Any changes will be posted on this page with a revised "last updated" date.

Related policy

See our Privacy Policy for details of what personal information we collect and how we use it.