Privacy Policy.

At Red Ecology we provide ecological consultancy services to clients. We are committed to protecting your personal data and managing it in accordance with the General Data Protection Regulation (GDPR). This policy outlines how long we retain personal data and the basis for doing so, ensuring that your information is stored securely and only for as long as necessary.

Purpose of Data Retention

We retain personal data:

• To administer and manage current and future projects;
• To handle any insurance claims or requests for assistance from our Professional Indemnity insurers;
• For recruitment purposes;
• To comply with legal, statutory, and regulatory obligations.

Clients

With your consent, we will normally collect the following data from you:

• Name and contact details;
• Other information relevant to client enquiries.

This data is retained by us to respond to your enquiry or to manage your subsequent project. By contacting us or commissioning us for work, you are consenting to our contact on current and upcoming projects. Our retention policy applies.

In order to execute your project, you will need to consent to us sharing this data with other consultants, suppliers and contractors servicing your project. We may also need to share your project data with our insurers or for compliance with a legal obligation.

Employees and Job Applicants

With your consent, we will normally collect the following data from you:

• Name and contact details;
• National Insurance number;
• Employment history;
• Education history; and
• Right to work information.

We use information held about you to manage your job application or subsequent employment with us. Your personal data will be used solely by Red Ecology and will not be disclosed or sold to third parties.

Retention Periods

• Current and previous clients and subcontractors: For work-related purposes, we will retain your data for up to 4 years following the last activity. If required by legal or regulatory authorities, data may be retained for longer periods;
• Potential clients: If we discuss potential service requirements but no formal relationship is established, we will retain your information for up to 2 years following the last communication;
• Job applicants and employees: We retain the details of unsuccessful applicants for 6 months. We will retain the details of employees for the duration of employment plus 1 year.

Regular Review and Deletion

We regularly review our data retention practices to ensure we comply with GDPR. Personal data that is no longer necessary for the purposes outlined above will be securely deleted or anonymised.

Lawful Basis for Processing

We process personal data under the lawful basis of legitimate interest (for managing projects and claims, and for recruitment and employment) and legal obligation (for regulatory and statutory requirements).

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• the right of access;
• the right to rectification;
• the right to erasure;
• the right to restrict processing;
• the right to object to processing;
• the right to data portability; and
• the right to withdraw consent.

How to Contact Us

If you have any questions or wish to exercise your rights under GDPR, please contact us at info@redecology.com

If you have any concerns about our use of your personal data, you can make a complaint to us at info@redecology.com

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO at: https://www.ico.org.uk/make-a-complaint

Changes to our Privacy Policy

We reserve the right to make changes to this privacy policy at any time, as appropriate.