Privacy Policy

Depending on your relationship with us, we may collect and process:

• Your name, job title, employer and business contact details.
• Postal addresses, email addresses and telephone numbers.
• Enquiry details submitted through our website, by email, by telephone or in person.
• Quotation, order, hire, service, inspection, testing and project information.
• Delivery, collection, site access and operational contact details.
• Financial and transaction information, including payment status and invoicing records.
• Correspondence, customer service records and complaint information.
• Technical website information such as IP address, browser type, device data and cookie preferences.
• Marketing preferences and records of communications sent to you.
• Any other information you choose to provide when communicating with us.

We may collect information directly from you when you:

• Submit a contact, enquiry, quote or service request through our website.
• Contact us by telephone, email, post, social media or in person.
• Request a quotation, place an order, hire equipment or instruct us to provide services.
• Attend one of our sites, events, exhibitions or meetings.
• Subscribe to or interact with marketing communications.

We may also receive information from your employer, colleagues, contractors, agents, suppliers, delivery partners, credit-reference services, public sources or other organisations involved in a transaction or project.

We only process personal information where we have a lawful basis. Depending on the circumstances, this may include:

Where we rely on legitimate interests, we consider the purpose, necessity and possible effect on the individuals concerned.

We do not sell personal information. We may share relevant information with:

• Companies, contractors and specialists supporting the delivery of products, hire or services.
• Transport, delivery, collection and logistics providers.
• IT, website hosting, software, communications, payment and cloud-service providers.
• Professional advisers, auditors, insurers, banks and financial-service providers.
• Certification bodies, regulators, authorities or law-enforcement bodies where required.
• Other organisations involved in a project, where sharing is necessary and lawful.
• A purchaser, investor or adviser in connection with a possible sale, restructuring or transfer of the business or its assets.

Service providers acting on our behalf are expected to protect personal information and only use it for the agreed purpose.

Some service providers may process or store information outside the United Kingdom. Where personal information is transferred internationally, we take steps intended to ensure that an appropriate level of protection is in place, such as relying on UK adequacy regulations, approved contractual safeguards or another lawful transfer mechanism.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including meeting contractual, tax, accounting, insurance, certification, warranty, dispute-resolution and legal obligations.

Retention periods vary according to the type of information and the context in which it was collected. When information is no longer required, we will delete it, anonymise it or securely dispose of it where reasonably practicable.

We use appropriate organisational and technical measures designed to protect personal information against unauthorised access, accidental loss, alteration, disclosure or destruction.

• Access is limited to people who need information for their work.
• Systems and accounts are protected using appropriate access controls and security measures.
• Staff are expected to handle confidential and personal information responsibly.
• Suppliers handling information on our behalf are assessed where appropriate.
• Suspected data incidents are investigated and reported where required by law.

No method of transmitting or storing information is completely secure, but we keep our measures under review.

Depending on the circumstances, you may have the right to:

• Ask for access to personal information we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Ask us to erase information in certain circumstances.
• Ask us to restrict how information is used in certain circumstances.
• Object to certain processing, including direct marketing.
• Receive information you provided in a portable format where the right applies.
• Withdraw consent where processing is based on consent.
• Ask about safeguards used for certain international transfers.

Rights are not absolute and exemptions may apply. We may ask for information to confirm your identity before responding. We normally respond without undue delay and within one calendar month, although the period may be extended where permitted for complex or multiple requests.

To exercise a right, email info@durhamlifting.co.uk or write to the address shown at the top of this policy.

We may send relevant business-to-business information about Durham Lifting products, services, projects or company developments where we have a lawful basis to do so. Where consent is required, we will request it.

You can ask us to stop sending marketing communications at any time by using the unsubscribe option provided or by contacting us. This will not prevent essential communications about existing enquiries, orders, contracts or services.

When you submit an enquiry through this website, the information entered into the form may be stored within our website enquiry system and sent to relevant Durham Lifting personnel so that we can respond. Technical and security records may also be created to protect the website and prevent misuse.

The website may use analytics and third-party services where permitted. Non-essential cookies should only be activated in accordance with the choices made through our cookie controls.

Further information is available in our Cookie Policy.

Please contact us first if you have a question or concern about how we handle personal information. We will investigate and respond as appropriate.

You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection. Current contact information and guidance can be found on the ICO website.

We may update this policy when our processing activities, systems, service providers or legal obligations change. The latest version published on this page will apply.