EMS Towage Limited Privacy Policy
Purpose of This Privacy Policy
At EMS Towage Limited, we are committed to protecting your personal data and respecting your privacy. This Privacy Policy outlines:
• The types of personal information we collect.
• How we process and protect your information.
• Your rights regarding your data.
• How to contact us regarding your data.
This Privacy Policy applies to the services provided by EMS Towage Limited (Company No. SC 829552) at our registered office: 32-34 High Street, Sanquhar, Dumfriesshire, DG4 6BL, United Kingdom.
If you have any questions about this policy, please email info@emstowage.com.
Last updated: 19 January 2025
1. Data Protection Principles
In compliance with the UK GDPR, we process personal data according to the following principles:
1. Data is processed lawfully, fairly, and transparently.
2. Data is collected for specific, explicit, and legitimate purposes.
3. Data is limited to what is necessary for processing purposes.
4. Data is accurate and kept up-to-date.
5. Data is stored only as long as necessary for its intended purpose.
6. Data is processed securely to prevent unauthorised access, loss, or damage.
2. Information We Collect
We collect the following types of personal data:
A. Identifiable Information:
• Name, email address, phone number, postal address, and job title.
• Information provided via enquiry forms, event bookings, job applications, or contracts.
B. Anonymous Information:
• Website usage data such as IP addresses, pages visited, and the number of visits.
• Information collected via cookies to improve website functionality (see our Cookie Policy for details).
3. How We Use Your Personal Information
We use your data to:
• Provide the services or support you request.
• Process contractual obligations, including recruitment and employment.
• Improve our website and tailor our services.
• Comply with legal obligations (e.g., tax, right-to-work checks).
• Send marketing materials (with your consent).
Legal Bases for Processing:
1. Consent: For marketing communications or specific requests.
2. Contractual Necessity: For employment, service delivery, or recruitment processes.
3. Legitimate Interests: For fraud prevention, employee performance monitoring, and business operations.
4. Legal Obligations: For compliance with laws (e.g., payroll, tax reporting).
4. Data Sharing
We may share your personal data with:
• Third-Party Service Providers: For payroll, IT services, training, and recruitment.
• Legal Authorities: To comply with legal obligations or regulatory requirements.
• Analytics Providers: To analyse website usage for improvements.
We ensure all third parties have data processing agreements in place and comply with GDPR.
Data Transfers Outside the EEA:
We do not transfer personal data outside the EEA. If this changes, appropriate safeguards (e.g., Standard Contractual Clauses) will be implemented.
5. Data Retention
We retain personal data only for as long as necessary. The type of data & retention periods are:
Marketing Data - Up to 2 years from last contact
Client Information - Up to 2 years after last service/order
Employee/Contractor Records - 5 years after employment ends
After the retention period, data will be securely deleted or anonymised.
6. Your Rights
Under GDPR, you have the following rights regarding your data:
1. Access: Request a copy of the personal data we hold about you.
2. Rectification: Correct inaccurate or incomplete data.
3. Erasure: Request deletion of your data in specific circumstances.
4. Restriction: Limit the processing of your data.
5. Portability: Request transfer of your data to another organisation.
6. Objection: Object to data processing for certain purposes (e.g., marketing).
7. Withdraw Consent: Where consent is the legal basis for processing, you can withdraw it at any time.
How to Exercise Your Rights:
Email info@emstowage.com or write to us at our registered address.
If you are unsatisfied with our response, you may lodge a complaint with the Information Commissioner’s Office (ICO):
• Website: www.ico.org.uk
• Telephone: 0303 123 1113
• Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
7. Data Protection and Security
We take appropriate technical and organisational measures to safeguard your data against loss, misuse, unauthorised access, or disclosure. These include:
• Encryption of data in transit and at rest.
• Secure servers for storage.
• Access controls and regular staff training.
8. Special Category and Criminal Data
We process special category data (e.g., health, race, religion) only where:
• Explicit consent is provided.
• Necessary for legal obligations (e.g., equality monitoring, health and safety).
Criminal conviction data is collected only where necessary for the role and with appropriate safeguards.
9. Marketing Communications
We send marketing communications only where consent has been provided.
You can opt out at any time by:
• Clicking the “unsubscribe” link in emails.
• Contacting us at info@emstowage.com.
10. Data Breach Procedures
In the event of a data breach:
• Affected individuals will be notified without undue delay if their rights or freedoms are at risk.
• The ICO will be notified within 72 hours of becoming aware of the breach, where required.
11. Updates to This Privacy Policy
We review and update this Privacy Policy regularly to reflect changes in our processes or legal requirements.
12. Contact Us
For any questions, concerns, or to exercise your rights, please contact:
Data Protection Processor
EMS Towage Limited
Email: info@emstowage.com
Phone: +44 (0)141 816 9789