Privacy Notice

blu-3 (UK) Limited (blu-3) are an award-winning fully integrated construction and utility services company, providing expertise and extensive knowledge to the UK’s largest construction projects.

blu-3 are committed to protecting and respecting your privacy, and this privacy notice explains how we use any personal information we collect about you when you use this website and our services.

For the purpose of the Data Protection Act 2018 (the Act) and the General Data Protection Regulations (GDPR) from 25 May 2018, the data controller is blu-3 (UK) Limited, Eden House, 454 New Hythe Lane, Larkfield, Aylesford, Kent, ME20 7UH.

Topics:

How do we collect information about you?

We collect your information when you make an enquiry with us via our contact us form regarding our services. Your information is also collected by cookies which is detailed further below.

What information do we collect about you?

When making an enquiry via the contact us form, the personal information we collect from this is your name, email address and any other personal data that may be within the contents of your message. We collect this information to deal with your enquiry. Cookies on our website collect information such as when you, as a user, has returned to the website and your site preferences without knowing your exact identity. Cookies collect personal data only when this data has been placed by yourself on our website, for example via the contact us form.

What is the lawful basis for collecting information about you?

blu-3 relies on the lawful basis of legitimate interest (Article 6(1)(f) of the GDPR) to process the personal data that is collected from using our website. It is in our and your legitimate interest that we deal with and resolve any enquiry made and that to do so we require the personal data provided to be processed accordingly.

How will we use the information about you?

We collect information about you to handle your enquiry. blu-3 will not share your information for marketing purposes with other companies or third parties. blu-3 may transfer personal data to its holding company and any other affiliate or subsidiary company. In the event of a merger, acquisition or asset sale, we may transfer personal data to the involved third party, whilst ensuring its protection.

Where personal data is stored about you?

We store personal data in digital format on secure cloud servers and systems hosted in the European Economic Area (EEA). Access to personal data is highly restricted internally for approved business purposes only. Any personal data collected in paper form (e.g. call back request, general enquiry, etc.) are securely filed at our office location in the UK.
Personal data is retained for a maximum period of 2 years unless required for specific legal or regulatory purposes.

Keeping personal data secure and disclosing your information

Transmitting information over the internet is generally not completely secure. We have procedures and security in place to keep personal data secure once it is in our systems.
We won’t share personal information with any third-party organisation for market research, marketing, or commercial purposes without specific consent from you. However, we may share information (including personal information) if we have a legal obligation to do so, or if we must enforce or apply our terms of use and other agreements. This may include submitting information to government departments for legal reasons.

Data Subject Rights

In brief, the GDPR and the Act provides the following rights for individuals;

The right to be informed

You have the right to be informed about the collection, purpose and use of your personal data unless you have the information already or if it would involve a disproportionate effort to inform you.

The right of access

You have the right to access your personal data that we hold about you. This is commonly known as a data subject access request and when made we have one month to respond. No fee is charged to you for making such a request, only if the request is manifestly unfounded or excessive and where further copies of your data is requested following the initial request.

The right to rectification

You have the right to have any inaccurate personal data rectified and any incomplete personal data completed. Such a request can be made verbally or in writing and we have one calendar month to respond. However, we can refuse such a request where it is manifestly unfounded or excessive. In such a circumstance we can charge a reasonable fee for complying with the request or we can refuse to deal with it.

The right to erasure

You have the right to have your personal data erased. This is also known as the right to be forgotten. This request can be made verbally or in writing and we have one month to comply. However, this is a qualified right and in certain circumstances a request to erasure can be refused in part or entirely. The request can be refused where it is necessary for us to retain it to exercise the right to freedom of expression, compliance with a legal obligation, for public interest, archiving purposes and for legal claims.

The right to restrict processing

You have the right to request that the processing of your personal data is restricted. Where personal data is restricted it can be stored by us, but it cannot be used. Such a request can be made verbally or in writing and we have one calendar month to comply. However, this is a qualified right and the request can be refused where it is manifestly unfounded or excessive. In these cases, we can charge a reasonable fee for complying with the request or we can refuse to deal with it entirely or in part.

The right to data portability

This right provides that you can obtain and reuse your personal data for your own purposes across different services. We have one month to comply with this request. This right is not absolute and can be refused where the request is manifestly unfounded or excessive. In these circumstances the request can be refused, or a reasonable fee can be charged where we comply with the request.

The right to object

This right allows you to object to the processing of your personal data in certain circumstances. The right is absolute with regards to processing of personal data for direct marketing purposes. An objection can be made verbally or in writing and we have one calendar month to respond.
Excluding direct marketing purposes, we may argue that processing of personal data can continue if we have a compelling reason such as having a legitimate ground which overrides your rights, interests and freedoms or where the processing is for the establishment, exercise or defect of a legal claim. We can also refuse to comply with this right if the request is manifestly unfounded or excessive. If we decide to comply, a reasonable fee can be charged.

Automated decision making and profiling rights

This involves a decision being made by automated means without any human intervention. You have the right not to be subject to such processing in certain circumstances. This right is not absolute, and the processing can continue where it is necessary to enter into or perform a contract or if it has been legally authorised such as for the prevention of fraud tax evasion.

Cookies

Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity.
For further information visit www.aboutcookies.org or www.allaboutcookies.org. You can set your browser not to accept cookies and the above websites tell you how to remove cookies from your browser. However, in a few cases some of our website features may not function as a result.

Other websites

Our website contains links to other websites. This privacy notice does not cover the links within this site linking to other websites. We encourage you to read to read the privacy statements on the other websites you visit.

Changes to our privacy notice

We keep our privacy notice under regular review and we will place any updates on this web page. This privacy notice was last updated on 27/02/2019.

How to contact us

Please contact us by email, post or telephone if you have any questions about our privacy notice or information we hold about you, or if you wish to exercise any of the rights available to you;
Data Protection Officer
blu-3 (UK) Limited
Eden House
454 New Hythe Lane
Larkfield Aylesford Kent
ME20 7UH

Complaints

If you feel that your personal data has not, or is not being handled appropriately or in compliance with the law, you can contact the Information Commissioners Office in the UK at https://ico.org.uk/concerns/ to file a complaint.