Privacy Policy

This website is provided on a voluntary non-profit basis by Safe-Assure LLP.  We collect personal data from visitors who come to the site to take our construction safety courses, or to submit details of existing qualifications.

What we need

In order to provide PBCC-related community building and maintenance projects with a means of verifying the safety awareness of volunteer workers, candidates are asked to take a Test, and provide some basic personal details.  The data resulting from each ‘pass’ in a test is transmitted to us by encrypted email.  This information is stored by us in an ISO 27001 compliant data centre in Germany using an end-to-end encrypted data storage platform.  Even the platform’s provider has no access to the data.  Some candidates may instead submit details of alternative acceptable qualifications, which will be treated in the same manner.  The personal data we collect from candidates may include their name, email address, locality, confirmation that they are over 16 (i.e. not a child).  Prior to 8/12/23 we also collected the name of an invigilator who was willing to have their name passed on to us.  We no longer collect invigilator’s names.

Why we need this

We need to know this basic information in order to personalise test results in the form of certificates for the candidates, and to enable further contact at a later stage to invite them to refresh their training after the appropriate period. We also use the information collected, to inform local coordinators of candidates who have passed the tests or possess alternative qualifications, and have therefore demonstrated some understanding of construction site safety matters.

What we do with this data

Our lawful basis under the GDP Regulations for processing personal data as described above, was originally ‘consent’, which was requested from each candidate.  From 8/12/23 we are using ‘legitimate interest’ as our lawful basis for new candidates.  Data from those who pass the Test is collected as described above, and further regular processing consists of sending a list subset of the data (not including candidates’ email addresses) to local coordinators who have entered into an agreement to protect it according to GDPR principles.  This Workers List is placed on a weekly basis in an encrypted folder which is accessible to all coordinators.  The coordinators may not pass the data on further, but registered candidates may be contacted individually by project managers with a view to project labour planning.  We will not pass personal data on to any other party unless required to do so under any enforceable legal obligation.

How long we keep it

We normally retain personal data of candidates until the expiry date of the relevant qualification.  We may then keep it for a further period while we seek their refreshed training result.  If this is not forthcoming we will delete the record from our files.  Please be aware that deleted data may persist in backup files for a period of time on the servers we use.

Your rights in connection with your data

Under GDPR, all personal data belongs to you, the data subject, who may request access to the data (‘subject access request’), removal (to be ‘forgotten’), or correction of the data.  As the data controller, Safe-Assure LLP has a legal obligation to respond to a request within 30 days, and we would hope to improve on this substantially.  No charge will normally be made to candidates for these services.  Please note that removal of your data may make it difficult for you to provide evidence of safety awareness to project managers.  For any such request, please email requirements to office@safe-assure.com.  Our registered address is Foothills, Perth Road, Abernethy, PH2 9LW.  You also have the right to make a complaint to the supervisory authority, which is the ICO (Office of the Information Commissioner).