Westmorland Asbestos Surveys is committed to collecting and processing personal data responsibly and in compliance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA2018). This includes data from employees, suppliers, clients, and other business contacts. Personal data—such as names, addresses, contact details, and other confidential information—will be handled securely, regardless of format, to maintain trust and meet legal obligations. The company is registered with the Information Commissioner’s Office (ICO), reference ZB023201, and adheres to all relevant legislation.

Key Principles:

1. Personal data is processed lawfully, fairly, and transparently.
2. Data is collected for specific, legitimate purposes and not used incompatibly.
3. Only data necessary for business purposes is collected and processed.
4. Data is kept accurate and up to date.
5. Data is retained only as long as necessary.
6. Appropriate security measures protect all personal data.

Scope and Responsibilities: This policy applies to all employees, customers, suppliers, and business contacts. Management is responsible for appointing a Data Controller, providing staff training, ensuring compliance, and maintaining records of processing activities. Employees must follow all guidance and procedures, process data only for legitimate purposes, and ensure data is destroyed when no longer required. Any data subject requests must be reported to senior management immediately. Personal data must not be transferred outside the UK without proper authorization. Policy breaches may result in disciplinary action.

Distribution and Monitoring: The policy is available to all staff and stakeholders upon request. Compliance is regularly monitored