Giants Group

1. Introduction

Giants Group (Giants Group Contracts Limited, "we", "us", "our") is committed to protecting the privacy and security of personal data. This Privacy Policy explains how we collect, use, and manage personal information when you interact with us, whether through our website, during project delivery, or as part of our business operations. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and guidance issued by the Information Commissioner's Office (ICO). By using our website or engaging with our services, you confirm that you have read and understood this policy.

2. Information We Collect

Depending on your relationship with us, we may collect the following categories of personal data:

2.1 Contact & Business Information: name, job title, company name; email address and telephone number; business correspondence.

2.2 Project & Operational Information: information required to deliver contracts and services; communication records with clients, suppliers, and subcontractors.

2.3 Workforce & Subcontractor Data: identification details; qualifications and certifications (e.g. CSCS, NPORS, CPCS); compliance documentation and right-to-work checks.

2.4 Recruitment Data: CVs, employment history, references; interview notes and application records.

2.5 Health & Safety / Compliance Data: site access records; incident reports where applicable; training and compliance documentation.

2.6 Technical & Website Data: IP address, browser type, and device information; website usage behaviour (pages visited, time on site).

3. How We Use Your Data

We use personal data to: deliver contracted works and manage projects; communicate with clients, subcontractors, and suppliers; meet legal obligations, including health & safety compliance; assess subcontractor suitability and maintain workforce records; manage recruitment processes; improve our website and services; and send business-related communications where appropriate.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process personal data. We rely on the following: delivering contracts and services - contractual necessity; managing client and supplier relationships - legitimate interests; health & safety and compliance - legal obligation; recruitment processing - legitimate interests / pre-contract steps; marketing communications - consent (where required); website analytics - legitimate interests. We ensure that our legitimate interests are balanced against your rights and freedoms.

5. Data Retention

We only retain personal data for as long as necessary for the purpose it was collected, including to satisfy legal, accounting, or reporting requirements. Project/contract data is retained for the duration of the contract and typically up to 6 years thereafter. Recruitment data is retained for up to 12 months unless consent is provided for longer. General enquiries are retained for up to 6 months. Compliance records are retained in line with legal obligations. Retention periods may vary where required by law or regulatory guidance.

6. Data Security

We take appropriate technical and organisational measures to protect personal data, including secure IT systems and restricted access controls, encryption and secure data transmission (e.g. SSL), and staff awareness and confidentiality obligations. We regularly review our security practices to ensure ongoing protection of personal data.

7. Sharing Your Information

We do not sell or commercially exploit personal data. We may share data where necessary with clients, contractors, and subcontractors involved in project delivery; third-party service providers (e.g. IT systems, hosting, payroll); professional advisors (legal, financial, compliance); and regulatory authorities where required by law. All third parties are required to process data securely and only for specified purposes.

8. Your Data Protection Rights

Under UK GDPR, you have the right of access (to request a copy of your personal data); the right to rectification (to correct inaccurate or incomplete data); the right to erasure (to request deletion of your data where appropriate); the right to restrict processing (in certain circumstances); the right to object (to processing based on legitimate interests); the right to data portability (where applicable); and the right to withdraw consent at any time (where processing is based on consent). You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

Our website uses cookies to ensure the website functions properly, analyse traffic and user behaviour, and improve user experience.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those websites and encourage you to review their policies separately.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our business practices. The latest version will always be available on our website, along with the updated revision date.

12. Contact Us

For any questions about this Privacy Policy or to exercise your rights, please contact: Giants Group (Giants Group Contracts Limited), Unit 2a John Hall Close, Faversham, Kent, ME13 7TY. Phone: 0800 118 4006. Email: james.harris@cablegiants.com. Website: www.giantsgroup.co.uk