Privacy Policy


Effective Date: 15-Sep-2025

Last Updated: 10-Sep-2025

Archway Facilities Ltd (“we”, “our”, “us”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard personal information.


Our Contact Details

Archway Facilities Ltd

Company Number: 08614652

Registered Address: 166 Heavitree Road, Exeter, Devon, United Kingdom EX1 2LZ

Email: eve@archwayfacilities.co.uk (Data Protection Contact: Eve Ashby)

Phone: +44 1392 979360

The Type of Personal Information We Collect

We may collect and process the following categories of personal information:

  • Clients/customers: names, emails, phone numbers, billing addresses, job site addresses, access codes, payment details.
  • Suppliers/subcontractors: names, company details, bank details, insurance documents, ID checks
  • Employees/staff: payroll info, ID documents, right-to-work records, training records, health & safety information, emergency contacts
  • Website visitors: enquiry form details, cookies and analytics data (see Cookie Policy).
How We Get Your Personal Information and Why We Use It

We collect personal information directly from you when you:

  • Engage our services.
  • Provide details for contracts, invoicing, or tenders.
  • Apply for a job with us.
  • Contact us through our website or by email.
We may also receive information indirectly from:
  • Public sector tender portals.
  • Recruitment agencies.
  • Subcontractor references.
We use this information to:
  • Deliver contracted services.
  • Manage supplier and subcontractor relationships.
  • Comply with legal obligations (employment, health & safety, HMRC).
  • Improve services and maintain security.
Lawful Bases for Processing

We rely on the following lawful bases under UK GDPR:

  • Contractual obligation - to deliver services to our clients.
  • Legal obligation - to comply with UK employment, tax, and health & safety law.
  • Legitimate interest - to manage tenders, improve services, and maintain business operations.
  • Consent - where you have opted in for marketing communications, provided consent for specific uses (e.g. testimonials or photographs).
Third Parties We Share Data With

We may share personal data with:

  • IT service providers (Microsoft 365, SharePoint, Joblogic - if used).
  • Xero (for client invoicing and accounts).
  • Accountants and payroll providers
  • Tender platforms and public authorities (where required for bids).
  • Marketing platforms (e.g. LinkedIn campaigns, Mailchimp, Apollo, if used).

We do not sell personal data to third parties.

How We Store Your Information

Your data is stored securely within Microsoft 365/SharePoint, protected by access controls and managed by our IT provider.

Security measures include:
  • Password-protected systems with role-based access.
  • Multi-factor authentication (MFA) enabled across core systems.
  • Data encrypted at rest (BitLocker/FileVault) and in transit (VPN/IPSec).
  • Daily backups performed via Datto, stored in UK data centres.
Retention periods:
  • Client contracts/invoices - 6 years (HMRC requirement).
  • HR/employment records - 6 years after employment ends.
  • Right-to-work documents - 2 years after employment ends.
  • Health & safety records - 40 years if related to hazardous substance exposure.
  • Supplier/subcontractor documents - 6 years after last transaction.
  • Job applications - 6 months for unsuccessful candidates (unless consent given to retain longer).

After retention periods expire, data will be securely deleted or anonymised.

Your Data Protection Rights

You have the right to:

  • Access your data.
  • Request corrections.
  • Request deletion (where lawful).
  • Restrict processing.
  • Object to processing.
  • Request data portability.

To exercise these rights, contact eve@archwayfacilities.co.uk.

How to Complain

If you have concerns about our use of your personal data, please contact us first at eve@archwayfacilities.co.uk.

If you remain unhappy, you can complain to the ICO:

Information Commissioner’s Office

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline: 0303 123 1113

www.ico.org.uk


Next Review

This Privacy Policy will be reviewed annually. Next review: September 2026.