Privacy Policy
Last Updated: 10-Sep-2025
Archway Facilities Ltd (“we”, “our”, “us”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard personal information.
Our Contact Details
Archway Facilities Ltd
Company Number: 08614652
Registered Address: 166 Heavitree Road, Exeter, Devon, United Kingdom EX1 2LZ
Email: eve@archwayfacilities.co.uk (Data Protection Contact: Eve Ashby)
Phone: +44 1392 979360
The Type of Personal Information We Collect
We may collect and process the following categories of personal information:
- Clients/customers: names, emails, phone numbers, billing addresses, job site addresses, access codes, payment details.
- Suppliers/subcontractors: names, company details, bank details, insurance documents, ID checks
- Employees/staff: payroll info, ID documents, right-to-work records, training records, health & safety information, emergency contacts
- Website visitors: enquiry form details, cookies and analytics data (see Cookie Policy).
How We Get Your Personal Information and Why We Use It
We collect personal information directly from you when you:
- Engage our services.
- Provide details for contracts, invoicing, or tenders.
- Apply for a job with us.
- Contact us through our website or by email.
We may also receive information indirectly from:
- Public sector tender portals.
- Recruitment agencies.
- Subcontractor references.
We use this information to:
- Deliver contracted services.
- Manage supplier and subcontractor relationships.
- Comply with legal obligations (employment, health & safety, HMRC).
- Improve services and maintain security.
Lawful Bases for Processing
We rely on the following lawful bases under UK GDPR:
- Contractual obligation - to deliver services to our clients.
- Legal obligation - to comply with UK employment, tax, and health & safety law.
- Legitimate interest - to manage tenders, improve services, and maintain business operations.
- Consent - where you have opted in for marketing communications, provided consent for specific uses (e.g. testimonials or photographs).
Third Parties We Share Data With
We may share personal data with:
- IT service providers (Microsoft 365, SharePoint, Joblogic - if used).
- Xero (for client invoicing and accounts).
- Accountants and payroll providers
- Tender platforms and public authorities (where required for bids).
- Marketing platforms (e.g. LinkedIn campaigns, Mailchimp, Apollo, if used).
We do not sell personal data to third parties.
How We Store Your Information
Your data is stored securely within Microsoft 365/SharePoint, protected by access controls and managed by our IT provider.
Security measures include:
- Password-protected systems with role-based access.
- Multi-factor authentication (MFA) enabled across core systems.
- Data encrypted at rest (BitLocker/FileVault) and in transit (VPN/IPSec).
- Daily backups performed via Datto, stored in UK data centres.
Retention periods:
- Client contracts/invoices - 6 years (HMRC requirement).
- HR/employment records - 6 years after employment ends.
- Right-to-work documents - 2 years after employment ends.
- Health & safety records - 40 years if related to hazardous substance exposure.
- Supplier/subcontractor documents - 6 years after last transaction.
- Job applications - 6 months for unsuccessful candidates (unless consent given to retain longer).
After retention periods expire, data will be securely deleted or anonymised.
Your Data Protection Rights
You have the right to:
- Access your data.
- Request corrections.
- Request deletion (where lawful).
- Restrict processing.
- Object to processing.
- Request data portability.
To exercise these rights, contact eve@archwayfacilities.co.uk.
How to Complain
If you have concerns about our use of your personal data, please contact us first at eve@archwayfacilities.co.uk.
If you remain unhappy, you can complain to the ICO:
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
www.ico.org.ukNext Review
This Privacy Policy will be reviewed annually. Next review: September 2026.