Separate contractual data-processing terms apply where we process employee or worker payroll data on a client's instructions.
Who we are
Clipper Contractor Group Ltd is a private limited company registered in England and Wales under company number 17424016.
Registered office: 7-9 Fennel Street, Loughborough, England, LE11 1UQ.
For the activities described in this notice, Clipper Contractor Group Ltd is the controller of your personal data.
Personal data we collect
Depending on how you interact with us, we may collect:
- identity information, such as name and job title;
- business contact information, such as work email address, telephone number and business address;
- organisation information, including employer or supplier name and company number;
- enquiry and correspondence information;
- service and contract records;
- identity, authority and due-diligence information where reasonably required;
- invoicing and payment-administration records;
- website technical information, such as IP address, device and browser information, security logs and request timestamps; and
- records relating to complaints, rights requests or disputes.
Please do not submit employee payroll records or special-category data through the general website contact form.
How we obtain personal data
We collect personal data:
- directly from you;
- from your employer or organisation;
- from clients, suppliers and professional advisers;
- from public registers and official sources where appropriate;
- through our website and its security functions; and
- from records created while providing or receiving services.
Why we use personal data
We may use personal data to:
- respond to enquiries and provide quotations;
- take steps towards and manage contracts;
- verify identity, authority and business information;
- provide client support and maintain service records;
- manage suppliers and professional advisers;
- issue and manage invoices;
- operate, secure and troubleshoot the website and business systems;
- prevent and investigate fraud, misuse or security incidents;
- handle complaints, claims and legal matters;
- meet legal, tax, accounting and regulatory obligations; and
- establish, exercise or defend legal rights.
Lawful bases
We rely on one or more of the following lawful bases:
- Contract: processing is necessary to take requested steps before a contract or to perform a contract with you.
- Legal obligation: processing is necessary to comply with a legal duty.
- Legitimate interests: processing is necessary for our legitimate interests or those of another organisation, where those interests are not overridden by your rights. These interests include operating and securing our business, responding to business enquiries, maintaining records, preventing fraud and managing legal claims.
- Consent: where consent is the appropriate basis, you may withdraw it at any time without affecting earlier lawful processing.
Payroll data processed for clients
When a client appoints us to process payroll, the client will normally be the controller and we will normally be its processor. We use the payroll data only on documented instructions, except where law requires otherwise.
Individuals whose data appears in a client payroll should normally direct privacy questions and rights requests to their employer. We will assist the client as required by the service agreement and data-protection law.
Sharing personal data
We may share personal data with:
- service providers supporting hosting, communications, document management, payroll operations, security and business administration;
- professional advisers, such as accountants, lawyers and insurers;
- HMRC, courts, law-enforcement bodies, regulators or public authorities where required or permitted by law;
- parties involved in a business sale, reorganisation or due-diligence process, subject to appropriate confidentiality; and
- other parties where you direct us or give valid consent.
Suppliers are given only the information reasonably needed for their role and are subject to appropriate contractual or legal duties.
International transfers
Some suppliers may process information outside the United Kingdom. Where a restricted international transfer occurs, we use a lawful transfer mechanism and additional safeguards where required. Further information about relevant safeguards can be requested through our contact form.
Retention
We keep personal data only for as long as reasonably needed for the purpose for which it was collected and to meet legal, accounting, security and dispute-resolution requirements. Retention periods vary according to the record, the service relationship and any applicable legal claim or investigation.
When information is no longer required, it is deleted, anonymised or securely disposed of in accordance with our retention arrangements.
Security
We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or destruction. No internet transmission or storage system can be guaranteed to be completely secure.
If you believe personal data has been sent to the wrong person, accessed without authority or otherwise compromised, contact us promptly through the website form and select the data-protection option.
Your rights
Depending on the circumstances, you may have the right to:
- access your personal data;
- correct inaccurate or incomplete data;
- request deletion;
- restrict processing;
- object to processing based on legitimate interests;
- receive certain data in a portable format;
- withdraw consent where processing relies on consent; and
- complain to the Information Commissioner's Office.
These rights are not absolute. We may need to verify your identity and may retain information where the law permits or requires it.
Exercising your rights
Use the contact form and select the data-protection option, or write to our registered office. Describe the information or processing concerned and provide enough detail for us to identify the relevant records.
We do not charge a fee in the ordinary course, but the law permits a reasonable fee or refusal in limited circumstances involving manifestly unfounded or excessive requests.
Complaints to the Information Commissioner's Office
You may complain to the Information Commissioner's Office about the handling of your personal data. Information about how to do this is available on the Information Commissioner's Office website. We would welcome the opportunity to investigate your concern first.
Changes to this notice
We may update this notice to reflect changes in our services, suppliers, legal obligations or data use. The current version and its update date will be published on this page.