At Gracilis Ltd ("Gracilis", "we", "us", "our") we recognise that it is important for you to understand how we use your personal data. Therefore, please read the following information carefully as it contains important information regarding the Gracilis website (this/our “Site”) and the way in which we use your personal data.
This privacy policy explains how we use personal data about visitors to our Site, including customers and potential customers and about individuals that get in contact with us, our contractors and suppliers and those individuals whose personal data we otherwise process in the course of our business. This privacy policy also covers data processing related to job applications and our recruitment activities.
We will only use personal data in ways that are described in this policy and only ways that are consistent with our obligations and your rights under applicable data protection laws.
For the purpose of applicable data protection laws, the data controller (in other words, the organisation that determines how and for what purposes your personal data is used) will be Gracilis Ltd.
Ways in which you might provide the data to us
This is personal data about you that you give us, which can happen in a wide variety of ways, including by asking us to provide you with products and services and your use of those products or services, signing up to our newsletter, corresponding with us by e-mail, telephone or SMS or if you mention or interact with us on social media (for example by mentioning/tagging us or by contacting us directly). It also includes personal data you provide when you provide us with feedback, report a problem with our Site, enter into a contract with us or otherwise provide us with any personal data.
What type of data might be included?
The personal data you give us may include but is not limited to: your name, postal address, e-mail address and phone number (including mobile number), gender (and preferred salutation), date of birth, social media handle and personal data on your social media account, financial and credit card personal data, thoughts about our products (including complaints and reviews). If you are one of our contractors or suppliers, we will process your business contact details and your job role.
We will only ever ask you to give us personal data which we need in order to provide you with the products or services that you have requested from us.
Job applicants
If you apply for a role with us, we will collect a range of information directly from you either by email, over the phone or via an online job application process/system which may include but is not limited to: your name, address and phone number (including mobile number), email address, gender (and preferred salutation) date of birth, your health information (if relevant to your application), the contents of your CV (including details of previous roles, any relevant qualifications you have obtained), evidence that you are legally permitted to work in the country you are applying for a role in, your current and desired annual salary, your current notice period, websites, whether you have previously been employed by us, how you heard about the role you are applying for and any other information that we reasonably require as part of the recruitment process.
If you are a job applicant and want more detail about how we process your personal data as part of our recruitment process, you can contact our HR department by email at info@gracilis.co.uk.
Visiting one of our sites
If you visit one of our sales centres or show homes (or book to do so), or if you visit one of our construction sites or offices, we will process your personal data. This personal data may include: your name, postal address, e-mail address and phone number (including mobile number).
We may also process your personal data in the form of video or audio recordings via our CCTV. We use CCTV on various sites, primarily construction sites and offices, for the safety of and prevention of any crimes committed against our staff, our customers, our equipment and our properties, not for other monitoring purposes.
We provide staff with the option to wear enhanced safety items whilst on our sites which monitor them to increase their safety and to prevent crime, not for other monitoring purposes.
In the event of any criminal investigations, we may be required by law, to share the data captured with the relevant authorities.
When you visit our Site or get in touch with us, we may collect, generate, store and use certain personal data about you.
This personal data may include: technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information (if accessing an account with us), browser type and version, time zone setting, browser plug-in types and versions, device types, operating system, time and date of consent and platform and any phone number used to call our customer service number.
It may also include information about your visit to our Site, including the full Uniform Resource Locators (URL), clickstream to, through and from our site (including date and time), products you viewed, searched for or purchased, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs) and methods used to browse our Site.
This information is used by us to administer our Site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes and for the control of illegal acts. We reserve the right to check these log files and data retroactively if there is reasonable suspicion of an illegal act due to concrete indications. We safeguard your interests by anonymizing your IP address upon collection so that you are not identifiable.
We may occasionally receive personal data about you from other sources, for example if you use any of the other websites we operate or the other services we provide as part of our corporate group.
We will only use your personal information when the law allows us to. Whenever we process your personal data, we are required to identify and maintain a valid "lawful basis" (i.e. a legally compliant justification) for the processing. To help you to understand what we do with data and why, we have described the various relevant lawful bases that we rely on in the table below. Where we rely on our legitimate interests, we will always make sure that we balance these interests against your rights.
To provide you with the information and services that you request from us (i.e. to complete certain tasks, processes, and to communicate with you regarding those services that you request from us and respond to your questions and comments).
To measure how satisfied our Site visitors and our customers are and provide customer service (including troubleshooting in connection with your requests for services or when you ask us questions by email, on the phone or on social media).
We rely on our contractual arrangements with you as the lawful basis on which we collect and process your personal data in relation to an order for products and services.
Alternatively, in some scenarios, we rely on our legitimate interests as a business (for example, it is in our interests to measure customer satisfaction and troubleshoot customer issues).
Please make sure you provide us with certain information when requested as if you don't we may not be able to perform the contract we have entered into with you (such as, to provide you with products or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.
We will only use your personal information for the purposes for which we collected it. If we need to use your personal information for a purpose other than that for which it was collected, we will provide you, prior to that further processing, with information about the new purpose, we will explain our legal justification for doing so and we will provide you with any relevant further information. We may also issue a new privacy notice to you.
Like most businesses, we may provide your personal information to third parties for processing as part of the services that those third parties carry out on our behalf as part of the day-to-day operations of our business. These trusted suppliers will process your personal information on our behalf and provide us with services such as the provision of certain HR-related functions, the provision of IT services, third party software providers, the hosting of your personal information and our accountants and professional advisers.
We will share your personal information with suppliers of services in respect of any property you reserve from us or the sale of the property from us to you. These third parties may include: estate and managing agents; financial and legal advisors; any relevant mortgage provider; the National House Building Council and similar organisations; utility and service providers; and local authorities.
We will always make sure that these trusted suppliers meet agreed standards for the protection of your personal information and that they will only ever be allowed to use your personal information in order to provide us with services (and not for their own purposes). We require all third parties to take appropriate technical and organisational security measures to protect your personal information and to treat it subject to a duty of confidentiality and in accordance with applicable data protection law.
We may also share your personal information:
We take the security of your personal information very seriously and have put in place physical, technical, operational and administrative strategies, controls and measures to help protect your personal information from unauthorised access, use or disclosure as required by law and in accordance with accepted good industry practice. We will always keep these under review to make sure that the measures we have implemented remain appropriate. You can obtain further information about these measures from Louise Whitney – Sales & Marketing Manager (using the contact details set out at part 16 of this privacy policy below).
In addition, we limit access to your personal information to those employees, workers, agents, contractors and other third parties who have a business need to know in order to perform their job duties and responsibilities. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.
We will only retain your personal information for as long as is necessary to fulfil the purposes for which it was collected and processed, including for the purposes of satisfying any legal, tax, health and safety, reporting or accounting requirements. This means your personal data will be erased from our systems when we no longer need it.
Personal information which is no longer to be retained will be securely and effectively destroyed or permanently erased from our IT systems and we will also require third parties to destroy or erase such personal information where applicable.
In some circumstances we may anonymise your personal information so that it can no longer be associated with you. In this case, we may retain such information for a longer period without further notice to you.
It is important that the personal information we hold about you is accurate and up to date. Please keep us informed if your personal information changes so that our records can be updated. We cannot be held responsible for any errors in your personal information in this regard unless you have notified us of the relevant change.
Data protection law grants you a number of specific rights in respect of your data in addition to the broad and general right to have your data protected. We have set out some information in respect of each of those specific rights, below:
If you want to exercise any of the rights set out above, please contact Louise Whitney – Sales & Marketing Manager (using the contact details set out at part 16 of this privacy policy below).
Given the international location of some of our clients and suppliers, your personal information may be transferred in and out of the UK and the European Economic Area ("EEA") where local laws may not provide legal protection for personal data in the same way as is applicable in the UK or the EEA. Where your personal information is processed outside of the UK and EEA, we will ensure that we take the necessary steps to protect your personal information as required by data protection laws.
Our Site uses cookies to distinguish you from other users of our Site. This helps us to provide you with a good experience when you browse our Site and allows us to improve our Site and our services.
We will not place cookies other than "strictly necessary" cookies on your device unless you have told us that you are happy for us to do so. For information on how we use cookies, please see our cookie policy [●].
Our Site may, from time to time, contain links to third-party websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
We reserve the right to update or amend this privacy notice at any time, including where we intend to further process your personal information for a purpose other than that for which the personal information was collected or where we intend to process new types of personal information. We will issue you with a new privacy notice as soon as practicable when we make significant updates or amendments. We may also notify you about the processing of your personal information in other ways from time to time.
We encourage you to contact us first if you have any queries, comments or concerns about the way we handle your data (our details are in the section immediately below). We will try to put things right.
However, if you are not satisfied with our handling of any request by you in relation to your rights or concerns, you also have the right to make a complaint to the UK's Information Commissioner's Office ("ICO"). You can contact the ICO at: First Contact Team, Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF; 0303 123 1113; or https://ico.org.uk/.
If you have any questions about this privacy notice or how we handle your personal information, please contact Joe Fowler at:
St Michael’s House
111 Bell Street
Reigate, Surrey
RH2 7LF
P: 01737 274848