Privacy notice
How we collect, use and protect personal data. This notice applies to www.edwardsbros.co.uk and to the services the company provides directly.
Who we are
Edwards Bros (Spaldwick) Ltd is the data controller for the personal data described in this notice. We are registered in England and Wales, company number 00598511. Our registered office is Fenland House, 15b Hostmoor Avenue, March, Cambridgeshire PE15 0AX, and we trade from Glebe Farm, Barham Road, Spaldwick, Huntingdon, Cambridgeshire PE28 0YT. We are registered with the Information Commissioner's Office, registration number ZA900683.
For any question about this notice or about how we handle your data, contact Peter Edwards at peter@edwardsbros.co.uk or 07540 288077.
Our trading businesses Granton Finance, PassCyber and EB Publishing House operate their own websites and publish their own privacy notices. This notice covers this website and work the company takes on directly.
What we collect from this website
This website has no contact forms, no account logins and no tracking or analytics scripts. We do not set cookies.
The site loads fonts from Google Fonts. When your browser requests those files, Google receives your IP address and basic technical information about your device. That request is necessary for the site to display correctly, and Google's own privacy policy governs what they do with it.
The site is hosted by Vercel Inc., which keeps standard server logs including IP addresses for security and operational purposes.
If you email or telephone us, we hold your contact details and whatever you choose to tell us, so that we can reply and, where relevant, provide a service.
Data we handle when providing services
Our data clean-up and analysis service involves handling information belonging to the client organisation. That information often contains personal data — for example names in a membership list, a supplier ledger or a payroll extract.
In that work the client remains the data controller and we act as a data processor on their instructions. Before any engagement begins we agree in writing what data we will receive, what we will do with it, how long we will hold it and when it will be deleted. We do not use client data for any purpose other than delivering the agreed work, and we do not share it with anyone else without the client's instruction.
Data received for an engagement is deleted once the work is complete and the client has confirmed receipt of the output, unless the client asks us to retain it for an agreed period.
Why we are allowed to use your data
Where you contact us about our services, we rely on our legitimate interest in responding to enquiries and running the business. Where we are providing a service to you, we rely on the performance of our contract with you. Where we must keep records for tax, accounting or other statutory reasons, we rely on our legal obligations.
How long we keep it
Enquiries that do not lead to work are deleted within twelve months. Client records are kept for six years after the end of the engagement, which is the period we are required to retain business and tax records. Data held for a specific piece of processing work is deleted on the timetable agreed in the engagement.
Who else sees it
We do not sell personal data and we do not share it for marketing. We use a small number of service providers to run the business — email and file storage, accounting software, and website hosting — and those providers process data on our behalf under their own contractual obligations. We will disclose data where the law requires it.
Where it is held
Some of our service providers store data outside the UK. Where that happens, the transfer is made under the safeguards provided for in UK data protection law.
How we protect it
We work to the Cyber Essentials technical controls. Multi-factor authentication is enabled on every cloud service we use, devices use separate administrator and standard accounts, and access to client data is limited to the person doing the work.
Your rights
You have the right to ask for a copy of the personal data we hold about you, to have it corrected if it is wrong, to ask us to delete it, to object to or restrict how we use it, and to receive it in a portable format. To exercise any of these, email peter@edwardsbros.co.uk. We will respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you raised it with us first so that we can put it right.
Changes to this notice
We update this notice when our practices change. The date at the top shows when it was last revised.