GDPR Privacy Policy (including 'cookie' policy)

Effective Date: August 6, 2026

Last Updated: August 6, 2026

---

## 1. Introduction & Overview

Welcome to Building Control Management (operated by BCMC LTD, "we," "our," or "us"). We respect your privacy and are committed to protecting your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website (**https://buildingcontrolmanagement.co.uk**) or submit building control applications, quote requests, and documentation to us.

---

## 2. Who We Are (Data Controller)

Under the UK GDPR, BCMC LTD acts as the Data Controller for the personal data collected through our operations and website.

* Company Name: BCMC LTD (Trading as Building Control Management)

* Registered Office / Location: Staffordshire, United Kingdom

* Company Registration Number: 1392790

* Privacy & Data Protection Contact: info@buildingcontrolmanagement.co.uk | (01782) 841361

---

## 3. What Personal Data We Collect & Legal Basis for Processing

As a Registered Building Control Approver (RBCA), we process personal data related to property owners, developers, architects, and contractors to facilitate building regulation applications, plan checks, and site inspections.

| Category of Data | Specific Data Collected | Purpose of Processing | Legal Basis (UK GDPR Art. 6) |

|---|---|---|---|

| Identity & Contact | Name, email address, phone number, postal address | Handling quote requests, communicating regarding building control applications, scheduling site inspections | • Contract fulfillment<br>• Legitimate Interest |

| Project & Property Data | Site addresses, architectural drawings, structural calculations, building specifications | Assessing construction projects, conducting plan checks, regulatory compliance | • Contract fulfillment

• Legal Obligation (Building Safety Act & Building Regulations) |

| Transaction & Billing | Invoicing details, payment history, VAT numbers | Processing fees for building control services, accounting, and auditing | • Contract fulfillment

• Legal obligation (Tax/HMRC laws) |

| Technical & Device Data | IP address, browser type, device details | Site security, server diagnostics, infrastructure stability | • Legitimate Interest (Network security) |

| Usage & Analytics | Pages viewed, session duration, referral paths | Understanding how visitors use our site to improve user experience | • Consent (via Cookie Banner) |

---

## 4. How We Collect Your Data

1. Direct Interactions: When you submit an online application form, request a quote, email us, or call our office.

2. Project Stakeholders: We may receive your contact or project data via third parties involved in your construction project (e.g., your architect, main contractor, or project manager).

3. Automated Technologies: Technical data collected automatically via cookies when navigating our website. (See our Cookie Policy).

---

## 5. Sharing & Disclosure of Personal Data

We do not sell your personal data. We share your information strictly when necessary to perform our statutory building control functions or operate our business:

* Regulatory & Statutory Authorities: Information shared with the Building Safety Regulator (BSR), local authorities, or fire and rescue services as mandated by building control legislation.

* Professional Consultants & Inspectors: Our qualified registered building inspectors and structural/fire engineering specialists engaged to assess your project.

* IT & Cloud Service Providers: Secure hosting, email, and administrative software providers supporting our operations under strict Data Processing Agreements.

* Legal & Financial Authorities: Accountants, auditors, and legal counsel for tax, audit, and compliance purposes.

---

## 6. International Data Transfers

Your data is primarily processed within the UK and European Economic Area (EEA). If any third-party software or cloud infrastructure transfers data outside the UK/EEA, we ensure appropriate safeguards (such as UK Addendums to EU Standard Contractual Clauses) are firmly in place.

---

## 7. Data Retention (How Long We Keep Your Data)

Because building control files contain critical historical compliance records for structural safety:

* Building Control Project & Inspection Records: Retained for extended periods in line with statutory guidelines, RICS recommendations, and professional indemnity insurance requirements (typically up to 15 years or more depending on building liability frameworks).

* General Inquiries & Quotes (Non-completed projects): Retained for [e.g., 2 years] before secure deletion.

* Financial & Tax Records: Retained for 6 years plus the current year to comply with UK HMRC tax obligations.

---

## 8. Your Data Protection Rights Under UK GDPR

Under the UK GDPR, you hold several rights regarding your data:

* Right of Access: Request copies of your personal data.

* Right to Rectification: Request correction of inaccurate project or personal details.

* Right to Erasure: Request deletion of data (note: this may be limited if we are legally required to retain building control compliance records).

* Right to Restrict or Object: Object to processing based on legitimate interests.

* Right to Data Portability: Request transfer of your data to another service provider where applicable.

To exercise any of these rights, please contact us at info@buildingcontrolmanagement.co.uk.

---

## 9. Data Security

We apply robust technical and organizational security measures—including encrypted communications, secure cloud storage, and restricted staff access—to protect your plans, drawings, and personal data from unauthorized access or accidental loss.

---

## 10. Right to Lodge a Complaint

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).

---

## 11. Contact Information

For any questions, requests, or concerns regarding this Privacy Policy, please reach out to us at:

* Email: info@buildingcontrolmanagement.co.uk

* Address: Building Control Management, Staffordshire, United Kingdom