Privacy Policy

Who We Are

TMJ Contractors Ltd (‘we’ or ‘us’ or ‘our’) gather and process your personal information in accordance
with this privacy policy and in compliance with the relevant Data Protection Regulation and Law. This
notice provides you with the necessary information regarding your rights and obligations, and
explains how, why and when we collect and process your personal data.

TMJ Contractors Ltd’s registered office is at 107 Cavendish Street, Ashton under Lyne, OL6 7SW and
we are a company registered in England and Wales under company number 05493485.

Our designated Data Protection Appointed Person for the organisation is Natalie Taylor, who can be
contacted at Natalie.Taylor@tmjcontractors.co.uk.

Information That We Collect

TMJ Contractors Ltd processes your personal information to meet our legal, statutory and contractual
obligations. We will never collect any unnecessary personal data from you and do not process your
information in any way, other than already specified in this notice.

Identity Data: first name, last name, title, date of birth, gender, Passport/Driver’s License numbers
Contact Data: address, email address and telephone numbers

Financial Data: bank account details, UTR number, NI number

Transaction Data details about our payments to you

Employment Data: employment history and references (from CV’s/job applications)

Qualification/Training Data: details about what qualifications you hold, what training you have
completed along with certificate numbers and expiry dates

Special Categories of Personal Data: this includes details about your race or ethnicity, religious or
philosophical beliefs, and disabilities. Plus medical records only where required and Occupational
Health screening results. TMJ Contractors provide OH screening to onsite workers to promote good
health & wellbeing and good practice onsite. Results are collated and monitored to allow any
deterioration to be identified and treated quickly.

If you fail to provide personal data:

Where we need to collect personal data by law, or under the terms of a contract we have with you
and you fail to provide that data when requested, we may not be able to perform the contract we
have or are trying to enter into with you. In this case, we may have to cancel an agreement or
contract with you, but we will notify you if this is the case at the time.

We collect information in the below ways:

Employment CV’s

New Starter forms

Occupational Health Screening

How We Use Your Personal Data (Legal Basis for Processing)

TMJ Contractors Ltd takes your privacy very seriously and will never disclosure, share or sell your data
without your consent, unless required to do so by law. We only retain your data for as long as is
necessary and for the purposes specified in this notice. The purposes and reasons for processing your
personal data are detailed below:

We collect and store your personal data as part of our legal obligations for business accounting, tax
purposes and pension regulations

We collect and store your personal data to fulfill our contractual obligations to you as your employer
and also to any potential employee going through a recruitment process prior to employment

We collect and store your personal data to fulfil our obligations under H&S laws and regulations

We collect and store your data to enable us to provide evidence of our functionality/competence to
our industry clients both as a pre-qualification process and through contractual project obligations

Your Rights

You have the right to access any personal information that TMJ Contractors Ltd processes about you
and to request information about:

  • What personal data we hold about you
  • The purposes of the processing
  • The categories of personal data concerned
  • The recipients to whom the personal data has/will be disclosed
  • How long we intend to store your personal data for
  • If we did not collect the data directly from you, information about the source

If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us
to correct and/or complete the information and we will strive to update/correct it as quickly as
possible; unless there is a valid reason for not doing so, at which point you will be notified.

You also have the right to request erasure of your personal data or to restrict processing in
accordance with data protection laws, as well as to object to any direct marketing from us and to be
informed about any automated decision-making that we use.

If we receive a request from you to exercise any of the above rights, we may ask you to verify your
identity before acting on the relevant request; this is to ensure that your data is protected and kept
secure.

Sharing and Disclosing Your Personal Information

We do not share or disclosure any of your personal information without your consent, other than for
the purposes specified in this notice or where there is a legal requirement. TMJ Contractors Ltd uses
third-parties to provide the below services and business functions, however all processors acting on
our behalf only process your data in accordance with instructions from us and comply fully with this
privacy policy, the data protection laws and any other appropriate confidentiality and security
measures.

The following providers do not apply to everyone, who we share your data with will depend on your
employments status:

Hudson Contract Services

Hudson’s facilitate payments to CIS Sub-Contract workers on behalf of TMJ Contractors Ltd, they act
as a data processor. We provide the necessary information for them to process payments to you:
Name, Address & contact details, DOB, NI Number, UTR Number, Occupation/Skill level & Bank
Details. You will sign separate data collection forms specifically for Hudsons and will receive a
carbon copy of the data you have submitted. TMJ Contractors pass the completed forms to
Hudson’s, we do not keep copies. To view and read Hudson’s Privacy Notice please visit
https://www.hudsoncontract.co.uk/privacy-policy/

The Peoples Pension

“TPP” provide our employees with contributory pensions, they act as a data processor. We provide
them with the necessary data to process and maintain a workplace pension scheme for you: Name,
address & contact details, DOB & NI number and Bank Details if you make additional contributions
to your scheme, details of your work history at TMJ Contractors and how much you are paid. To
view and read The Peoples Pension’s Privacy Notice please visit: https://thepeoplespension.co.uk/privacy/

CITB (Construction Industry Training Board)

We provide the CITB with ad hoc information to allow us to claim grant funding for Construction
Related Training and to provide them with industry statistics. We may share: Name, Postcode, DOB,
Employments status, Occupation/Skill information, CSCS card details and details of the training you
have participated in such as certificate numbers and the training provider. Please visit:
https://www.citb.co.uk/utility-links/privacy-policy-cookies/

Client Companies (Main/Principle Contractor Companies)

As part of our qualification process to win ongoing work with our clients we must submit business
data to prove our competence, experience and qualifications. We are often asked to show evidence
of training of our workforce, this data will include training certificates that may identify your name
and the dates of training. We may also have to provide CSCS card information such as valid dates
and level of skill/qualification.

We are also required on specific projects to share information for KPIs (Key Performance Indicators)
set by the top level client/end users to evidence how a project has impacted/benefited the local
area, this is often a pre-requisite of government and local authority funded projects. Information
such as apprenticeships and training started/gained will be requested. Key data required may be
Name, DOB, gender, ethnicity, disability and training provider information.

Each of our clients has a Privacy Policy in line with the GDPR. Should you wish to see and read any
of their policies they will be available on their websites, or you can contact TMJ Contractors and
request a copy from a specific client.

Third-party business certification schemes

To further qualify to work for the majority of our clients we are required to achieve and maintain
specific Health and Safety/qualification accreditations:

  • SMAS (SSiP)
  • CHAS (SSiP)
  • Constructionline
  • SafeContractor
  • Builders profile (PQQ provider for multiple clients)
  • FIRAS (Fire Door installation certification)

We must share training data to prove the safety levels attained by our workforce. We may be asked
to provide copies of certificates (with your name and training information) and CSCS card details.

ELAS Business Support

We use ELAS to provide our Occupational Health Screening. ELAS retain the data that they collate
and issue a copy to TMJ Contractors Ltd. ELAS use the data to monitor and identify any occupational
health problems over the duration of their services to us. Data collected is specific to the risks
associated with our services onsite. Their Privacy Notice is available at:
https://www.elas.uk.com/privacy-notice/

Fabric IT

Fabric provide all our IT support and maintenance, whilst we don’t specifically share your data with
them we may need to allow them access to our documents for IT support issues. We may also
request for them to contact you to assist with your IT problems on devices such as tablets, laptops
and PCs whilst working for TMJ Contractors both in our office and onsite, in these circumstances we
would need to share a phone number or email address for them to do so. Fabric have a Privacy
Notice to view on tier website: https://fabric-it.com/terms-conditions/privacy-policy/

Safeguarding Measures

TMJ Contractors Ltd takes your privacy seriously and we take every reasonable measure and
precaution to protect and secure your personal data. We work hard to protect you and your
information from unauthorised access, alteration, disclosure or destruction and have several layers of
security measures in place, including:

  • Use of Microsoft 365 Suite including cloud-based SharePoint server for secure and protected
    document storage
  • Use of a Microsoft Exchange Server
  • Data encryption on company PC’s/laptops
  • Use of recognized firewall and anti-virus security software across all compatible company devices
  • Implementation of an Access Control & Password Policy
  • Implementation of a “Bring Your Own Device” & Remote Access Policy
  • Implementation of an Information Security Policy
  • Implementation of a Clear Desk Policy
  • Subscription level provision of IT Support from a Microsoft recognized Partner IT Company – Fabric IT

How Long We Keep Your Data

TMJ Contractors Ltd only ever retains personal information for as long as is necessary and we have
strict review and retention policies in place to meet these obligations. We are required under UK tax
law to keep your basic personal data (name, address, contact details and employment information) for
a minimum of 6 years after which time it will be destroyed.

Tweet us @TMJContractors