1. Introduction

dbstructural LTD (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect information about you when you use our website at www.dbstructural.co.uk or engage with our services.

This Policy seeks accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We may update this Policy from time to time. We encourage you to review this Policy periodically.

If you have any questions about this Policy or wish to exercise your rights, please contact us at .

2. Data Controller

dbstructural LTD is the data controller responsible for your personal data collected through this website and in connection with our services. We are not required to appoint a Data Protection Officer under Article 37 UK GDPR; however, all data protection queries should be directed to .

3. Personal Data We Collect

Personal data means any information about an individual from which they can be identified. We may collect the following categories of personal data:

• Identity Data: first name, last name, job title;
• Contact Data: billing/delivery address, email address, telephone numbers;
• Profile Data: preferences, feedback and survey responses;
• Registration Data: newsletter requests, event/seminar registrations, subscriptions and downloads;
• Technical Data: IP address, browser type and version, time zone, browser plug-in types, operating system and platform;
• Transaction Data: details about payments to and from you and services purchased;
• Compliance Data: government identifiers, identification documents (where required for AML purposes), dates of birth, beneficial ownership and due diligence data;
• Usage Data: how you use our website, products and services;
• Marketing and Communications Data: your preferences for receiving marketing from us and your communication preferences.

We may also collect, use and share aggregated or anonymised data (e.g. website traffic statistics) for any purpose. Such data does not identify you personally. If we combine aggregated data with your personal data, the combined data will be treated as personal data under this Policy.

We do not intentionally collect Special Category personal data (e.g. health, racial or ethnic origin, biometric data) except where a government-issued identity document submitted for AML compliance purposes contains a photograph that may constitute biometric data. In such cases, we process this data only to the extent required by law under our legal obligation lawful basis. We do not collect data relating to criminal convictions or offences beyond that required by our AML obligations.

This website is not directed at children under the age of 18. We do not knowingly collect personal data from children. If you are under 18, please do not submit personal data through this website. If we become aware that we have collected personal data from a child without appropriate consent, we will delete it promptly.

It is important that the personal data we hold about you is accurate and current. Please inform us if your personal data changes during your relationship with us.

4. If You Fail to Provide Personal Data

Where we need to collect personal data by law or under the terms of a contract with you, and you fail to provide that data when requested, we may not be able to perform the contract or provide the service. For example, if you do not provide identification documents required for anti-money laundering compliance, we may be unable to carry out our services. We will notify you at the time if this applies.

5. How and Why We Use Your Personal Data

We will only use your personal data where the law allows us to. The table below sets out the purposes for which we use your personal data and the lawful basis we rely on under Article 6 of UK GDPR:

Purpose	Data Used
Register you as a new client	Identity, Contact
Provide and improve services	Identity, Contact, Usage
Process and manage payments	Identity, Contact, Transaction
Manage our relationship with you	Identity, Contact, Profile
Send marketing communications	Identity, Contact, Profile, Marketing
Market research	Identity, Contact
Website administration and protection	Technical, Usage
Data analytics and website improvement	Technical, Usage
Comply with anti-money laundering	Compliance, Identity
Deliver relevant advertising	Usage, Profile, Marketing

Where we rely on legitimate interests as our lawful basis, we have carried out a balancing test to ensure our interests are not overridden by your rights and interests. You may request further information about our legitimate interests assessments by contacting us.

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another reason compatible with the original purpose.

6. Sharing Your Personal Data

6.1 Categories of Recipients

We may share your personal data with the following categories of third parties:

• IT and system administration service providers acting as data processors;
• Service providers supporting our website, CRM and other IT services;
• Payment services providers;
• Professional advisers (lawyers, bankers, auditors, insurers) acting as processors or joint controllers;
• HMRC, regulators and other authorities where required by law;
• Affiliate service providers (where you have given explicit consent at the point of data collection).

If your personal data is to be shared with any other third parties, we will take steps to protect your personal data.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party processors to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

Where you provide us with special category data, we may use such data on an anonymised basis for the purposes of monitoring and producing anonymised reports, including for the purposes of our reporting on equality, diversity and inclusion. However, we shall obtain your consent for such processing.

We will never sell your personal data to third parties.

7. How we collect your personal data

• Direct interactions: when you complete forms, correspond with us, apply for services, subscribe to publications or provide feedback;
• Automated technologies: as you interact with our website, we may collect Technical Data via cookies, server logs and similar technologies
• Third parties and public sources: including analytics providers (e.g. Google Analytics), payment and delivery service providers, Companies House and the Electoral Register.

8. How long we keep your personal data

We retain personal data only for as long as necessary, or as required by law. After the applicable retention period, data will be securely deleted or anonymised. In the event of a complaint or litigation, we may retain relevant data beyond these periods until the matter is resolved.

We may anonymise your personal data for research or statistical purposes, in which case it may be used indefinitely as it no longer constitutes personal data.

9. Data security

Access to your personal data is limited to employees, agents and contractors who have a legitimate business need to know, and is subject to confidentiality obligations.

We have procedures in place to detect, investigate and respond to suspected personal data breaches. Where we are legally required to do so, we will notify you and the ICO of a breach within 72 hours of becoming aware of it (Article 33/34 UK GDPR).

While we take reasonable steps to secure your data, please be aware that no method of internet transmission is 100% secure. If you have reason to believe your interaction with us is no longer secure, please contact us immediately.

10. Cookies

Our website uses cookies and similar tracking technologies in accordance with the Privacy and Electronic Communications Regulations (PECR) and UK GDPR. A cookie is a small text file placed on your device to help the website function and to collect information about your visit.

We use the following categories of cookies:

• Strictly necessary cookies – essential for the website to function. These cannot be disabled and do not require your consent;
• Performance / analytics cookies – help us understand how visitors interact with our website (e.g. Google Analytics). These require your consent before being set;
• Marketing / targeting cookies – used to deliver relevant content and advertising. These require your consent before being set.

When you first visit our website, you will be presented with a cookie consent banner. You may accept or decline non-essential cookies at that point, and you can change your preferences at any time.

For more detailed information about the specific cookies we use, their purposes and how long they are stored, please see our Cookie Policy.

Please note that disabling certain cookies may affect the functionality of our website.

11. Links to Third-Party Websites

Our website may contain links to third-party websites. Clicking on those links may allow third parties to collect or share data about you. We do not control those websites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit.

12. Marketing

Where you have requested information from us, purchased our services, or subscribed to our newsletter and have not opted out, we may send you marketing communications about engineering services, events and updates we think you may find relevant.

You can opt out of marketing communications at any time by:

• Clicking the ‘unsubscribe’ link in any marketing email;
• Contacting us at .

We will endeavour to action opt-out requests within 28 business days. Opting out of marketing will not affect the processing of personal data in connection with services already provided to you.

We will only share your personal data with third-party affiliates for their own marketing purposes where you have given us your explicit consent to do so.

13. Your Rights

Under the UK GDPR, you have the following rights in relation to your personal data:

• Right to be informed: to receive clear information about how and why we process your data (provided by this Policy);
• Right of access: to request a copy of the personal data we hold about you (a Subject Access Request);
• Right to rectification: to ask us to correct inaccurate or incomplete personal data;
• Right to erasure: to ask us to delete your personal data where there is no compelling reason for its continued processing;
• Right to restrict processing: to request that we limit how we process your personal data in certain circumstances;
• Right to data portability: to receive your personal data in a structured, commonly used format or to have it transferred to another controller;
• Right to object: to object to processing based on legitimate interests or for direct marketing purposes;
• Rights re automated decision-making: not to be subject to a decision based solely on automated processing that significantly affects you. We do not currently carry out such processing.

To exercise any of these rights, please contact us at . We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

We may need to verify your identity before fulfilling a request. There is no fee to access your Personal Data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

If you have any cause for complaint about our use of your Personal Data, please contact us and we will do our best to solve the problem for you. If we are unable to help, you also have the right to lodge a complaint with the UK’s supervisory authority for data protection issues, the Information Commissioner’s Office (www.ico.org.uk).