Subcontractor Privacy Notice

1. Introduction

i. You may have heard about the new General Data Protection Regulation (“GDPR”), which comes into effect May 25, 2018. We at MB Construction and Carpentry Ltd take your privacy seriously. This notice covers the, processing and other use of personal data.

ii. For the purpose of the DPA and GDPR we are the data controller and any enquiry regarding the collection or processing of your data should be addressed to Ellie Cromar, at our address 3 Roman Way, Thame, OX9 2FP or by email at

2. Our lawful basis for processing

i. We may hold and process personal data that you provide to us in accordance with the DPA and GDPR. The information that we collect and store relating to you is only used in relation to our position as main contractor, subcontracting areas of work to you.

ii. The personal information we process:


•National insurance number

•UTR number

•Bank details

•Email address

•Phone number

3. How we process your data

i. We are committed to respecting both your trust and privacy. We will store your personal details securely and treat them responsibly.

We will only process, disclose or share your personal data with our accountants to ensure we process the correct payments to HMRC and to yourself if you are CIS registered.

With effect from April 2018 your CIS information we share with the accountants will be shared via the Danton Secure Document Exchange (DSDE) using software through IRIS OpenSpace.

The information will be kept for 6 years after the end of the tax year they relate to. HMRC can request to see your CIS information at any time. We’ll never pass your data to third parties unless consent is given.

4.Your Rights

i. The DPA and GDPR give you the right to access information held about you by us. Please write to us or contact us by email if you wish to request confirmation of what personal information we hold relating to you. You can write to us at the address detailed in the introduction above, or by email to

There is no charge for requesting that we provide you with details of the personal data that we hold. We will provide this information within one month of your requesting the data.

5.Changes to this notice

i. We may update these policies to reflect changes to the website and customer feedback. Please regularly review these policies to be informed of how we are protecting your personal data.

ii. We welcome any queries, comments or requests you may have regarding this Privacy Policy. Please do not hesitate to contact us at 3 Roman Way, Thame, OX9 2FP or

Version: May, 2018