Privacy Policy

PRIVACY POLICY 

Privacy Notice 

UK GDPR: Privacy Notice for Clients, Consultants, Suppliers and Website Users 

Last updated: May 2026 

 

Introduction 

Selway Joyce Limited is committed to protecting and respecting your privacy. 

This Privacy Notice explains how we collect, use, store and protect personal data relating to clients, consultants, suppliers, professional contacts and users of our website. 

The rules relating to the processing of personal data are set out in the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable privacy laws. 

 

Who We Are 

Selway Joyce Limited is the data controller responsible for your personal data. 

Contact Details 

Selway Joyce Limited
Level 1, Anglo St James House
39a Southgate Street
Winchester
Hampshire
SO23 9EH 

Telephone: 01962 840630
Email: admin@selwayjoyce.co.uk 

For all privacy-related matters, including data protection requests or complaints, please contact us using the details above. 

 

The Personal Data We Collect 

We may collect and process the following categories of personal data: 

  • Name 
  • Business name 
  • Job title 
  • Postal address 
  • Email address 
  • Telephone number 
  • Financial information required for payments, including bank details and VAT information 
  • Project-related communications and records 
  • Website usage data and technical information such as IP addresses and browser details 

We obtain personal data directly from you, from your employer or organisation, from publicly available sources, or through the course of providing professional services. 

We do not generally process special category personal data. 

 

How We Use Personal Data 

We use personal data for the following purposes: 

  • Delivering quantity surveying, project management, employer’s agent and contract administration services 
  • Managing projects and professional communications 
  • Maintaining business records and accounts 
  • Engaging consultants, suppliers and third parties connected to projects 
  • Responding to enquiries 
  • Sending business communications and relevant updates 
  • Managing contractual relationships 
  • Operating and improving our website and systems 
  • Complying with legal and regulatory obligations 

 

Lawful Bases for Processing 

Under UK GDPR, we rely on the following lawful bases: 

Performance of a Contract 

Processing necessary for: 

  • Delivering professional services 
  • Managing projects 
  • Engaging consultants and suppliers 
  • Managing contractual relationships 
  • Administering payments and accounts 

Legitimate Interests 

Processing necessary for: 

  • Maintaining professional relationships 
  • Business administration and operations 
  • Maintaining project records 
  • Internal reporting and management 
  • Improving our services 
  • Managing business communications 

We ensure our legitimate interests are balanced against your rights and freedoms. 

Consent 

Where required, we will seek consent before sending marketing communications or processing data in circumstances where consent is legally required. 

You may withdraw consent at any time. 

Legal Obligations 

We may process personal data where necessary to comply with legal, regulatory or professional obligations. 

 

Sharing Personal Data 

We treat personal data confidentially and only share it where necessary. 

Personal data may be shared with: 

  • Employees and directors of Selway Joyce Limited 
  • Professional advisers 
  • Consultants and project team members 
  • IT service providers and software providers 
  • Finance and accounting providers 
  • Third-party suppliers engaged in connection with projects 
  • Regulatory authorities where legally required 

All third parties are expected to respect the security of personal data and process it in accordance with applicable law. 

 

International Transfers 

We do not routinely transfer personal data outside the United Kingdom. 

Where project requirements or service providers involve transfers outside the UK, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements. 

 

Data Retention 

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including: 

  • Delivering services 
  • Legal and contractual obligations 
  • Accounting and tax requirements 
  • Managing disputes or claims 
  • Professional and project record purposes 

Retention periods may vary depending on the nature of the data and project requirements. 

Accounting records are generally retained for at least 6 years. 

Project records may be retained longer where reasonably necessary. 

 

Your Rights 

Under UK GDPR, you may have the right to: 

  • Access your personal data 
  • Request correction of inaccurate data 
  • Request erasure of data 
  • Restrict processing 
  • Object to processing 
  • Request transfer of your data 
  • Withdraw consent where processing is based on consent 

To exercise your rights, please contact us using the details above. 

We will respond in accordance with applicable legal timeframes. 

 

Subject Access Requests 

You may request details of the personal data we hold about you by making a Subject Access Request (SAR). 

We will normally respond within one month unless the request is particularly complex or numerous. 

We reserve the right to request proof of identity before responding. 

 

Data Protection Complaints 

If you have concerns about how we collect, use or protect your personal data, you may submit a data protection complaint to us using the contact details above. 

Complaints may be submitted by: 

  • Email 
  • Telephone 
  • Post 
  • In writing during the course of a project 

We will: 

  • Acknowledge complaints within 30 days 
  • Investigate complaints fairly and impartially 
  • Keep records of complaints received and actions taken 
  • Respond as soon as reasonably practicable 

If you remain dissatisfied, you have the right to complain to the Information Commissioner’s Office (ICO). 

Information about the ICO can be found at: https://ico.org.uk 

 

Website Cookies and Analytics 

Our website uses cookies and similar technologies to help the website function effectively and to understand how visitors use the site. 

We use Google Analytics to collect anonymous information about how visitors use our website, including: 

  • pages visited;  
  • time spent on the website;  
  • browser and device type;  
  • approximate geographic location; and  
  • how visitors arrive at our website.  

This information helps us improve the performance, usability and content of our website. 

Google Analytics may collect information such as your IP address and assign a unique identifier through cookies. We do not use Google Analytics to identify individual users. 

You can control or disable cookies through your browser settings. 

Further information about how Google uses data can be found at: Privacy Policy – Privacy & Terms – Google 

 

Data Security 

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure. 

 

Changes to this Privacy Notice 

We may update this Privacy Notice from time to time. 

Any updates will be posted on our website. 

 

Company Information 

SelwayJoyce Limited
Registered in England and Wales
Company Number: 7649534 

Registered Office:
Level 1, Anglo St James House
39a Southgate Street
Winchester
Hampshire
SO23 9EH