top of page
Logo Development-2-04.png
8. Bee on flower.jpg

TACP Privacy Statement

TACP(UK)Ltd is committed to data protection and data privacy. With the GeneralData Protection Regulation (GDPR) which became enforceable on 25 May 2018,TACP(UK)Ltd undertook a GDPR readiness programme to review the entire business,the way data is handled and the way in which it is used to provide the services andto manage business operations.​

Introduction

TACP(UK)Ltd (referred to as TACP) is committed to data protection and data privacy. With the General Data Protection Regulations (GDPR) which became enforceable on 25 May 2018, TACP undertook a GDPR readiness programme to review the entire business, the way data is handled and the way in which it is used to provide the services and to manage business operations.

Purpose and Scope

This privacy statement aims to give you information on how TACP collects and processes your personal data through your interactions with the company. Such interactions may include but are not limited to: visits to our website, applying for an advertised vacancy orcorresponding with us by phone or e-mail.

Policy

TACP is the data controller of the personal information collected and is responsible for its safe management. The person responsible for the privacy of your data is:


Jo Wall, Managing Director, and may be contacted at TACP, 4th Floor, James William House, 9 Museum Place, CF10 3BD.


TACP is committed to ensuring that your information is secure, accurate and relevant. To prevent unauthorised access or disclosure, TACP has implemented suitable physical, electronic, and managerial procedures to safeguard and secure personal data held.

The Data Collected About You

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

 

TACP may collect, use, store and transfer different kinds of personal data about you which have been grouped together follows:

  • Identity Data includes first name, last name, username or similar identifier.

  • Contact Data includes address, email address and telephone number(s).

  • Technical Data includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our website.

  • Profile Data includes feedback and survey responses, or professional credentials, experience and qualifications (in the case of job applications and Sub-Consultants).

  • Special categories includes details about your gender, marital status, age, religion, sexual orientaion, ethnicity, health conditions, caring responsibilities and working pattern – these details can be given voluntarily through TACP’s equaliuty and diversity monitoring form.

How is your Personal Data Collected?

TACP use different methods to collect data from and about you including through:

 

Direct Interactions


You may give TACP your Identity, contact and financial data by filling in forms or by 
corresponding with us by post, phone, e-mail or otherwise. This includes personal data you 
provide when you:​

  • Make an application for employment or engagement;

  • Apply or enter into a contract for our products or services;

  • Complete a survey; or

  • Give us some feedback.

​

Automated Technologies or Interactions


As you interact with the TACP website, technical data about your equipment, browsing actions and patterns may be automatically collected. TACP collects this personal data by using cookies, server logs and other similar technologies. TACP may also receive Technical Data about you if you visit other websites employing our cookies.

How TACP Use your Personal Data 

TACP will only use your personal data when the law allows. Most commonly, your personal data will be used in the following circumstances:

  • To perform the contract TACP is about to enter into or has entered into with you.

  • Where it is necessary for the legitimate interests of the business (or those of a third party) and your interests and fundamental rights do not override those interests.

  • The need to comply with a legal or regulatory obligation.

  • For equality and diversity monitoring purposes.

Change of purpose

TACP will only use your personal data for the purposes for which it has been collected, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.

Who TACP (UK) Ltd Will Share your Personal Data With?

TACP takes care to allow access to personal data only to those who require such access to perform their tasks and duties, and to third parties who have a legitimate purpose for accessing it. Whenever a third party is permitted to access personal information, TACP will implement appropriate measures to ensure the data is used in a manner consistent with this notice and that the security and confidentiality of the data is maintained.

Transfers to Third-Party Service Providers

In addition, TACP may make certain personal data available to third parties who provide services to the business. This is done on a "need to know basis" and in accordance with applicable data protection and data privacy laws.

Transfer of Personal Data Abroad

TACP will not transfer your data abroad.

Data Retention

Personal data will be stored in accordance with applicable laws and kept for as long as needed to carry out the purposes described in this notice or as otherwise required by law. A summary of TACP’s data retention can be seen in the table below:

Data

Project Data

Contaminated land assessments

Waste transfer information

Finance record

Employee data

Payroll data

Health and Safety data

Minimum Retention

6 years (12 years if applicable)

Permanently

2 years (non hazardous waste) / 3 years (hazardous waste)

6 years after the end of the financial year

6 years after employee leaves

3 years (6 years for NMW data)

5 years health surveillance may be longer with regards to hazardous substances)

Your Rights

You may exercise the rights available to you under Data Protection law as follows

  • The right to be informed.

  • The right of access.

  • The right to rectification.

  • The right to erasure.

  • The right to restrict processing.

  • The right to data portability.

  • The right to object.

  • Rights in relation to automated decision making and profiling
     

TACP will respond to all requests received from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

How your Data is Protected

TACP has a Cyber Security certificate (certificate number 93cb319a-e5f9-432a – a94c-bcb29069beb8) which requires the company to have in place:

  • A register of hardware devices and multi factor authentication in place;

  • A list of any cloud-based platforms which host corporate data;

  • A firewall in place to create a boundary around our internet and network;

  • A password changing process in place;

  • A ‘Sand box’ system in place to protect from malware from emails;

  • Anti-virus software in place;

  • A back up system in place; and,

  • Staff training in place.

  • Patch management and current security updates for hardware.

Policy Review

This policy falls within TACP’s Integrated Management System which is certified by LRQA and adheres to International Standards ISO 9001, ISO 14001 and ISO 45001. This policy and the processes documented are checked and approved annually.

Signed

​

[Jo Wall]

​

Jo Wall

Managing Director

​

For TACP

​

Date: 29/06/2026

​

​

bottom of page