Privacy policy

Drumclog Plant Ltd ("Drumclog Plant", "we", "us") is the data controller for the personal data described in this policy. We are a company registered in Scotland with company number SC249776, and our registered office is 1 Cambuslang Court, Glasgow, G32 8FH.

Our yard and operational base is Drumclog Plant Yard, Drumclog, Strathaven, South Lanarkshire, ML10 6QQ. You can contact us about anything in this policy by emailing info@drumclogplant.com, calling01357 440 286, or writing to us at the yard address above.

Information you give us. When you use our enquiry form, or contact us by phone or email, we collect:

• your name, and your company name if you give it;
• your email address and phone number;
• the service you are interested in, and anything you tell us in your message, such as site locations, project details or photos.

Please do not include sensitive information (such as health details) in an enquiry unless it is needed, for example for site safety.

Information collected automatically.

• Technical data: when you visit the site, our hosting provider processes your IP address, browser and device type, and the pages you request, so it can deliver the site, keep it secure and protect it from attacks and automated bots.
• Spam protection: our enquiry form uses Google reCAPTCHA, which collects information such as your IP address, browser and device details and how you interact with the "I'm not a robot" check, to tell people apart from automated bots.
• Analytics data (only with your consent): if you accept analytics cookies, Google Analytics collects information about how you use the site, such as pages visited, how long you stay, how you arrived, and your approximate location (town or region) and device type. Google Analytics 4 does not store your full IP address. See our cookie policy for details.

We do not use the website to collect payment details, and online ordering is not currently available.

We only use your personal data where UK data protection law gives us a lawful basis to do so:

• To respond to your enquiry and give you a quote: because you have asked us to take steps before entering into a contract (Article 6(1)(b) UK GDPR), or, where you contact us on behalf of a business, for our legitimate interest in responding to business enquiries (Article 6(1)(f)).
• To carry out work, hire or supply you have agreed with us: to perform our contract with you or your organisation (Article 6(1)(b)).
• To keep business, accounting and tax records: to comply with our legal obligations (Article 6(1)(c)).
• To run, secure and improve the website, and to protect our enquiry form from spam and abuse(including using Google reCAPTCHA): for our legitimate interests in operating a secure, working website (Article 6(1)(f)).
• Website analytics: only with your consent (Article 6(1)(a) UK GDPR and regulation 6 of PECR). You can withdraw consent at any time using the "Cookie settings" link at the foot of every page.
• To establish, exercise or defend legal claims: for our legitimate interests (Article 6(1)(f)).

Where we rely on legitimate interests, we have considered your rights and are satisfied they are not overridden. We do not sell your personal data, we do not use it for marketing unless you ask us to keep you informed, and we do not make decisions about you using automated decision-making or profiling.

We share personal data only with trusted service providers who process it on our behalf, under written contracts that require them to keep it secure and use it only on our instructions:

• Cloudflare, Inc.: hosts the website and protects it from attacks.
• Mailgun (Sinch): delivers enquiry form submissions to our inbox. Our Mailgun account uses its EU region.
• Microsoft: provides our business email (Microsoft 365), where enquiries and correspondence are stored.
• Google: provides Google Analytics (only if you consent), Google reCAPTCHA spam protection on our enquiry form, and the Google Maps embeds on our contact pages.
• Yellowcom: our website agency, which builds and maintains the site and receives a copy of enquiry form notifications so it can make sure the form is working.

We may also share information with our professional advisers (such as accountants, insurers and solicitors), or where we are required to by law, by a court, or by a regulator or law enforcement body. If our business is ever sold or restructured, personal data may transfer to the new owner, who would have to use it in line with this policy.

When a Google Maps map or the reCAPTCHA check loads on our site, Google also uses the data it collects in line with its own policies, as a separate controller. You can read how Google uses it in the Google privacy policy.

Some of our service providers are based in, or use systems in, countries outside the UK, including the United States. Where personal data is transferred outside the UK, we make sure it is protected by one of the safeguards required by UK data protection law: a UK adequacy decision (including the UK Extension to the EU-US Data Privacy Framework, where the provider is certified), or the International Data Transfer Agreement or Addendum issued by the Information Commissioner. You can contact us for more information about these safeguards.

• Enquiries that do not lead to work: we keep them for up to 24 months from our last contact, so we can deal with any follow-up questions, then delete them.
• Customer records: where an enquiry leads to work, hire or supply, we keep the related records for six years after the end of the financial year in which the work finished, to meet our tax and accounting obligations and to deal with any claims.
• Analytics data: kept in line with the data retention setting in our Google Analytics account, after which Google deletes it.
• Technical and security logs: kept by our hosting provider for a short period, normally no more than a few days.

We use appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS) across the whole website, access controls on our systems, and choosing service providers that meet recognised security standards. No method of sending information over the internet is completely secure, but if we become aware of a personal data breach that is likely to put your rights at risk, we will tell you and the Information Commissioner's Office where the law requires us to.

Under UK data protection law you have the right to:

• access the personal data we hold about you and receive a copy;
• ask us to correct information that is wrong or incomplete;
• ask us to erase your personal data;
• ask us to restrict how we use your personal data;
• object to us using your personal data where we rely on legitimate interests;
• ask us to transfer your personal data to you or another organisation (data portability);
• withdraw your consent at any time where we rely on consent, such as for analytics cookies. This does not affect anything we did before you withdrew it.

Some of these rights only apply in certain circumstances. To exercise any of them, emailinfo@drumclogplant.com or write to us at the yard address. There is normally no charge. We may need to confirm your identity, and we will respond within one month, or tell you within that month if we need longer because your request is complex.

If you have concerns about how we use your personal data, please contact us first and we will do our best to put things right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection, which covers Scotland: visitico.org.uk/make-a-complaintor call 0303 123 1113.

Children. Our website and services are aimed at businesses and adults. We do not knowingly collect personal data from children.

Other websites. Our site links to other websites, such as our Facebook page. We are not responsible for how those sites handle your data, so please read their privacy policies.

Changes to this policy. We may update this policy from time to time, for example if we change the services we use. The current version will always be on this page, with the date it was last updated at the top.