Privacy Policy

Booking a legionella risk assessment involves providing information about yourself and the premises concerned. For the information handled through legionellani.co.uk, Legionella NI is the data controller. This policy explains the handling of that information and the privacy rights available to you.

Information supplied for a booking or enquiry may identify the person making the request, provide a means of contacting them and locate the premises requiring assessment. Your message may also contain relevant details about the assessment needed. Basin processes information sent through the website form. Keep your submission focused on the service, without adding unrelated health information or unnecessary personal details about anyone else.

Your enquiry details are sent to the specialist firm carrying out the legionella risk assessment so that it can deal with your request and arrange the work. The specialist firm contacts you directly using the contact information you provide. Responsibility for that firm's own handling of your information rests with the firm, including any further information it asks you for. We use the details to handle your enquiry or booking; we do not sell them.

Processing needed to arrange a booking you request, or to fulfil a contract with you, relies on the contractual basis under data protection law. Where handling information falls outside those purposes, legitimate interests may support necessary administration and responses to enquiries, provided those interests do not outweigh your rights. If a particular use requires consent, that permission must be obtained separately and can be withdrawn.

Personal information must not remain on file indefinitely simply because it was submitted. The appropriate retention period depends on the purpose of the booking or enquiry, any unresolved matters and applicable legal requirements. Once there is no continuing reason to retain identifiable details, they should be deleted or made anonymous. The specialist firm's retention of information is governed by its own responsibilities.

Under the UK GDPR, you can request access to your personal information and correction of inaccurate details. You can also ask for erasure, object to processing or request restrictions on its use. These rights depend on the circumstances and are not absolute. Use the enquiry form to make a request. You may be asked for enough information to verify your identity. You can also raise a complaint with the Information Commissioner's Office.

Cookies store small pieces of information on your device. Consent is required before using cookies that are not strictly necessary, subject to applicable legal exceptions. Your browser settings allow you to remove stored cookies or block them, although blocking necessary cookies can affect website functions.

For clarification about this policy or the handling of information submitted here, send your question through the enquiry form. If your concern relates to the specialist firm's subsequent use of your details, address that concern to the firm as well.