Privacy Policy

Last updated: 25 August 2026

        This privacy policy explains how Electricity North West (Construction & Maintenance) Ltd collects, uses, and protects personal data gathered through the site induction system at cml-safety.co.uk.
    

1. Who We Are

Data Controller: Electricity North West (Construction & Maintenance) Ltd

Contact: admin@cml-safety.co.uk

We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Data We Collect

When you complete a site induction, we collect the following personal data:

Data Type	Purpose
Full name	To identify you on site
Date of birth	To verify your identity and CSCS card
Email address	To send you your induction pass
Phone number	For emergency contact purposes
Company / organisation	To record your employer
CSCS / ECS card photos	To verify your qualifications and right to work on site
Signature	To confirm your agreement to site safety rules
Project name	To record which project you were inducted on
IP address	For security and fraud prevention purposes

3. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

Legal obligation — We are required by health and safety legislation to maintain records of site inductions
Legitimate interests — To ensure the safety and security of all workers on site
Contract — As part of your engagement to work on our sites

4. How We Use Your Data

Your personal data is used to:

Generate and issue your site induction pass (PDF)
Maintain records of who has been inducted on each project
Verify your qualifications and identity
Contact you regarding the expiry of your induction
Comply with health and safety legal obligations

5. Data Retention

We retain your induction records for 12 months after the expiry date of your induction (which is 12 months from the date of induction). After this period, your personal data will be securely deleted from our systems.

This means your data is held for a maximum of 24 months from the date of induction.

6. Who We Share Your Data With

We do not sell or share your personal data with third parties for marketing purposes. Your data may be shared with:

Site management and supervisors — to verify your induction status on site
Hosting providers — our website is hosted on servers in the EU/UK for storage purposes only
Regulatory bodies — if required by law (e.g. HSE investigation)

7. Your Rights

Under UK GDPR you have the following rights:

Right of access — You can request a copy of the data we hold about you
Right to rectification — You can ask us to correct inaccurate data
Right to erasure — You can ask us to delete your data, subject to legal obligations
Right to restriction — You can ask us to restrict how we use your data
Right to object — You can object to our processing of your data
Right to data portability — You can request your data in a portable format

To exercise any of these rights, please contact us at admin@cml-safety.co.uk. We will respond within 30 days.

8. Cookies and Sessions

This website uses a session cookie which is strictly necessary for the site to function. This cookie:

Is temporary and deleted when you close your browser
Does not track you across other websites
Does not contain any personal information
Is used only to maintain your session while completing the induction form

As this cookie is strictly necessary for the service to function, it does not require your consent under the Privacy and Electronic Communications Regulations (PECR).

9. Security

We take the security of your personal data seriously. Our security measures include:

All data is transmitted over HTTPS (encrypted)
Uploaded files are stored in a private directory not accessible via the internet
Access to induction records is restricted to authorised administrators only
Passwords are stored using industry-standard bcrypt hashing
Admin sessions automatically expire after 30 minutes of inactivity

10. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Phone: 0303 123 1113

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be published on this page with an updated date. We recommend checking this page periodically.

← Back to Induction Form