Privacy Policy

  

phs Compliance Limited is a subsidiary business of Personnel Hygiene Services Limited and is part of the Specialist business division contained within the phs Group.

phs Group is the leading hygiene services provider in the UK, Spain and Ireland. With over 90,000 customers over 300,000 locations, we meet the needs of up to 100 million people.Who we are:

  • Team of over 3,000 expert personnel providing service to more than 300,000 locations
  • A network giving full coverage to a population of more than 100 million
  • Over 50 years of innovation and investment, transforming the future
  • More than 90,000 customers – everything from beach bars in Ibiza to Buckingham Palace.

    

Healthcare, Washroom, Floorcare Hygiene and Specialist are our business. We stay on top of all the legislative developments affecting your industry to provide you with expert advice on what you need to do to ensure that your business is legally compliant.

Although our customers are primarily businesses, we do collect and use personal information relating to individuals as part of our day-to-day activities.This is generally in order to provide services directly to individuals, or when we work with individuals in our customer or supplier businesses.We also collect personal information about individuals who use our websites, wish to receive information about our services or who wish to work for us.

   
In this notice “phs”, “we”, “us” and “our” means Personnel Hygiene Services Limited and its UK subsidiaries. The names of the subsidiaries, as stated on the Data Protection Register held by the Information Commissioner’s Office, are Direct365online Limited, phs Compliance Limited and Teacrate Rentals Limited. Personnel Hygiene Services Limited also uses the following trading names: phs Washrooms, phs Floorcare, phs Wastemanagement, phs Besafe, phs Greenleaf, phs Wastekit, Warner Howard, Syncros and Matta.
    

This privacy notice explains in the following sections how we use any personal information we collect about you when you use our website.

What lawful basis do we use to process personal information about you? 

Why we need your personal information and how will we use it?

How do we protect your information?

Transferring your information overseas

Social media

How long we keep your data

Your rights

Cookies 

Other websites

How to contact us?


 

What lawful basis do we use to process personal information about you?

  • We have reviewed the purposes of our processing activities, and selected the most appropriate lawful basis (or bases) for each activity.
  • We have checked that the processing is necessary for the relevant purpose, and are satisfied that there is no other reasonable way to achieve that purpose.
  • We have documented our decision on which lawful basis applies to help us demonstrate compliance.
  • We have included information about both the purposes of the processing and the lawful basis for the processing in our privacy notice
  • Where we process special category data, we have also identified a condition for processing special category data, and have documented this.
          
RefLawful Basis to process personal data
1Processing is necessary for phs and its subsidiaries to carry out their services or deliver their products, to defend ourselves in legal claims and to respond to queries from regulators or legislators; except where it would negatively impact on the fundamental rights and freedoms of the individual (data subject), or where their personal data requires protection, particularly if the individual is a child.
2Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
3Processing is necessary for compliance with a legal obligation to which the data controller is subject.
4The data subject has given consent to the processing of his or her personal data for one or more specific purposes.

   
    
Why we need your personal information and how will we use it?

To provide an outstanding service to our customers, employees and suppliers, we collect and process information in the following ways.

Service ProvidedScenarioHow will we use your informationLawfulBasisRef
Marketing, Lead and Prospect Customer Information
Informing our current and prospective customers of phs products and services Request a quotation for our products, services or place an order by corresponding with us by telephone, email or through our website (website usage information is collected using cookies)For customers and prospective customers, we will use your information to provide any products and services you’ve requested and for other purposes, for example: the functionality built into all our marketing messages.1


Marketing to prospective or current customersWe also purchase contact information from a third-party data seller, Market Location Limited. Data is used to generate business leads and to contact prospective customers who may become opportunities. phs will not share your information for marketing purposes with companies outside our group.1
Current Customer Information
Sale Orders Processing You purchase one off or ad-hoc goods from us over the phone or our web sites
  • We only collect the minimum personal data needed to process an order, manage an account or enter into a contract.Without this information we will not be able to conduct business with you.
  • In processing your order, we may send your details to, and also use information from credit reference agencies.
  • We credit check new business accounts >£1k using a credit reference agency, where ratings do not meet the required criteria, these businesses are placed on a monitoring list.
  • To ensure that we are compliant with HMRC VAT regulations.
1,2 and 4
Contractual Business forprospective or current customersYou enter into a contractual relationship with us to provide goods or servicesWe only collect the minimum personal data needed to process an order, manage an account or enter into a contract.Without this information we will not be able to conduct business with you. To ensure that we are compliant with HMRC VAT regulations.2
Customer PortalBilling for goods or services provided by phsTo send your VAT invoices by post via the 3rd party or where you have opted in through the MyPHS online portal.2
Credit control and debt managementYou fail to pay for your goods or services within agreed contractual payment terms resulting in credit As we invoice in advance, our credit cycles take care of debt at early stages where we apply sanctions such as debt collection, service suspension and ultimately termination of contracts due to protracted default. All information we use is on contracts or public information generated from Companies House. We do not credit check sole traders or those customers who fall under the Consumer Credit Act. 2,3
Legal or Regulatory obligationsTo satisfy Environment Agency (EA) legal obligations You are a producer of Hazardous waste for which phs issue consignment and destruction notices that may be audited by the Environment Agency (EA).2,3
Employee Information
Recruitment and selectionYou are not a current employee and do not have a contract of employment but have given consent for phs to process and store your data for current or future positions with phsFor applicants, we will use your information: 4
for which you may be suitable
Contractors For contractors, we will use your information: 1,4
Employees (Permanent Full / Part time and Temporary You are an employee of phs and have signed a contract of employment For employees, we will use your information: 1,2,4
Supplier Information
Supplier Request for Information You take part in a Request for Information (RFI) or Request for Proposal (RFP) supplier selection processFor suppliers, we will use your information: 2
Supplier Purchase Order and You submit an invoice for payment for services provided to phs
  • To manage our working relationship and communications to ensure work is carried out efficiently.
  • To report any queries or concerns .
  • For payment of work.
2
Other Personal Data
Site visitors You are a family member of one of our permanent or temporary staffIn order to give you a visitors pass we ask for some basic details about you including your name, email, mobile number and car registration (if you drive to the site). In these instances we do this for compliance with Health & Safety and Fire regulations and ask for your consent to store these details for as long as lawfully required. 3,4

  
     

How do we protect your information?

phs implements industry standard security measures to protect personal information in our own and partner data centres. These cover information that is stored (at rest) and when copied from one system to another (in motion).

Services that are internet facing are further independently checked for all known security risks by accredited security specialists. In general, personal information is only accessible to staff on a need to know basis and appropriate security measures are in place.


Transferring your information overseas

phs consciously selects suppliers that have a European Economic Area (EEA) presence for the storage and maintenance of personal data and information.In a small number of very niche cases data is stored outside the EEA.Any data stored outside the EEA is protected by the EU Model Clauses which are EU-approved standardised contractual clauses.These clauses ensure that any personal data leaving the EEA will be transferred in compliance with EU data-protection laws.These clauses also mean that the third party has adequate security measures and controls in place to protect personal data.

All the personal data we process is processed by our staff or the staff of carefully selected suppliers in the UK or by our Business Intelligence partner Hexaware Plc in Chennai, India. For the purposes of IT hosting and maintenance this information is located on servers within the European Economic Area (EEA).


Social media

We use our social media channels, LinkedIn, Instagram, Facebook, Twitter and YouTube to build brand awareness, promote content and share information through thought leadership pieces, including articles, blogs and videos. We do not monitor our social media channels for subject access requests.

In exceptional circumstances, we do manage customer complaints through some of our channels to maintain the highest quality of customer service.


How long we keep your data

We’ll keep your information for as long as you have a relationship with us. After the relationship ends, we’ll keep it where we have a legitimate interest e.g. to help us respond to queries or complaints, or for compliance with a regulatory or legal obligation such as but not limited to the following legislation which have their own data retention rules

  • Equality Act 2010
  • Employment Rights Act 1996
  • Health and Safety at Work Act 1974
  • Limitation Act 1980
  • National Minimum Wage regulations 1998
  • The Control of Substances Hazardous to Health Regulations 1999 and 2002
  • The Retirement Benefits Schemes (Information Powers) Regulations 1995(SI 1995/3103)
  • The General Data Protection Regulation
  • Companies Act 1985, 1989 and 2006
  • The Income Tax (PAYE) Regulations 2003/2682
  • The Statutory Sick Pay Regulations 2014
  • VAT Act 1994
  • Corporation Tax Act 2010
  • The Environmental Protection (Duty of Care) Regulations 1991
  • The Special Waste Regulations 1996

   

Your rights

You have a number of rights relating to your information e.g.to see what we hold, to ask us to update incorrect or incomplete details, to object to or restrict processing of it, to make a complaint, etc.If you would like a copy of some or all of your personal information, please email dataprotection@phs.co.ukor write to us.Please see the how to contact us section below.

If at any point, you believe the information we process on you is incorrect you can request to see this information and have it corrected or deleted. If you wish to raise a complaint on how we have handled your personal data, you can contact us via email to have the matter investigated – dataprotection@phs.co.uk or by writing to the address below.

If you are not satisfied with our response or believe we are processing your personal data other than in accordance with the law, you can complain to the Information Commissioner’s Office.You can find advice on the ICO’s website [ico.org.uk/sar] and information on their powers and the action they can take [ico.org.uk/action] or call them on 0303 123 1113.

    

Cookies

Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity.

For further information visit www.moreaboutcookies.orgor www.allaboutcookies.org

You can set your browser to not accept cookies and the above websites tell you how to remove cookies from your browser. However, in a few cases some of our website features may not function as a result. For further details please refer to our Cookie Policy.

   

Other websites

Our website https://www.phscompliance.co.uk/ contains links to other websites which are not limited to those listed below. This privacy policy only applies to the phs group website therefore when visiting one of our other websites you should read their respective privacy policies.

     
How to contact us?

Depending on your enquiry, there are a number of ways you can get in touch:

Please contact us if you have any question about our Privacy Notice or information we hold about you:

Mr. David Finlayson
Data Protection Officer
phs Group, Unit B, Western Industrial Estate, Caerphilly, CF83 1XH




Last Updated: 04.06.18

 

Latest News

Our Head of M&E Services on planned maintenance

Our Head of M&E Services on planned maintenance

In the Dec/January 2019 edition of Facilities Management Journal (FMJ) our Head of M&E Services James O'Hare explains how an effective maintenance policy supports client operations while ensuring

Read article
Ready for New Year's Day?

Ready for New Year's Day?

We're not thinking parties or fireworks. Nope, not us. We're thinking about the BS 7671 IET Wiring Regulations 18th Edition taking effect on January 1st 2019. With 21 days to spare, phs Compliance

Read article
Investing in supporting engineers with rugged technology

Investing in supporting engineers with rugged technology

Supporting productivity and communications As part of an ongoing investment in technology, systems and training to support our large field-based engineering base, phs Compliance has completed a

Read article
New apprenticeship programme helps fuel growth

New apprenticeship programme helps fuel growth

phs Compliance continues to expand its engineering apprenticeship programme. We've offered apprenticeship programmes for a few years now, across both engineering and commercial roles. Many of our

Read article

This site uses cookies that enable us to make improvements, provide relevant content, and for analytics purposes. For more details, see our Cookie Policy. By clicking Accept, you consent to our use of cookies.