phs Compliance Limited is a subsidiary business of Personnel Hygiene Services Limited and is part of the Specialist business division contained within the phs Group.
phs Group is the leading hygiene services provider in the UK, Spain and Ireland. With over 90,000 customers over 300,000 locations, we meet the needs of up to 100 million people.Who we are:
Healthcare, Washroom, Floorcare Hygiene and Specialist are our business. We stay on top of all the legislative developments affecting your industry to provide you with expert advice on what you need to do to ensure that your business is legally compliant.
Although our customers are primarily businesses, we do collect and use personal information relating to individuals as part of our day-to-day activities.This is generally in order to provide services directly to individuals, or when we work with individuals in our customer or supplier businesses.We also collect personal information about individuals who use our websites, wish to receive information about our services or who wish to work for us.
In this notice “phs”, “we”, “us” and “our” means Personnel Hygiene Services Limited and its UK subsidiaries. The names of the subsidiaries, as stated on the Data Protection Register held by the Information Commissioner’s Office, are Direct365online Limited, phs Compliance Limited and Teacrate Rentals Limited. Personnel Hygiene Services Limited also uses the following trading names: phs Washrooms, phs Floorcare, phs Wastemanagement, phs Besafe, phs Greenleaf, phs Wastekit, Warner Howard, Syncros and Matta.
This privacy notice explains in the following sections how we use any personal information we collect about you when you use our website.
|What lawful basis do we use to process personal information about you? |
|Why we need your personal information and how will we use it?|
|How do we protect your information?|
|Transferring your information overseas|
|How long we keep your data|
|How to contact us?|
|Ref||Lawful Basis to process personal data|
|1||Processing is necessary for phs and its subsidiaries to carry out their services or deliver their products, to defend ourselves in legal claims and to respond to queries from regulators or legislators; except where it would negatively impact on the fundamental rights and freedoms of the individual (data subject), or where their personal data requires protection, particularly if the individual is a child.|
|2||Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.|
|3||Processing is necessary for compliance with a legal obligation to which the data controller is subject.|
|4||The data subject has given consent to the processing of his or her personal data for one or more specific purposes.|
To provide an outstanding service to our customers, employees and suppliers, we collect and process information in the following ways.
|Service Provided||Scenario||How will we use your information||Lawful Basis Ref|
|Marketing, Lead and Prospect Customer Information|
|Informing our current and prospective customers of phs products and services||Request a quotation for our products, services or place an order by corresponding with us by telephone, email or through our website (website usage information is collected using cookies)||For customers and prospective customers, we will use your information to provide any products and services you’ve requested and for other purposes, for example: ||1|
|Marketing to prospective or current customers||We also purchase contact information from a third-party data seller, Market Location Limited.||Data is used to generate business leads and to contact prospective customers who may become opportunities. phs will not share your information for marketing purposes with companies outside our group.||1|
|Current Customer Information|
|Sale Orders Processing||You purchase one off or ad-hoc goods from us over the phone or our web sites|| ||1,2 and 4|
|Contractual Business forprospective or current customers||You enter into a contractual relationship with us to provide goods or services||We only collect the minimum personal data needed to process an order, manage an account or enter into a contract.Without this information we will not be able to conduct business with you. To ensure that we are compliant with HMRC VAT regulations.||2|
|Customer Portal||Billing for goods or services provided by phs||To send your VAT invoices by post via the 3rd party or where you have opted in through the MyPHS online portal.||2|
|Credit control and debt management||You fail to pay for your goods or services within agreed contractual payment terms resulting in credit |
control and debt management processes
|As we invoice in advance, our credit cycles take care of debt at early stages where we apply sanctions such as debt collection, service suspension and ultimately termination of contracts due to protracted default. All information we use is on contracts or public information generated from Companies House. We do not credit check sole traders or those customers who fall under the Consumer Credit Act.||2,3|
|Legal or Regulatory obligations||To satisfy Environment Agency (EA) legal obligations||You are a producer of Hazardous waste for which phs issue consignment and destruction notices that may be audited by the Environment Agency (EA).||2,3|
|Recruitment and selection||You are not a current employee and do not have a contract of employment but have given consent for phs to process and store your data for current or future positions with phs||For applicants, we will use your information: ||4|
|for which you may be suitable|
|Contractors||For contractors, we will use your information: ||1,4|
|Employees (Permanent Full / Part time and Temporary||You are an employee of phs and have signed a contract of employment||For employees, we will use your information: ||1,2,4|
|Supplier Request for Information |
|You take part in a Request for Information (RFI) or Request for Proposal (RFP) supplier selection process||For suppliers, we will use your information: ||2|
|Supplier Purchase Order and |
|You submit an invoice for payment for services provided to phs|| ||2|
|Other Personal Data|
|Site visitors||You are a family member of one of our permanent or temporary staff||In order to give you a visitors pass we ask for some basic details about you including your name, email, mobile number and car registration (if you drive to the site). In these instances we do this for compliance with Health & Safety and Fire regulations and ask for your consent to store these details for as long as lawfully required.||3,4|
phs implements industry standard security measures to protect personal information in our own and partner data centres. These cover information that is stored (at rest) and when copied from one system to another (in motion).
Services that are internet facing are further independently checked for all known security risks by accredited security specialists. In general, personal information is only accessible to staff on a need to know basis and appropriate security measures are in place.
phs consciously selects suppliers that have a European Economic Area (EEA) presence for the storage and maintenance of personal data and information.In a small number of very niche cases data is stored outside the EEA.Any data stored outside the EEA is protected by the EU Model Clauses which are EU-approved standardised contractual clauses.These clauses ensure that any personal data leaving the EEA will be transferred in compliance with EU data-protection laws.These clauses also mean that the third party has adequate security measures and controls in place to protect personal data.
All the personal data we process is processed by our staff or the staff of carefully selected suppliers in the UK or by our Business Intelligence partner Hexaware Plc in Chennai, India. For the purposes of IT hosting and maintenance this information is located on servers within the European Economic Area (EEA).
We use our social media channels, LinkedIn, Instagram, Facebook, Twitter and YouTube to build brand awareness, promote content and share information through thought leadership pieces, including articles, blogs and videos. We do not monitor our social media channels for subject access requests.
In exceptional circumstances, we do manage customer complaints through some of our channels to maintain the highest quality of customer service.
We’ll keep your information for as long as you have a relationship with us. After the relationship ends, we’ll keep it where we have a legitimate interest e.g. to help us respond to queries or complaints, or for compliance with a regulatory or legal obligation such as but not limited to the following legislation which have their own data retention rules
You have a number of rights relating to your information e.g.to see what we hold, to ask us to update incorrect or incomplete details, to object to or restrict processing of it, to make a complaint, etc.If you would like a copy of some or all of your personal information, please email firstname.lastname@example.org write to us.Please see the how to contact us section below.
If at any point, you believe the information we process on you is incorrect you can request to see this information and have it corrected or deleted. If you wish to raise a complaint on how we have handled your personal data, you can contact us via email to have the matter investigated – email@example.com or by writing to the address below.
If you are not satisfied with our response or believe we are processing your personal data other than in accordance with the law, you can complain to the Information Commissioner’s Office.You can find advice on the ICO’s website [ico.org.uk/sar] and information on their powers and the action they can take [ico.org.uk/action] or call them on 0303 123 1113.
Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity.
Depending on your enquiry, there are a number of ways you can get in touch:
Please contact us if you have any question about our Privacy Notice or information we hold about you:
Mr. David Finlayson
Data Protection Officer
phs Group, Unit B, Western Industrial Estate, Caerphilly, CF83 1XH
Last Updated: 04.06.18