Spanish Slate Quarries Ltd (SSQ) is committed to protecting your privacy and ensuring compliance with applicable data protection laws, including:
- UK GDPR
- EU GDPR (where applicable)
- Data Protection Act 2018
- Privacy and Electronic Communications Regulations (PECR),/li>
- ISO 27001, ISO 9001, Cyber Essentials, and NIST CSF standards. (adherence not certified)
This notice explains how SSQ collects, uses, stores, and protects your personal data when you interact with our websites, products, and services.
1. Data Controller
Controller: Spanish Slate Quarries Ltd (SSQ)
Address: 301 Elveden Road, Park Royal, London NW10 7SS
Email: info@ssq.co.uk
Phone: 020 8961 7725
Data Protection Lead: Murad El-Helw.
EU Representative: Murad El-Helw
2. Categories of Personal Data
We may collect:
- Identity and contact details (name, address, email, phone number)
- Technical and device data (IP address, browser type)
- Customer and transactional data
- Supplier and contractor data
- CPD registration and attendance data
- Website analytics and cookie-related data
- Information provided during product demonstrations or meetings (recordings/transcriptions with prior consent)
3. How We Collect Data
- Website forms (e.g., www.ssqgroup.com)
- Email, phone, LinkedIn, social media
- Surveys, tradeshows, onsite visits
- CPD registration
- Supplier documentation
- Analytics tools
4. Lawful Bases for Processing
- Contract
- Legal obligation
- Legitimate interests
- Consent (where required under PECR)
5. How We Use Your Data
Your personal data will only be processed when we have a lawful basis. We use it to:
- Respond to enquiries and fulfil orders
- Manage supplier relationships
- Administer CPD events
- Improve websites and services
- Send newsletters and promotional emails (with opt-out options)
- Conduct market research
- Comply with legal obligations
6. Retention
Data is retained in line with legal, financial, and contractual requirements:
- Customer data: 6 years
- CPD data: 3 years unless renewed
- Supplier data: Contract term + 3 years
- Recruitment data: 12 months (unsuccessful), 7 years post-employment (successful)
- Analytics: per cookie schedule
After retention periods expire, data is securely deleted. If technical limitations prevent full deletion, SSQ applies measures to prevent further use.
7. Cookies & IP Addresses
We collect IP addresses and use cookies for:
- Website performance and personalization
- Session management for SSQ Dashboard users You can refuse cookies via browser settings, but some features may not function.
8. Data Sharing
We do not sell your data. We may share it with:
- IT service providers
- Delivery partners
- Professional advisers
- In case of legal obligations or business transfers All third parties are bound by GDPR-compliant agreements.
9. International Transfers
Where data is transferred outside the UK/EU:
- SSQ uses Standard Contractual Clauses (SCCs), UK Addendum, or IDTA.
- Copies of SCCs available upon request.
10. Security Measures
- Multi-Factor Authentication (MFA)
- Role-Based Access Control (RBAC)
- Encryption (in transit and at rest)
- Secure backups and configuration
- Supplier security reviews
11. Your Rights
You have rights under GDPR:
- Access
- Rectification
- Erasure
- Restriction
- Portability
- Objection To exercise these rights, contact us at info@ssq.co.uk
12. Updates
This notice may be updated periodically. The latest version will be available on our website.
Contact
Email: info@ssq.co.uk
Phone: 020 8961 7725
ICO Registration: ZC101530