Privacy Policy
- Introduction
This privacy policy explains how Kingdom Timber Engineering Limited collects, uses, stores and shares personal information.
We respect your privacy and are committed to protecting your personal data. This policy applies when you visit our website, contact us, buy goods or services from us, open or manage a trade account, apply for a job, supply goods or services to us, visit our premises, or otherwise deal with us in the course of our business.
This policy should be read together with any other privacy information we may provide to you when we collect personal data for a specific purpose.
- Who we are
Kingdom Timber Engineering Limited is the controller of your personal data.
In this policy, “we”, “us” and “our” means Kingdom Timber Engineering Limited
Our contact details are:
Company name: Kingdom Timber Engineering Limited
Registered office: Blackadders LLP, 10 Euclid Crescent, Dundee, Scotland, DD1 1AG
Trading address: Unit 2, Buko Business Centre, Ashley Road, Glenrothes, Fife KY6 2SE
Company number: SC344021
Email:
Telephone: 01592 772779
If you have any questions about this policy or how we handle personal data, please contact the Data Protection Officer (DPO) using the details above.
- The personal data we collect
The personal data we collect depends on your relationship with us. We may collect and use the following types of information:
Identity Data
This may include your name, title, business name, job title, date of birth, account username or similar identifier.
Contact Data
This may include your billing address, delivery address, email address, telephone number and business contact details.
Financial Data
This may include bank details, payment details, card payment information, credit account information and information needed to assess or manage trade credit.
Transaction Data
This may include details of goods or services ordered from us, delivery details, invoices, payments, account history, returns, complaints and customer service records.
Trade Account and Credit Data
Where you apply for or operate a trade account, we may collect information about you, your business, its owners, directors, partners or guarantors. We may also receive information from credit reference agencies, fraud prevention agencies, Companies House, the Electoral Register and other public or commercial sources.
Technical and Website Data
When you visit our website, we may collect technical information such as your IP address, browser type, device information, operating system, website usage and cookie preferences.
Marketing and Communications Data
This may include your preferences for receiving marketing from us, your communication preferences, records of email or telephone communications, feedback and survey responses.
Supplier and Business Contact Data
If you are a supplier, contractor, professional adviser or other business contact, we may hold your name, role, employer, business contact details and records of our dealings with you.
Recruitment and Employment Data
If you apply for a role with us, we may collect your CV, application form, employment history, qualifications, references, right to work information and any other information you provide during the recruitment process. If you work for us, we may also process payroll, pension, tax, absence, performance, training and employment records.
CCTV and Site Security Data
If you visit our premises, your image may be captured by CCTV. CCTV may capture images of employees, customers, visitors, contractors, suppliers and members of the public who attend our premises.
We do not normally collect special category personal data, such as health information, religious beliefs, ethnicity, biometric data or trade union membership, unless this is necessary for a specific lawful purpose, such as employment, recruitment, legal obligations or reasonable adjustments.
- How we collect personal data
We may collect personal data in the following ways:
- directly from you when you contact us, place an order, complete a form, open a trade account, apply for a job, sign up to marketing, request a quote or correspond with us; from your employer, business, agent, contractor or representative; from credit reference agencies, fraud prevention agencies and publicly available sources; from payment providers, delivery providers, IT providers and other service providers; automatically through our website, including through cookies and similar technologies; from limited CCTV systems used at our premises; from Microsoft 365, Sage, Worldpay, payroll providers and other business systems we use; from Companies House, the Electoral Register, trade directories, professional networks and other public sources.
- How we use your personal data
We will only use your personal data where the law allows us to do so. We may use your information for the following purposes:
|
Purpose |
Type of data |
Lawful basis |
|
To provide quotations, process orders and deliver goods or services |
Identity, Contact, Transaction, Financial |
Performance of a contract; legitimate interests |
|
To open, assess and manage trade credit accounts |
Identity, Contact, Financial, Trade Account and Credit Data |
Legitimate interests; performance of a contract; legal obligation |
|
To carry out credit checks, identity checks, fraud checks and account monitoring |
Identity, Contact, Financial, Trade Account and Credit Data |
Legitimate interests; legal obligation |
|
To manage payments, invoices, statements and debt recovery |
Identity, Contact, Financial, Transaction |
Performance of a contract; legitimate interests; legal obligation |
|
To process card payments and other payments |
Identity, Contact, Financial, Transaction |
Performance of a contract; legal obligation; legitimate interests |
|
To manage payroll, pensions, tax reporting and employment administration |
Identity, Contact, Financial, Recruitment and Employment Data |
Performance of a contract; legal obligation; legitimate interests |
|
To manage our relationship with customers, suppliers and business contacts |
Identity, Contact, Transaction, Marketing and Communications |
Legitimate interests; performance of a contract |
|
To respond to enquiries, complaints and feedback |
Identity, Contact, Transaction, Marketing and Communications |
Legitimate interests; performance of a contract |
|
To send relevant business updates, offers or marketing communications |
Identity, Contact, Marketing and Communications, Technical |
Consent where required; legitimate interests where permitted |
|
To operate CCTV for safety, security, crime prevention and incident investigation |
CCTV and Site Security Data |
Legitimate interests; legal obligation where applicable |
|
To administer and protect our business, website, IT systems and premises |
Identity, Contact, Technical, Website Data, CCTV and Site Security Data |
Legitimate interests; legal obligation |
|
To comply with tax, accounting, legal, regulatory and insurance obligations |
Identity, Contact, Financial, Transaction, Recruitment and Employment Data |
Legal obligation; legitimate interests |
|
To process job applications and manage recruitment |
Identity, Contact, Recruitment Data |
Legitimate interests; legal obligation; taking steps before entering into a contract |
- Trade accounts and credit checks
If you apply for a trade account, credit account or credit facility, we may carry out checks to assess creditworthiness, verify identity, prevent fraud and manage financial risk.
This may involve sharing your personal data with credit reference agencies, fraud prevention agencies and other organisations involved in credit checking, account management and debt recovery.
The information we receive may include public information, credit history, financial information, court judgments, insolvency information, fraud prevention data and information from the Electoral Register.
We may use this information to:
- assess whether to offer or continue credit terms; verify the information provided to us; manage your account; prevent fraud, money laundering and other unlawful activity; trace and recover debts; protect our business and customers.
Credit reference agencies may keep a record of searches carried out. Where you make a joint application, act as a guarantor, or have a financial link with another person, your records may be linked with theirs.
- CCTV
We use limited CCTV at our premises for safety, security, crime prevention, incident investigation and the protection of people, property, vehicles, stock and equipment.
CCTV may capture images of employees, customers, visitors, contractors, suppliers and members of the public who attend our premises.
Access to CCTV footage is restricted to authorised personnel and, where necessary, our security providers, insurers, legal advisers, law enforcement agencies or regulators.
CCTV recordings are normally kept only for a limited period unless they are needed for an investigation, insurance claim, legal claim, complaint, disciplinary matter or other legitimate business purpose.
- Business systems and service providers
We use third-party systems and service providers to help operate our business. These may include:
- Microsoft 365 for email, document storage, calendars, collaboration and general business administration; Sage for accounting, bookkeeping, invoicing, payroll or related financial administration; Worldpay or other card processing providers for processing card payments; external payroll providers for payroll processing, pension administration, payslips, tax reporting and employment-related payments; IT, hosting, backup, cybersecurity and software support providers.
These providers may process personal data on our behalf. We require them to protect personal data and only use it for the purposes for which we have engaged them, unless they are legally required to do otherwise.
- Marketing
We may contact you with information about our products, services, offers, news or events where the law allows us to do so.
You may receive marketing from us if you have requested information, bought goods or services from us, opened an account with us, or otherwise provided your details and have not opted out.
Where consent is required, we will ask for your consent before sending marketing. You can withdraw consent or opt out of marketing at any time by using the unsubscribe link in our emails or by contacting us.
We will not sell your personal data to third parties for their own marketing purposes.
- Cookies and website use
Our website may use cookies and similar technologies to operate the website, improve functionality, understand how visitors use the site and support marketing or analytics.
Some cookies are necessary for the website to work. Other cookies, such as analytics or advertising cookies, will only be used where consent is required and has been given.
You can usually control cookies through your browser settings. Blocking some cookies may affect how the website works.
Where we use a separate cookie policy or cookie preference tool, that information should be read together with this privacy policy.
- Who we share personal data with
We may share personal data with the following parties where necessary:
- Companies within our group or associated businesses; IT, hosting, software and system administration providers; Microsoft 365, Sage, Worldpay and other business system providers; payroll providers, pension providers and employment benefit providers; payment processors, banks and finance providers; delivery, haulage and logistics providers; credit reference agencies and fraud prevention agencies; CCTV and security system providers; debt collection agencies and legal advisers; accountants, auditors, insurers, bankers and other professional advisers; HM Revenue & Customs, regulators, courts, law enforcement and public authorities; suppliers, subcontractors and service providers involved in fulfilling orders or providing services; third parties involved in a business sale, purchase, merger, restructuring or transfer of assets.
We require service providers to protect personal data and to use it only for the purposes we have instructed, unless the law allows or requires otherwise.
- International transfers
We do not routinely transfer personal data outside the United Kingdom.
Some of the systems and service providers we use may process or store personal data outside the UK, or may allow support access from outside the UK. Where this happens, we will take steps to ensure that appropriate safeguards are in place, such as adequacy regulations, approved contractual safeguards or another lawful transfer mechanism under data protection law.
- Data security
We use appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, misuse, alteration or disclosure.
Access to personal data is limited to employees, workers, contractors and service providers who need it for business purposes. Those individuals and organisations are required to keep personal data confidential.
We also have procedures to deal with suspected personal data breaches and will notify affected individuals and the Information Commissioner’s Office where we are legally required to do so.
- How long we keep personal data
We will only keep personal data for as long as reasonably necessary for the purposes for which it was collected.
In many cases, we keep customer, supplier, accounting, tax and transaction records for up to six years after the end of the relevant relationship or transaction, unless a longer period is required for legal, regulatory, insurance, dispute or debt recovery reasons.
Payroll, pension and employment records may be kept for the period required by tax, employment, pension, accounting and legal rules.
CCTV recordings are normally kept for a short period unless the footage is needed for an investigation, accident, insurance claim, legal claim, complaint, disciplinary matter or other legitimate purpose.
Recruitment records for unsuccessful applicants are usually kept for [insert period, e.g. 6 or 12 months] unless we have a lawful reason to keep them for longer or you agree that we may keep your details for future opportunities.
Where personal data is no longer needed, we will securely delete it, anonymise it or put it beyond active use.
- Your rights
Under data protection law, you may have the right to:
- request access to the personal data we hold about you; ask us to correct incomplete or inaccurate personal data; ask us to delete personal data in certain circumstances; object to our use of your personal data in certain circumstances; ask us to restrict how we use your personal data; ask us to transfer certain personal data to you or another organisation; withdraw consent where we rely on consent; object to direct marketing at any time.
If you wish to exercise any of these rights, please contact us using the details in section 2.
We may need to ask for information to confirm your identity before responding to a request. We will normally respond within one month, although this may take longer where a request is complex or you have made multiple requests.
You will not usually have to pay a fee to exercise your rights. However, we may charge a reasonable fee or refuse to comply where a request is clearly unfounded, repetitive or excessive.
- Complaints
If you are unhappy with how we use your personal data, please contact us first so that we can try to resolve your concern.
You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection matters.
ICO website: www.ico.org.uk
ICO telephone: 0303 123 1113
- Changes to this policy
We may update this privacy policy from time to time. The latest version will be available on our website or on request.
This policy was last updated on 1st June 2026
