BDK INTERIORS LTD
Privacy Policy
Last updated: 7 October 2026
This policy explains how BDK Interiors Ltd collects, uses, stores and protects personal information. It applies to our clients and their contacts, homeowners, principal contractors, suppliers, subcontractors and operatives, job applicants, and visitors to our website. We are committed to handling personal information fairly, lawfully and securely, in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Data (Use and Access) Act 2025.
1. Who we are
BDK Interiors Ltd is the “controller” of the personal information described in this policy. This means we decide how and why it is used.
BDK Interiors Ltd
Registered in England and Wales, company number 13894902
Registered office: Sovereign Chambers, 46 Park Place, Leeds, LS1 2RY
ICO registration number:
Data protection contact: Bradley Kittrick, Director
Email: brad@bdkinteriors.co.uk | Phone: 0113 | Web: www.bdkinteriors.co.uk
We are not required to appoint a Data Protection Officer. Any questions about this policy or your information should be sent to the contact above.
2. The information we collect
We only collect the information we need. What we hold depends on how you deal with us.
Who
Information we may hold
Clients, principal contractors and their staff
Name, job title, company, work email, phone number, site addresses, correspondence, orders, valuations, invoices and payment records
Homeowners and private clients
Name, home address, phone, email, details of the works, access arrangements (such as key-holding or alarm codes), photographs of the property, payment details and correspondence
Subcontractors and operatives
Name, contact details, date of birth, National Insurance number, UTR and CIS verification status, bank details for payment, emergency contact, CSCS, IPAF, PASMA and other training cards and certificates, right-to-work documents, site induction and sign-off records, accident and near-miss reports, and DBS check results where required
Job applicants
CV, contact details, employment history, qualifications and cards, references and interview notes
Suppliers
Names and business contact details of your staff, orders and payment records
Website visitors and enquirers
Information you give us through enquiry forms or email, and technical data such as IP address, browser type and pages visited (see section 11, Cookies)
We mostly collect information directly from you. We may also receive it from principal contractors or clients (for example, site contacts or induction requirements), from accreditation bodies such as SafeContractor, from card schemes when we check a card is valid, from HMRC when we verify a subcontractor under CIS, from referees, and from DBS umbrella bodies.
3. How we use your information and our lawful basis
We must have a lawful basis for each use of personal information. The table below sets out the main uses and the basis we rely on.
What we use it for
Lawful basis
Preparing quotes and tenders, and entering into and carrying out contracts
Contract, or steps taken at your request before entering into a contract
Managing projects: site access, programmes, RAMS, inductions and handovers
Contract; legitimate interests in running projects safely and efficiently
Invoicing, payments, CIS deductions and keeping accounts
Contract; legal obligation (tax and company law)
Checking operatives hold valid cards, training and right to work
Legal obligation; legitimate interests in meeting client and site requirements
Health and safety: accident reports, RIDDOR reporting, emergency contacts
Legal obligation; vital interests in an emergency
DBS checks for work in schools, nurseries and healthcare settings
Legitimate interests and legal obligation, with the additional conditions in section 4
Maintaining accreditations (e.g. SafeContractor) and insurance
Legitimate interests; legal obligation where applicable
Responding to enquiries from our website, email or phone
Legitimate interests; steps taken at your request before entering into a contract
Recruiting staff and engaging subcontractors
Steps taken at your request before entering into a contract; legitimate interests
Taking photographs of completed work for our portfolio, website and social media
Legitimate interests for photos with no identifiable people or private addresses; consent for photos of private homes or identifiable people
Sending business updates to existing business contacts
Legitimate interests (you can opt out at any time)
Handling disputes, claims and legal advice
Legitimate interests; legal obligation
Where we rely on legitimate interests, we have considered whether those interests are outweighed by your rights and freedoms. Where we rely on consent, you can withdraw it at any time by contacting us. This will not affect anything we did before you withdrew it.
4. Sensitive information and DBS checks
Some information needs extra protection. We only collect it where necessary:
• Health information, such as accident and injury records, or a medical condition an operative tells us about so they can work safely. We use this to meet our health and safety and employment obligations.
• Criminal record information from DBS checks. Some of our clients, including schools, nurseries and healthcare providers, require operatives on their sites to have been DBS checked. We only request DBS checks where the role requires it, we keep the minimum information needed (usually the certificate number, date of issue and whether it was satisfactory), and we do not keep copies of certificates longer than necessary.
We process this information under the conditions set out in Schedule 1 of the Data Protection Act 2018, including employment, health and safety, and safeguarding of children and individuals at risk. We hold an appropriate policy document explaining how we protect this information.
5. Who we share information with
We do not sell personal information. We share it only where necessary, with:
• Principal contractors and clients, for site access, inductions, RAMS, card and DBS confirmation, and project records.
• Subcontractors working with us on a project, where they need contact or site details to do the work.
• HMRC, for CIS verification, tax and payroll.
• Our accountants, bank, insurers and professional advisers, such as solicitors.
• Accreditation and card schemes, such as SafeContractor and CSCS, to maintain accreditation or check cards.
• DBS umbrella bodies, to carry out DBS checks.
• IT and software providers who host our email, files, accounts and website. They act on our instructions and must keep the information secure.
• The Health and Safety Executive, the police or other authorities, where we are legally required to.
• A buyer or successor if all or part of our business is sold or restructured.
6. Transfers outside the UK
Some of our software providers may store data outside the UK. Where this happens, we make sure appropriate safeguards are in place, such as transfers to countries the UK recognises as providing adequate protection, or the use of approved contract clauses.
7. How long we keep information
We keep personal information only for as long as we need it. Typical periods are:
Type of record
How long we keep it
Contracts, project files, valuations and invoices
6 years after the end of the contract (12 years where a contract is executed as a deed)
Accounting, tax and CIS records
6 years from the end of the financial year they relate to
RAMS, inductions and site sign-off records
6 years after the project ends
Accident and RIDDOR records
At least 3 years, and longer where a claim is possible
Operative cards, training and right-to-work records
While the person works with us, then 2 years (right-to-work records), or 6 years where needed for contract or insurance records
DBS information
Certificate details kept only while relevant to the work; copies of certificates deleted within 6 months
Unsuccessful job applications
6 months after the decision
Website enquiries that do not lead to work
2 years
Portfolio photographs
Until you ask us to remove them, where based on consent
We may keep information longer if we need it to deal with a claim or are required to by law.
8. Keeping information secure
We use appropriate measures to protect personal information, including password-protected and access-controlled systems, multi-factor authentication where available, secure storage of paper records, and limiting access to people who need it. If a personal data breach is likely to put you at high risk, we will tell you, and we will report it to the ICO where required.
9. Your rights
You have the following rights over your personal information:
• Access: ask for a copy of the information we hold about you.
• Rectification: ask us to correct information that is wrong or incomplete.
• Erasure: ask us to delete your information in certain circumstances.
• Restriction: ask us to limit how we use your information.
• Objection: object to us using your information on the basis of legitimate interests, or for direct marketing at any time.
• Portability: ask us to transfer information you gave us to another organisation, where it is processed by automated means on the basis of consent or contract.
• Withdraw consent: where we rely on consent, you can withdraw it at any time.
To use any of these rights, contact us using the details in section 1. We will respond within one month, and there is normally no charge. We may need to confirm your identity first. Some rights do not apply in every case, for example where we must keep records by law. If so, we will explain why.
We do not use automated decision-making or profiling that has legal or similarly significant effects on you.
10. Complaints
If you are unhappy with how we have handled your personal information, please tell us first so we can put it right. You can complain by email to brad@bdkinteriors.co.uk, by phone on [phone number], or in writing to our registered office at Sovereign Chambers, 46 Park Place, Leeds, LS1 2RY. We will acknowledge your complaint within 30 days, look into it without undue delay, keep you updated, and tell you the outcome.
If you are still not satisfied, you can complain to the Information Commissioner’s Office (ICO): www.ico.org.uk, telephone 0303 123 1113.
11. Cookies and our website
Our website uses cookies that are strictly necessary for it to work. [If you use analytics (e.g. Google Analytics) or other non-essential cookies, say so here and explain that they are only set with consent through the cookie banner.] You can control cookies through your browser settings.
Our website may link to other sites, such as social media pages. We are not responsible for how those sites handle your information, so please read their privacy policies.
12. Changes to this policy
We review this policy regularly and may update it. The latest version will always be at www.bdkinteriors.co.uk/privacy-policy, with the date it was last updated at the top.