Privacy
Privacy notice
How Shams Environmental (“we”) handles personal data under UK GDPR and the Data Protection Act 2018.
Controller
Shams Environmental, 10 Wraysbury Drive, Basildon, Essex, SS15 4HY (Sole trader). Contact: [email protected] or 07859 739234.
What we process
- Contact form: name, email, phone (optional), site address and building type (optional), message. Delivered via transactional email to our enquiry inbox; IP used only for short-window rate limiting.
- Survey records: client and site details, inspection data, photographs, laboratory certificates, and issued report PDFs needed to deliver asbestos surveys.
- Staff portal: Staff credentials (Argon2id), optional TOTP secrets, and send-log metadata.
- Photos: GPS EXIF may be retained on server originals; GPS is stripped from PDF embeds and display derivatives.
Retention
Retention periods for the categories of personal data we hold are available on request. Contact [email protected] if you need details for your engagement.
Processors / hosting
We use transactional email and object storage to run the portal and contact form. Prefer UK/EU hosting; exact regions and named processors depend on the live deployment. Ask [email protected] for the current processor list for your engagement. International transfers, if any, use an appropriate UK transfer mechanism.
Your rights
You may request access, rectification, erasure, restriction, or objection where the law allows, and complain to the Information Commissioner’s Office at ico.org.uk.
