We are the controller of your personal data. For more information about controllers and their responsibilities, please refer to the UK data protection principles, definitions, and key terms.

This Privacy Notice explains how we collect, use, store, and protect your personal information. It covers:

• Contact Details
• What Information We Collect, Use, and Why
• Lawful Bases and Your Data Protection Rights
• Where We Get Personal Information From
• How Long We Keep Information
• Who We Share Information With
• How to Complain

---

Contact Details

Email: elcraftuk@outlook.com

---

What Information We Collect, Use, and Why

Providing Services and Goods

We collect and use the following information to provide our services and goods, including delivery:

• Names and contact details
• Addresses
• Date of birth
• Payment details (including card or bank information for transfers and direct debits)
• Health and safety information
• Account information
• Website user information (including user journeys and cookie tracking)
• Identification documents
• Information relating to compliments or complaints
• ECS card numbers, including start and expiry dates
• Public Liability Insurance numbers, including policy start and expiry dates

Complying with Legal Requirements

We collect or use the following information to comply with legal obligations:

• Name
• Contact details
• Identification documents
• Financial transaction information
• Health and safety information
• Any other personal information required to comply with legal obligations

Recruitment Purposes

For recruitment, we may collect:

• Contact details (such as name, address, telephone number, or personal email address)
• Date of birth
• National Insurance number
• Copies of passports or other photographic identification
• Employment history
• Employment references
• Secondary employment details
• Right-to-work information
• Security clearance details (including basic or enhanced security checks)

Queries, Complaints, and Claims

To manage queries, complaints, or claims, we may collect:

• Names and contact details
• Address
• Payment details
• Account information
• Purchase or service history
• Relevant information from previous investigations
• Correspondence

---

Lawful Bases and Data Protection Rights

Under UK data protection law (UK GDPR), we must have a lawful basis for collecting and using your personal information.

The lawful basis we rely on may affect the rights available to you. Your rights include:

Right of Access

You have the right to request copies of the personal information we hold about you. You may also request information about where your personal information came from and who we share it with. Certain legal exemptions may apply.

Right to Rectification

You have the right to request that inaccurate or incomplete personal information is corrected.

Right to Erasure

You have the right to request that we delete your personal information where applicable.

Right to Restrict Processing

You have the right to request that we limit how your personal information is processed.

Right to Object

You have the right to object to the processing of your personal information in certain circumstances.

Right to Data Portability

You have the right to request that your personal information be transferred to another organisation or directly to you where technically possible.

Right to Withdraw Consent

Where we rely on your consent as the lawful basis for processing, you have the right to withdraw that consent at any time.

If you make a request regarding your data protection rights, we will respond without undue delay and, in any event, within one month.

To exercise your rights, please contact us using the details provided above.

---

Our Lawful Bases for Processing Personal Data

Providing Services and Goods

We process personal information based on one or more of the following lawful bases:

• Consent – You have given us permission after receiving all relevant information.
• Contract – Processing is necessary to enter into or fulfil a contract with you.
• Legal Obligation – Processing is necessary for us to comply with legal requirements.

Legal Requirements

• Consent
• Contract
• Legal Obligation

Recruitment Purposes

• Consent
• Contract
• Legal Obligation

Queries, Complaints, and Claims

• Consent
• Contract
• Legal Obligation

---

Where We Get Personal Information From

We collect personal information directly from you.

---

How Long We Keep Information

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements.

Subcontractors and Hired Labour

Once your engagement or employment with ELCraft ends, we retain personnel files, contract details, and associated personal information for five (5) years. This enables us to manage post-contract enquiries, tax reporting, and legal obligations. After this period, the information is securely deleted.

Contractor and Client Communications

Emails and project correspondence are retained only for as long as necessary to manage projects, resolve operational matters, and deal with future project-related enquiries or complaints.

Job Applicants and CVs

Successful Applicants

If your application is successful, your CV and recruitment records will be retained for two (2) years, after which they will be permanently deleted.

Unsuccessful Applicants – Future Opportunities

Where there is potential for future employment opportunities, your CV and application may be retained for one (1) year, provided you give your explicit consent under UK GDPR.

If consent is not provided, your CV will be deleted immediately.

Unsuccessful Applicants – No Future Consideration

If there is no possibility of future employment or consent is not given, your CV will be permanently deleted immediately after the recruitment decision.

---

Who We Share Information With

• Organisations where sharing is necessary for safeguarding purposes
• Relevant regulatory authorities
• Professional consultants
• Suppliers and service providers

---

How to Complain

If you have any concerns about how we use your personal information, please contact us using the details provided above.

If you remain dissatisfied after contacting us, you may also submit a complaint to the Information Commissioner’s Office (ICO).

Information Commissioner’s Office

Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

---

Last Updated

13 May 2026