Data Protection Policy

This policy applies to personal data controlled by Hexa Cement Limited and to people who handle that data on our behalf. Responsibility includes deciding why data is needed, limiting access, keeping appropriate records and responding to questions or incidents.

We aim to process personal data lawfully, fairly and transparently; collect it for clear purposes; limit it to what is relevant; keep it accurate where necessary; retain it no longer than justified; protect it appropriately; and remain accountable for those decisions.

Before processing personal data, we identify a purpose and lawful basis. Typical purposes include responding before a contract, administering a contract, complying with law, maintaining security and pursuing proportionate legitimate business interests. New uses should be compatible with the original purpose or supported by a fresh legal basis.

Access is limited according to role and need. We avoid collecting information that is not relevant to an enquiry or business relationship. Reasonable steps are taken to correct important inaccurate information when it is identified.

Requests for access, rectification, erasure, restriction, objection or portability should be sent to guilherme@hexacement.co.uk. We record the request, verify identity where proportionate, consider exemptions and respond within the applicable legal period. We do not use website-enquiry data for solely automated decisions producing legal or similarly significant effects.

Retention is linked to the purpose, legal record-keeping duties, potential disputes and the sensitivity of the data. Information that is no longer justified should be securely deleted or anonymised. Providers handling personal data must be selected with appropriate care and given clear processing instructions.

Security measures may include access controls, supported software, secure communications, backups and staff awareness. Suspected loss, unauthorised access or disclosure should be reported promptly, contained where possible, assessed and documented. We will notify affected people or the Information Commissioner when the legal threshold requires it.

We review this policy as our operations and legal duties develop. Questions about its application should be sent to guilherme@hexacement.co.uk or by post to Unit G13, Constellation Industrial Estate, Ainsworth Road, Manchester, M26 4AD.