1. Purpose of this notice

This privacy policy explains how Amiri Group Limited and its subsidiaries namely Amiri Construction Limited and Amiri Homes Limited (“we”, “us”, “our”) collect, use, store and protect personal data about you, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read the following carefully to understand our practices regarding your personal data and how we will treat it.

This policy replaces previous versions of our privacy notice.

Contact Details

Data Controller: Amiri Group Limited

Address: Eagle Point, Little Park Farm Road, Segensworth, Fareham, Hampshire PO15 5TD

Email: GDPR@amirigroup.co.uk

2. How we may collect personal data

We obtain personal data about you, for example, when:

• You contact us by email, telephone, post, social media or in person; or
• You use our website and online forms
• You accept our cookies and analytics tools
• From third parties and/or publicly available resources (e.g. Companies House)

3. Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity and contact details (name, job title, employer, personal address, email address, telephone number)
• Contract, tender and project-related information
• Payment, banking and tax-related details
• Site access records and health & safety documentation
• Marketing preferences
• Website usage data (IP address, browser type, device information)

We do not intentionally collect special category personal data unless it is necessary to meet legal obligations (such as health and safety requirements).

4. How We Use Your Personal Data

We will only use your personal data where permitted by law and in line with the principles set out in our internal Data Protection Policy.

We commonly process personal data for the following purposes:

• Lawful bases for processing include performance of a contract, compliance with legal obligations, legitimate business interests, and consent where required.
• Site access, health and safety compliance and regulatory requirements
• Contract administration, invoicing and payment processing
• Business communications and stakeholder engagement
• Marketing and business development (where permitted)
• Improving our website and digital services

5. Marketing Communications

We will only send marketing communications where you have consented or where permitted by law. You can opt out at any time by:

• Contacting us at GDPR@amirigroup.co.uk

6. Cookies, Analytics and Cookie Policy

Cookies

Our website uses cookies and similar technologies to distinguish you from other users and to improve your experience when you browse our website. Cookies help us understand how our website is used and enable us to improve functionality, performance and security.

Cookies may include:

• Strictly necessary cookies – required for the operation of our website
• Performance and analytics cookies – used to measure and improve website performance
• Functionality cookies – used to remember preferences

You can set your browser to refuse some or all cookies. Please note that disabling cookies may affect website functionality.

Cookie Banner

When you first visit our website, you will be presented with a cookie banner allowing you to manage your cookie preferences. Non-essential cookies will only be set with your consent.

Analytics

We use Google Analytics to collect anonymised statistical data about website usage. This information helps us understand visitor behaviour and improve our online services. Data is processed in accordance with Google’s privacy standards.

7. Data Sharing

We may share personal data with:

• Professional advisers (legal, financial, insurance)
• Clients, subcontractors and third party suppliers (governed by contracts)
• IT and system service providers
• Regulatory or law enforcement bodies where required by law

8. Data Security

We have put in place commercially reasonable and appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

9. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal, regulatory and contractual obligations.

In line with industry requirements, records may be retained for up to 12 years after project completion to meet regulatory, insurance and contractual obligations. Other business data is retained in accordance with statutory retention periods and our internal data retention schedule.

10. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Request correction or deletion
• Restrict or object to processing
• Withdraw consent
• Request data portability

Requests can be made to: GDPR@amirigroup.co.uk.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

12. Contact

If you have any questions regarding this policy or how we process your personal data, please contact us via the below email.

Email:  GDPR@amirigroup.co.uk

If you make a request and are not satisfied with our response or believe that we are not processing your Personal Data correctly, you have the right to complain to the Information Commissioner’s Office (ICO) – see https://ico.org.uk/.