Privacy Policy

1. Introduction

REDAS Engineering & Construction (REDAS LTD), Company Number 14640012, registered in England and Wales, is the data controller responsible for personal data collected through this website. We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Our registered office is at Dyson Court, Gillette Close, Stafford, ST18 0LQ, United Kingdom.

2. Data We Collect

We may collect and process the following categories of personal data:

• Contact data: Name, email address, telephone number, company name — collected via our contact form or service request form.
• Application data: Name, contact details, work history, CV/resume, and cover message — collected when you apply for a role.
• Usage data: IP address, browser type, pages visited, and timestamps — collected automatically via standard web server logs or analytics tools.
• Communication data: Records of correspondence when you contact us by email or via our website forms.

3. How We Use Your Data

We use your personal data for the following purposes and on the following legal bases:

• To respond to enquiries: Legitimate interests / Performance of a contract.
• To process job applications: Legitimate interests in recruitment.
• To process service requests: Pre-contractual actions at your request.
• To improve and maintain our website: Legitimate interests.
• To comply with legal obligations: Legal obligation.

4. CV and Application Processing

Your CV/resume is stored securely in our database and is accessible only to our authorised recruitment personnel, who are notified by email when a new application is received. It is retained alongside your application metadata (name, contact details, job applied for, status) for recruitment purposes.

5. Third-Party Processors

We use the following third-party services which may process your data:

• Supabase (PostgreSQL): Backend application data storage. Subject to Supabase's Data Processing Agreement.
• Vercel: Website hosting and deployment platform.
• Sanity.io: Headless CMS for public website content.
• Resend: Transactional email processing. Your data is transmitted to Resend to deliver communications.

All processors are contractually bound to protect your data and are GDPR-compliant.

6. Cookies

This website uses strictly necessary cookies to function properly. We may also use analytics cookies to understand how visitors use our site. You can manage your cookie preferences through our cookie settings, where applicable. We do not use marketing or advertising cookies without appropriate consent.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. These include HTTPS encryption, hashed passwords, JWT-based session authentication, and access controls restricted to authorised personnel.

8. Data Retention

Contact enquiry records are retained for up to 2 years from last contact. Service request records are retained for up to 6 years in line with commercial and contractual obligations. Application metadata is retained for up to 12 months unless a longer hiring process requires otherwise.

9. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Data portability where applicable
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

10. Contact

To exercise any of your rights or raise a privacy concern, please contact us at: enquiries@redas.co.uk

REDAS Engineering & Construction (REDAS LTD)
Stafford Business Village, Stafford Technology Park, ST18 0TW, United Kingdom.