Privacy Policy

1. Introduction

The Core Group Support Services Ltd ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website thecoregroup.co.uk or use our services.

We are registered in England and Wales. Our registered office is in Birkenhead, Merseyside, UK. We are committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Request a quote or contact us through our website forms
• Subscribe to our newsletter or marketing communications
• Engage our services as a client
• Communicate with us via email, phone, or social media

This information may include:

• Name and job title
• Company name and address
• Email address and telephone number
• Service requirements and preferences
• Billing and payment information

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device, including:

• IP address and browser type
• Operating system and device information
• Pages visited and time spent on pages
• Referring website addresses
• Clickstream data and website navigation patterns

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our facilities maintenance and commercial cleaning services
• Communication: To respond to your enquiries, provide quotes, and send service updates
• Contract Management: To manage our contractual relationship with clients
• Marketing: To send promotional materials about our services (with your consent)
• Legal Compliance: To comply with legal obligations and protect our legal rights
• Website Improvement: To analyze website usage and improve user experience
• Health & Safety: To maintain records required for CHAS and SafeContractor accreditation

4. Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

• Consent: You have given clear consent for us to process your personal data for specific purposes (e.g., marketing communications)
• Contract: Processing is necessary for a contract we have with you, or to take steps at your request before entering into a contract
• Legal Obligation: Processing is necessary for us to comply with the law
• Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, provided your interests and fundamental rights do not override those interests

5. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

• Service Providers: Third-party companies that help us operate our business (e.g., IT support, payment processors, accounting services)
• Professional Advisors: Lawyers, accountants, and other professional advisors
• Regulatory Authorities: When required by law or to protect our legal rights
• Accreditation Bodies: CHAS, SafeContractor, and other industry accreditation organizations

All third parties are required to maintain the confidentiality and security of your personal information and to process it only as we instruct them.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure server infrastructure with SSL encryption
• Regular security assessments and updates
• Access controls and authentication procedures
• Staff training on data protection and confidentiality
• Secure backup and disaster recovery procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Client Records: Retained for 6 years after contract completion (for tax and legal purposes)
• Marketing Data: Retained until you withdraw consent or we determine it's no longer relevant
• Website Analytics: Typically retained for 26 months
• Health & Safety Records: Retained as required by HSE regulations

8. Your Data Protection Rights

Under UK GDPR, you have the following rights:

• Right to Access: You can request copies of your personal data
• Right to Rectification: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data in certain circumstances
• Right to Restrict Processing: You can request that we limit how we use your data
• Right to Data Portability: You can request transfer of your data to another organization
• Right to Object: You can object to processing based on legitimate interests or for direct marketing
• Rights Related to Automated Decision-Making: You have rights regarding automated decisions and profiling

To exercise any of these rights, please contact us at Hello@clearground.co.uk or call 0330 229 6659.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device that help us:

• Remember your preferences and settings
• Understand how you use our website
• Improve website functionality and performance
• Provide relevant content and advertising

You can control cookie settings through your browser. For more information, please see our Cookie Policy.

10. Third-Party Websites

Our website may contain links to third-party websites (such as LinkedIn and Facebook). We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. International Data Transfers

Your personal data is primarily processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new policy on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

15. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):