Legal
Privacy Policy & Data Protection Charter
Daridam Construction Limited trading as Daridam Integrated Facility Services is committed to protecting personal data provided by clients, supply-chain partners, subcontractors and website users. This policy explains our processing under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018, including website enquiries, attachments and controlled certificate requests.
Website-form disclosure effective: 27 August 2026.
Data controller identification
- Data ControllerDaridam Construction Limited (t/a Daridam Integrated Facility Services)
- Company Registration Number16351404
- Registered Head Office80 Chelmer Crescent, Barking, IG11 0PZ, London, UK
- Designated Data Officer Emailinfo@daridamgroup.co.uk
- Direct Telephone07412738036
Information we collect & lawful basis for processing
| Information Category | Data Elements Collected | Lawful Basis for Processing (UK GDPR) |
|---|---|---|
| Client & Tender Enquiries | Full name, work email, phone number, company or organisation, enquiry type, project or scope details, consent confirmation and any optional attachment. | Legitimate interests, steps requested before entering a contract, and contract performance where applicable. |
| Certificate Requests | Requested certificate, full name, company name, business email, and optional phone number, department and marketing preference. | Legitimate interests in protecting compliance documents, verifying the requester and fulfilling procurement assurance requests. Marketing is based on separate opt-in consent. |
| Sub-Contractor Onboarding | Company details, director IDs, CIS UTR numbers, CSCS credentials, insurance proofs, Right to Work checks. | Legal Obligation & Contractual Necessity |
| Employee & Operative Data | Biometric site check-in logs, emergency contact details, health & safety inductions, payroll data. | Legal Obligation & Vital Interests |
| Website & Processor Security Data | IP address, browser and device information, request time, referring page and anti-spam signals processed by hosting, embedded verification and form services. | Legitimate interests in service security, fraud prevention and reliable operation. |
Data retention schedules
Client & Commercial Tender Records
Retained for 6 years following contract conclusion to satisfy statutory limitation requirements.
Waste Management & Transfer Records
Non-hazardous Waste Transfer Notes (WTNs) and compliance archives retained for a minimum of 2 years under Environmental Protection legislation.
Sub-Contractor Vetting Documentation
Retained for the duration of the operational relationship plus 6 years for CIS tax and legal verification.
General Website Enquiries & Attachments
Daridam's received copies are retained for up to 24 months from submission unless converted into a tender, contract, legal or compliance record governed by a longer schedule.
Certificate Request Log
Daridam retains the request and fulfilment record for up to 12 months for access assurance and follow-up, unless it becomes part of an active procurement or contractual record. Marketing preference is recorded separately.
Processor Copies & Logs
Web3Forms applies the retention period associated with Daridam's service plan and states a maximum of three years, with infrastructure logs deleted periodically. Daridam will use available processor controls to delete data earlier where appropriate.
Data security, Cyber Essentials & third-party sharing
- NCSC Cyber Essentials Plus SecurityAll digital assets, client portals, and sub-contractor records are stored in encrypted cloud systems assessed under Cyber Essentials and Cyber Essentials Plus standards (via Fig Compliance Ltd / IASME Consortium).
- Website Form Processor — Web3FormsContact and certificate-request forms are submitted by HTTPS to Web3Forms, a Web3Creative service acting as Daridam's processor. Web3Forms processes form fields and attachments for delivery and service operation using infrastructure and subprocessors including Amazon Web Services, Cloudflare and Hetzner. Its anti-spam services may process IP and email data. See the Web3Forms Privacy Policy.
- Controlled SharingPersonal data is not sold. It is shared only with service providers and authorities needed to process the request, deliver contracted work, meet legal obligations or protect the service. This may include Web3Forms/Web3Creative and its infrastructure and anti-spam subprocessors, HMRC, certification or assessment bodies, professional advisers and statutory authorities.
- International Data TransfersWeb3Forms operates from India and uses infrastructure that may process data in multiple regions. Web3Forms states that restricted transfers from the UK/EEA are protected through appropriate safeguards including Standard Contractual Clauses in its Data Processing Agreement. Daridam reviews processor safeguards and does not represent website-form data as UK/EEA-only.
- Certificate HandlingCertificates are not published in the public successor website. A request is recorded, Daridam verifies the named business requester, and accepted requests are manually fulfilled to the supplied business email. Submission does not guarantee release.
Your statutory data rights
Under UK data protection law, you hold rights regarding your personal data managed by Daridam:
Right of Access
Request a formal Subject Access Request (SAR) copy of the personal data we hold about you.
Right to Rectification
Request immediate correction of inaccurate or incomplete personal records.
Right to Erasure ('Right to be Forgotten')
Request deletion of data where processing is no longer required by statutory law or contract execution.
Right to Restrict or Object
Object to data processing based on legitimate interests or direct communications.
To exercise any of these rights, contact our Data Officer directly at info@daridamgroup.co.uk. You also maintain the right to lodge a complaint with the UK Information Commissioner's Office (ICO).
Cookies & digital tracking
The launch website does not intentionally set advertising or behavioural-analytics cookies. Cloudflare hosting, Web3Forms submissions and embedded BlockMark certificate-verification widgets may process essential technical request data such as IP address, browser information and timestamps for security and delivery. Third-party services apply their own essential storage or logging where required. Users can control cookies and site data through their browser settings.