Hertfordshire Building Control as part of the Broste Rivers Group Ltd takes great care to preserve your privacy and safeguard any personal details you share with us. We aim to be clear when we collect your information and not do anything you wouldn’t reasonably expect. We aim to be transparent about how and why we collect your data and to use it only in ways you would reasonably expect.

This Privacy Policy explains how we collect, use, store, and protect personal information relating to customers, service users, applicants, professional agents, and visitors to our website. This information is used to keep our members, collaborators and customers up-to-date with new developments in the industry, training, newsletters, and service the agreements we hold with them and from time to time to obtain feedback on our activities.

Examples of personal information include your name, address, email address, telephone number, and project-related details.

By using our website or providing us with your personal information, you agree to the terms of this Privacy Policy. Personal information may be collected from

• purchasing services from us
• completion of a survey
• downloading online resources 
• participation in a collaborative activity
• registration for a webinar or event
• participation in a research project
• participation in and provision of feedback from our training and network events
• applying for a job 
• phoning us
• writing to us
• sending us an email

This Privacy Policy does not apply to personal information provided to us via any other website.  Users should be aware that if they access other websites, using the links provided, these are outside our control. If you provide personal information to other companies, the privacy policies of those companies determine how the information is used; therefore, please be aware of the privacy policies of other websites. 

About Us

In this Privacy Policy, references to “we”, “us” or “our” mean to the Broste Rivers Group Ltd, a company incorporated in England and Wales (registered number 09988660) whose registered office is Campus East, Welwyn Garden City, AL8 6AE.

Hertfordshire Building Control provides Building Control and related services across multiple Local Authority areas. Depending on the nature of the service being delivered, the Broste Rivers Group Ltd may act as either a Data Controller or a Data Processor in accordance with UK data protection legislation.

Our Role in Processing Your Data

Hertfordshire Building Control delivers statutory Building Control services on behalf of Local Authorities to customers and construction professionals.

In relation to statutory Building Regulations functions, the relevant Local Authority may act as the Data Controller, and Hertfordshire Building Control processes personal data in order to deliver those services, fulfil legal obligations, and maintain statutory records.

For other services, including enquiries, events, training, and marketing communications, the Broste Rivers Group Ltd may act as the Data Controller.

How we collect information

We may collect personal information whenever you interact with us, including when you:

• submit a Building Regulation application

• purchase or enquire about our services

• complete a form on our website

• download guidance or resources

• register for a webinar, event, or training course

• contact us by phone, email, or post

• participate in surveys, research, or industry activities

• apply for a job via our website

• engage with our social media channels

We may also receive information from third parties such as professional agents, architects, contractors, Local Authorities, or organisations we work with in connection with your project.

We also collect limited technical and usage data when you visit our website.

What information we collect

Depending on your interaction with us, we may collect:

• Name and contact details (address, email, telephone number)

• Job title and organisation (where applicable)

• Project and property information relevant to Building Control services

• Communication records and correspondence

• Event registration details

• Website usage data (via cookies and analytics)

We do not routinely collect special category (sensitive) personal data unless it is necessary for a specific service (for example, where disability adaptations or statutory exemptions apply).

Lawful basis for processing

We process personal data in accordance with UK GDPR and the Data Protection Act 2018. Our lawful bases for processing include:

• Legal obligation  to comply with statutory duties under Building Regulations and related legislation

• Contract  to provide the services you have requested

• Legitimate interests  to manage and improve our services, communications, and website

• Consent –where you have agreed to receive marketing communications or participate in events

Where we rely on consent, you have the right to withdraw it at any time.

 

How we use your information

We are committed to maintaining your privacy in all your interactions with us.  Your data will be held on a secure server, and access within our company will be limited to those who need to know.  You have a right to see any personal information we hold.

We are required by law to protect the public funds that we administer. Information provided to us may be shared with other bodies responsible for auditing or administering public funds, or where undertaking a public function, to prevent and detect fraud.

All Building Control applications are held on a register for a minimum of 15 years.  In some instances, building data, along with personal data about that building, may be archived.

We may use your personal information to:

• Deliver Building Control and related services
• Process and manage applications and inspections
• Communicate with you about your project or enquiry
• Provide guidance, updates, and service information
• Administer events, training, and webinars
• Maintain statutory registers and records
• Respond to feedback, complaints, or enquiries
• Improve our website, services, and customer experience
• Comply with legal and regulatory requirements
• Prevent and detect fraud or unlawful activity

Access to personal data within our organisation is restricted to authorised personnel who require it to perform their duties.

Marketing Communications

We may contact you with relevant service updates, industry news, events, or marketing communications where:

• you have provided consent, or

• you have engaged with our services in a professional capacity, and communications are relevant to those services.

You can opt out of marketing communications at any time by:

• clicking the unsubscribe link in emails, or

• contacting us directly at marketing@hertfordshirebc.co.uk or writing to us at Campus East, Welwyn Garden City, Hertfordshire, AL8 6AE.

We do not sell or share personal data with third parties for their own marketing purposes.

Sharing of your information

We may share personal data where necessary and lawful, including with:

• Local Authorities (in relation to statutory Building Control services)

• Group companies within Broste Rivers Ltd

• IT, payment, and system providers

• Event and training providers

• Professional consultants involved in your project

• Regulatory bodies, auditors, or government organisations, where required by law

All third-party providers are required to handle personal data securely and in accordance with applicable data protection legislation.

If you register to attend any event or training course, to enable you to gain maximum benefit from networking opportunities, on occasion we publish and share a delegate list with registered attendees. If you do not wish your details to be added to the delegate list, please let us know in writing. 

Attendance of any online event or training course using either Zoom or Teams will, as a default, allow other attendees and hosts to be able to identify you as an individual, through showing your video image attached to your name.  We are happy to accommodate the anonymisation of your attendance if this is requested in writing and in advance. All delegates are notified that a webinar will be recorded and provided with an opportunity to not supply consent to be identified.

Broste Rivers Ltd requires all suppliers with access to personal information collected or maintained by Broste Rivers Ltd to demonstrate compliance with the relevant legislation. 

How long we keep your data

We retain personal data only for as long as necessary for the purpose it was collected and to meet legal and regulatory requirements.

In particular:

• Building Control application records are retained in accordance with statutory register requirements (typically a minimum of 15 years)

• Enquiry and correspondence data is retained in line with business and legal obligations

• Marketing data is retained until consent is withdrawn or no longer required

Archived building records may include project-related personal data as part of statutory compliance obligations.

Cookies and Website Usage

When you visit our website, we collect basic anonymised information about how it is used, such as:

• pages visited

• time spent on the site

• referral sources

• device and browser type

This helps us improve website performance and user experience.

Cookies are small text files stored on your device that help websites function effectively. You can control or disable cookies through your browser settings. Restricting cookies may affect website functionality.

Third-party services such as HubSpot, YouTube, LinkedIn, or social media platforms may also place cookies, which are governed by their own privacy policies.

How do I turn cookies off?

Hertfordshire BC will not use cookies to collect personally identifiable information about you. However, if you wish to restrict or block the cookies which are set by us or indeed any other website, you can do this through your browser settings.

These settings can be found in the ‘options’ or ‘preferences’ menu of your browser. In order to understand these settings, the following links may be helpful, otherwise you should use the ‘Help’ option in your browser for more details.

Cookie settings in Internet Explorer
Cookie settings in Firefox
Cookie settings in Chrome
Cookie settings in Safari

Alternatively, you may wish to visit www.aboutcookies.org which contains comprehensive information on how to do this on a wide variety of browsers.

For information on how to do this on the browser of your mobile phone you will need to refer to your handset manual.

Please be aware that restricting cookies may impact on the functionality of many websites.

Your data protection rights

Under UK data protection law, you have the right to:

• Request access to the personal data we hold about you

• Request correction of inaccurate or incomplete data

• Request erasure of your data where legally applicable

• Request restriction of processing

• Object to processing where we rely on legitimate interests

• Object to direct marketing communications

• Request a copy of your personal data (Data Subject Access Request)

To exercise any of these rights, please contact us using the details below.

Data Security

We take appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, or disclosure. Data is stored on secure systems and accessed only by authorised personnel.

External Links

Our website may contain links to third-party websites. Please note that these sites operate independently and have their own privacy policies. We are not responsible for the content or privacy practices of external websites.

Contact and Complaints

If you have any questions about this Privacy Policy or how your personal data is handled, you can contact:

Broste Rivers Group Ltd
Campus East
Welwyn Garden City
Hertfordshire
AL8 6AE

Email: compliance@hertfordshirebc.co.uk

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
https://www.ico.org.uk

Policy Updates

We may update this Privacy Policy from time to time to reflect legal, regulatory, or operational changes. The latest version will always be published on our website.