1. Introduction
A&A Building Construction (“the Company”, “we”, “us”, or “our”) is committed to protecting the personal data of its customers, employees, suppliers, and other stakeholders in compliance with the General Data Protection Regulation (GDPR). This policy outlines how we collect, process, store, and protect personal data.

2. Data We Collect
We may collect and process the following types of personal data:

• Name, address, phone number, and email address
• Financial and payment details
• Employment and HR records (for employees)
• Business contacts and project-related information
• Any other data necessary for business operations and compliance

3. How We Use Personal Data
We use personal data for the following purposes:

• To provide construction services and fulfil contracts
• To manage customer relationships and communications
• To process payments and invoices
• To comply with legal and regulatory requirements
• For recruitment and employment management
• To improve our services and business operations

4. Legal Basis for Processing
We process personal data based on one or more of the following legal grounds:

• Consent given by the data subject
• Performance of a contract
• Legal obligations
• Legitimate business interests

5. Data Storage and Security
We implement appropriate technical and organisational measures to protect personal data from unauthorised access, alteration, disclosure, or destruction. Data is stored securely and retained only for as long as necessary.

6. Data Sharing and Third Parties
We may share personal data with:

• Legal authorities when required by law
• Service providers who assist in business operations (e.g., IT support, payroll services)
• Business partners involved in construction projects We ensure that third parties comply with GDPR requirements when handling personal data.

7. Data Subject Rights
Under GDPR, individuals have the following rights:

• The right to access personal data we hold
• The right to correct inaccurate or incomplete data
• The right to request data deletion (where applicable)
• The right to restrict processing
• The right to data portability
• The right to object to processing
• The right to withdraw consent

8. Data Breach Response
In the event of a data breach, we will immediately mitigate the impact and notify affected individuals and the relevant authorities as required by law.

9. Contact Information
For any questions regarding this policy or to exercise your data rights, don’t hesitate to get in touch with us at:

A&A Building Construction
First Floor
85 Great Portland Street
London
W1W 7LT
07398193638
aabuildconstruction@gmail.com

10. Policy Updates
This GDPR policy is subject to review and updates. Any significant changes will be communicated through appropriate channels.

This policy ensures A&A Building Construction’s compliance with GDPR and its commitment to data protection.