The Historic Building Advisory Service Ltd (HBAS) are committed to protecting and respecting your privacy. This Policy explains how we collect personal data, how we use it and who we might share it with.
Who we are
We are a historic building consultancy, chartered building surveyors and buildings archaeologists. We work on all types of buildings, manmade structures and landscapes from before 1945. If you wish for more information please visit the About Us section of our website.
We are a company incorporated in England, whose registered office is at PO Box 2140, Salisbury SP2 2DW
How do we collect information from you?
We collect information from you in the following ways:
- through our website, through completion of forms
- email, post and mail correspondence with us
- contact via telephone
- Our social media channels (Instagram, LinkedIn)
- in-person contacts with HBAS
We do not store or have access to any debit or credit card details on the HBAS systems. All online transactions are executed by SagePay, a secure third-party online transaction service providers.
How you send information to us is your choice, but please be aware that some methods are not secure. If you are unsure how you should send confidential data to us please contact us and we may be able to help you.
What type of information do we collect from you?
We will collect different kinds of information from you depending on our relationship with you:
- We will collect the data we need to administer our subscription based advisory service.
- We will collect the information we need to provide you with the services you have requested from us
- If we receive a complaint or query from clients, subscribed users or members of the public, we will collect the data required to consider the complaint or query effectively.
- If you apply for a job at HBAS we will collect enough data to process your application.
How is your information used?
We will use your data in accordance with the law. The below sections outline how your data will be used.
We will use your data in the following ways unless you opt-out or object:
- We may use your contact details to send you marketing messages, if you have bought or commissioned service from us.
Should you provide personal data to us, there are circumstances when we will use it whether you provide us with consent or not. This is likely to be the case where we need to use it to provide you with services you have requested from us such as processing planning applications, delivering services, for regulatory or statutory purposes or any other legal reason. The below lists some of the ways we may use data without your consent:
- We may share the personal data of our subscribed users or clients with other regulatory or public bodies where there is a legal basis to do so
- We will share personal data with a third party if required to do so by law
- We may share your data with appropriate third parties when undertaking our regulatory activities. This includes sharing your data with subject matter experts external to HBAS and other members of the public if we need to confirm facts as part of an investigation.
- If you contact us and provide us with your personal data as part of a query we will keep a record of those details.
Who has access to your information?
Employees of HBAS will have access to your personal data where it is needed to carry out a specific task.
In the ‘How is your information used?’ section it describes circumstances in which other parties may be given access to your data, this includes other regulatory bodies and public authorities such as the police, HMRC and the insolvency service. We may also share your data with third party experts when getting an opinion as part of our services to you, or as part of a dispute resolution.
Security of your data
Your data will be held on secure servers within the European Economic Area (“EEA”) with all reasonable technological and operation measures put in place to safeguard it from unauthorised access. Where possible any identifiable information will be encrypted or minimised.
Your choices and rights
How you can access and update your information
You have a right to request a copy of the personal information we hold about you, known as a data subject access request. You also have the right to request that information we hold about you which may be incorrect, or which has been changed since you first told us, is updated or removed. These requests are free of charge and can be sent to the Information Governance Officer, Mr R J Hill PO Box 2140, Salisbury, SP2 2DW
How you can request erasure of your data
You can ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where you have withdrawn consent for us to process it (as explained below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
How you can withdraw your consent
You have the right at any time to withdraw any consent you have given us to process your personal data. Please note if you withdraw your consent it will not affect the lawfulness of any processing of your personal data we have carried out before you withdrew your consent. Should you wish to do so you can change your consent preferences at any time by contacting firstname.lastname@example.org
How long will we keep your data for?
We will retain your personal data for different periods depending on the service you have chosen to use us for, which may be a longer period than that for which we need to hold your data to provide those services, i.e. where we are under regulatory or statutory duties to hold your data for a longer period or need to retain it in the event of a legal claim or complaint.
This Policy was last reviewed in May 2018. The content of the policy may be reviewed and changed without prior notice, please visit the policy for any changes.
Please write to the Information Governance Officer if you:
a) have any questions about how HBAS collects and uses your information;
b) want to access the information HBAS hold about you;
c) address any concerns about the information you have provided HBAS; or
d) have any complaints about how HBAS uses your information.
Information Governance Officer
All FAQs in the ‘Funding, VAT and insurance’ section of the HBAS website dealing with insurance or financial matters have been provided by CGA Insurance Services Ltd. CGA Insurance Services Ltd is authorised and regulated by the Financial Services Authority to advise and arrange general insurance contracts. All Investment business is handled by CGA Financial & Investment Services Ltd, authorised and regulated by the Financial Services Authority . Representing only the St. James’s Place Group for the purpose of advising on the Group’s investment management, risk management and banking products and services.
Every question received by HBAS and subsequently passed to the CGA will be answered as clearly and concisely as possible based on the information provided in the question. The answers given will be specific to the question posted, but should be regarded as generic in nature. The answers should not be deemed to be, nor do they constitute, specific financial or insurance advice. The CGA recommends that specific advice is sought prior to you making any decisions that affect financial or insurance matters.