Site Health and Safety Privacy Notice
This notice is for people who work on or visit Spitfire Homes building sites but are not Spitfire employees, such as contractors, subcontractors, agency workers and visitors. It explains how we use your data when you complete site inductions, health and safety forms and sign-in records.
Who we are
This notice is issued by Spitfire Bespoke Homes Limited, trading as Spitfire Homes (“Spitfire”, “we”, “us”), registered in England and Wales under company number 04395875, with its registered office at The Gate, International Drive, Solihull, B90 4WA. Spitfire is the data controller for your personal data.
We are not required to appoint a Data Protection Officer. Please send any questions about this notice to the Data Protection Lead, Spitfire Homes, at the address above.
What we collect
- Contact details: name, employer, address, email address and telephone number.
- Competence details: trade, CSCS or equivalent card, training certificates and qualifications.
- Emergency contacts: next of kin or another person to contact.
- Health and safety information: any medical condition you tell us about that could affect your safety on site, and records of any accident or near miss.
- Site records: sign-in and sign-out times, induction records and CCTV images (see our CCTV Privacy Notice).
How we use it and why
- To meet our health and safety duties: including site inductions, recording who is on site, checking competence, and recording and reporting accidents (including under RIDDOR). This is a legal obligation.
- To keep you safe in an emergency: holding emergency contact and relevant medical details, based on our legitimate interest in your wellbeing and, where needed, to protect your vital interests.
- To check work is carried out safely and to the right standard: based on our legitimate interests.
We use health information only where the law allows it, to meet our health and safety obligations. We do not use your information to make automated decisions about you.
Who we share it with
We may share your data with your employer, our principal contractors and health and safety advisers, site access and induction system providers, insurers, the emergency services and the Health and Safety Executive or other regulators. They must keep it confidential and secure.
How long we keep it
We keep site and induction records for six years after the end of the project, unless a longer period is required by health and safety legislation or for a potential claim. Accident records are kept for as long as the law requires. Emergency contact details are deleted once you finish working on our sites.
Transfers outside the UK
We do not knowingly transfer personal data outside the UK. If this changes, we will put appropriate safeguards in place as UK data protection law requires.
Your rights
You can ask us for a copy of your data, and ask us to correct it, erase it or restrict how we use it. You can also object to us using it on the basis of legitimate interests. Some rights are limited where we must keep records by law. To make a request, please write to the Data Protection Lead at the address above.
Complaints
We would like the chance to put things right, so please contact us first. You can also complain to the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF; telephone 0303 123 1113; ico.org.uk/make-a-complaint.
Last updated: October 2026 · Back to Privacy Policy