Privacy Policy (GDPR)

1. Introduction

PM Alliance Ltd ("we", "us", "our") is committed to protecting your personal data and respecting your privacy.

We operate as a compliance contracting intermediary, facilitating the engagement of self-employed workers, sole traders, and limited companies with client organisations across construction and related sectors.

This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

PM Alliance Ltd is the Data Controller responsible for your personal data.

If you have any questions about this Privacy Policy, you can contact us via the details provided on our website.

3. Information we collect

We may collect the following personal data:

Subcontractors / Workers:

• Name and contact details
• Address and date of birth (where required)
• Right to work documentation
• National Insurance number
• Trade, skills, and qualifications
• Employment or trading status (sole trader, limited company, etc.)
• Bank and payment details
• Timesheets, attendance, and work records

Clients:

• Name and business contact details
• Company name and role
• Project and service requirements
• Communication records

4. How we use your data

We use personal data to:

• Facilitate subcontractor engagement with clients
• Verify identity, qualifications, and compliance status
• Process timesheet-based work approvals
• Arrange subcontractor payments
• Manage workforce compliance
• Maintain business and contractual records
• Meet legal, tax, and regulatory obligations
• Communicate regarding work assignments and compliance matters

5. Legal basis for processing

We process personal data under:

• Contractual necessity – to deliver services and manage engagements
• Legal obligation – for tax, compliance, and regulatory requirements
• Legitimate interests – to operate and manage our business effectively

6. Data sharing

We may share personal data where necessary with:

• Clients for the purpose of work engagement and delivery
• Compliance, payroll, and tax partners
• Regulatory authorities (e.g. HMRC, ICO) where legally required
• Third-party service providers supporting IT, payment, or operational systems

We do not sell personal data.

7. Data retention

We retain personal data only for as long as necessary for business, legal, and regulatory purposes.

Financial and compliance records are typically retained for up to 6 years in line with UK legal requirements.

8. Data security

We implement appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure.

Access is restricted to authorised personnel only.

9. Your rights

Under UK GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion (where applicable)
• Object to or restrict processing
• Request data portability (where applicable)
• Lodge a complaint with the Information Commissioner's Office (ICO)

10. International transfers

We do not routinely transfer personal data outside the UK. If required, appropriate safeguards will be applied.

11. Cookies and tracking

We use cookies on our website. Please refer to our Cookie Policy for full details.

12. Changes to this policy

We may update this Privacy Policy from time to time. Updates will be published on this page.

13. Contact

For any questions regarding this Privacy Policy, please contact us via our website.