Effective data 10 August 2026

This Privacy Policy applies to danaherandwalsh.co.uk, the “Site”, which is owned and operated by Danaher & Walsh Group Ltd.

It also explains how Danaher & Walsh Group Ltd and its subsidiary companies, Danaher & Walsh Civil Engineering Limited and Danaher & Walsh Pipeline Solutions Ltd, handle the personal data of our customers, suppliers and other business contacts, whether or not you have visited our Site.

For more information, please contact dataprotection@danaherandwalsh.co.uk.

20 Granite Way, Mountsorrel, Leicestershire, LE12 7TZ.

Purpose of this Privacy Policy

The purpose of this Privacy Policy is to inform users of our Site, and our customers, suppliers and other business contacts, of the following:

1. The personal data we collect.
2. How we use collected data.
3. Who has access to the data collected.
4. Your rights.
5. The Site’s cookie policy.

This Privacy Policy applies in addition to the terms and conditions of our Site.

UK GDPR and Data Protection

For users in the European Union, we adhere to Regulation (EU) 2016/679. This is known as the General Data Protection Regulation, or GDPR.

For users in the United Kingdom, we adhere to the UK GDPR, as set out in the Data Protection Act 2018 and as amended by the Data (Use and Access) Act 2025.

We have not appointed a Data Protection Officer. This is because we do not fall within the categories of controllers and processors required to appoint one under Article 37 of the UK GDPR.

However, our Finance Director is responsible for Data Protection. Our Brand & Engagement Manager, Joanne Pigram, assists him. Both can be contacted via Head Office on 0116 269 5900.

Consent

By using our Site, users agree that they consent to the conditions set out in this Privacy Policy.

Customers and Suppliers

This section applies if you are a customer, supplier, subcontractor or other business contact of ours, rather than, or in addition to, browsing our Site.

We collect and process personal data about our customers, suppliers and other business contacts, including:

1. Names, job titles and business contact details.
2. Contract, tender and project information.
3. Financial and payment details needed for invoicing.
4. Correspondence and communications with us.

Legal Basis

We rely on the following legal bases to process this data:

1. Processing is necessary to perform a contract with you or your organisation, or to take steps at your request before entering into one.
2. Processing is necessary to comply with a legal obligation, for example our accounting and tax obligations.
3. Processing is necessary for our legitimate interest in managing our business relationships, which is not overridden by your interests, fundamental rights or freedoms.
4. Where we send direct marketing by electronic means, we do so with your consent, or, where the law allows, on the basis that you can opt out at any time.

We use this data to perform our contracts, manage our business relationships, meet our legal and accounting obligations, and, where relevant, market our services to you. If you no longer wish to receive marketing from us, you can opt out at any time by contacting us using the details in the Contact Information section.

In addition to the circumstances described in Who We Share Personal Data With below, we may share customer and supplier data with subcontractors, professional advisers and other third parties who need it to help us deliver a contract, and who are bound by a data processing agreement where they process the data on our behalf.

We typically keep contract, invoicing and accounting records for at least 6 years to meet our legal and accounting obligations. Otherwise, the retention approach set out in How Long We Store Personal Data below applies equally to customer and supplier data.

The rights, safeguards for international transfers, security measures and complaints process described elsewhere in this Privacy Policy apply equally to customers, suppliers and other business contacts.

Legal Basis for Processing Website Data

We collect and process personal data about users only when we have a legal basis for doing so under Article 6 of the UK GDPR.

Where we use cookies for analytics or advertising purposes, our legal basis for that processing is your consent, given or withdrawn through our cookie banner, in line with the Privacy and Electronic Communications Regulations (PECR).

For other personal data collected automatically and used for statistics and general marketing strategy, we rely on the following legal basis:

1. Processing of user personal data is necessary for us to pursue a legitimate interest.

Our legitimate interest is not overridden by the interests, fundamental rights or freedoms of users. Our legitimate interest is marketing our business.

Personal Data We Collect

We only collect data that helps us achieve the purpose set out in this Privacy Policy.

We will not collect any additional data beyond the data listed below without notifying you first.

Data Collected Automatically

When you visit and use our Site, we may automatically collect and store the following information:

1. IP address.
2. Location.
3. Hardware and software details.
4. Clicked links.
5. Content viewed.
6. Advertising identifiers and interactions with our marketing campaigns, collected through cookies as described in our Cookie Policy below.

How We Use Personal Data

We will only use data collected on our Site for the purposes specified in this Privacy Policy. We may also use it for purposes indicated on the relevant pages of our Site.

We will not use your data beyond what we disclose in this Privacy Policy.

We use the data we collect automatically for the following purposes:

1. Statistics.
2. Marketing strategy.
3. Advertising and remarketing, including showing relevant adverts to people who have previously visited our Site when they use platforms such as Google and Meta (Facebook and Instagram).

Who We Share Personal Data With

Employees

We may disclose user data to any member of our organisation who reasonably needs access to it. This access must support the purposes set out in this Privacy Policy.

Other Disclosures

We will not sell or share your data with other third parties, except in the following cases:

1. If the law requires it.
2. If legal proceedings require it.
3. To prove or protect our legal rights.
4. To buyers or potential buyers of this company, if we seek to sell the company.
5. To our analytics and advertising providers, Google and Meta, where you have given consent to advertising or analytics cookies, so that they can provide those services to us.

If you follow hyperlinks from our Site to another site, please note that we do not control their privacy policies and practices.

How Long We Store Personal Data

We will store user data until we have achieved the purpose for which we collected it.

We will notify you if we keep your data for longer than this period.

How We Protect Your Personal Data

We are Cyber Essentials approved. In addition, we do not collect any sensitive data from the website.

Only our employees can access website data. Our employees are also bound by strict confidentiality agreements. A breach of this agreement could result in termination of employment.

While we take reasonable precautions to keep user data secure, there always remains a risk of harm.

The Internet as a whole can be insecure at times. Therefore, we cannot guarantee the security of user data beyond what is reasonably practical.

International Data Transfers

We transfer user personal data to the following countries:

1. EEA, European Economic Area.

When we transfer user personal data, we will protect that data as described in this Privacy Policy, and we will comply with the applicable legal requirements for transferring personal data internationally.

If you are located in the UK, we will only transfer your personal data outside the UK if one of the following applies:

1. The UK government has confirmed, through adequacy regulations, that the receiving country offers a standard of data protection that is not materially lower than the UK’s own standard.
2. We have implemented appropriate safeguards in respect of the transfer, for example the UK’s International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or by the recipient being party to binding corporate rules.

If you are located in the EU, the equivalent adequacy and safeguard mechanisms under the EU GDPR apply.

Automated Decision-Making

If you apply for a vacancy with us through our Site, we may use automated systems, including artificial intelligence tools, to support our recruitment processes, such as shortlisting job applications.

Where a decision about you is based solely on automated processing and has a legal or similarly significant effect on you, we will provide appropriate safeguards, including the right to request human review of the decision, the right to make representations, and the right to contest the decision.

In line with the Data (Use and Access) Act 2025, we will not base a solely automated decision on special category personal data, such as health data or data about racial or ethnic origin, unless a specific exception in the legislation applies.

Your Rights as a User

Under the GDPR, you have the following rights:

1. Right to be informed.
2. Right of access.
3. Right to rectification.
4. Right to erasure.
5. Right to restrict processing.
6. Right to data portability.
7. Right to object.

Further information about individual data rights is available from the Information Commissioner’s Office.

Children

We do not knowingly collect or use personal data from children under 16 years of age.

If we learn that we have collected personal data from a child under 16 years of age, we will delete it as soon as possible.

If a child under 16 years of age has provided us with personal data, their parent or guardian may contact us.

How to Access, Modify, Delete or Challenge Data

You may contact us if you would like to know:

1. Whether we have collected your personal data.
2. How we have used your personal data.
3. Whether we have disclosed your personal data.
4. To whom we disclosed your personal data.
5. Whether your data can be deleted or modified.
6. How to exercise your other rights under the GDPR.

Please contact:

dataprotection@danaherandwalsh.co.uk

0116 269 5900

20 Granite Way, Mountsorrel, Leicestershire, LE12 7TZ.

How to Opt Out of Data Collection, Use or Disclosure

In addition to the method described above, we provide the following specific opt-out method.

You can opt out of cookie collection through the cookie settings on our Site, provided by CookieYes, or by managing cookies through your browser.

Cookie Policy

A cookie is a small file stored on a user’s device by a website. Its purpose is to collect data relating to the user’s browsing habits.

You can choose to be notified each time a cookie is transmitted. You can also choose to disable cookies entirely in your internet browser. However, this may decrease the quality of your user experience.

We use CookieYes as our cookie consent management tool. When you first visit our Site, a cookie banner allows you to accept or decline non-essential cookies. You can change your choice at any time using the cookie settings on our Site.

Types of Cookies We Use

Strictly Necessary Cookies

These cookies are essential for the Site to function correctly, including remembering your cookie consent choices. They do not require consent.

Functional Cookies

Functional cookies remember the selections you make on our Site, such as display preferences, so your selections are saved for your next visit.

Analytics Cookies

We use Google Analytics to understand how visitors use our Site, for example which pages are viewed and how long visitors stay. This helps us improve the Site’s design and content. These cookies are only set with your consent.

Advertising Cookies

We use Google Ads and the Meta (Facebook) Pixel. These are in place so that, when we run a marketing campaign, we can measure its performance and show relevant adverts to people who have previously visited our Site when they use Google or Meta platforms such as Facebook and Instagram. These cookies are only set with your consent, and involve sharing data with Google LLC and Meta Platforms, Inc. for these purposes. You can withdraw consent at any time through our cookie settings.

The Data (Use and Access) Act 2025 introduced limited exemptions from consent for cookies used solely for website statistics or to remember site appearance preferences. Because our analytics tool operates alongside our advertising tools as part of one marketing setup, we do not rely on this exemption, and we continue to ask for your consent to all non-essential cookies through our cookie banner.

Modifications to this Privacy Policy

We may amend this Privacy Policy from time to time. This helps us maintain compliance with the law. It also allows us to reflect changes to our data collection process.

When we amend this Privacy Policy, we will update the Effective Date at the top of this Privacy Policy.

We recommend that users periodically review our Privacy Policy. This will help ensure they are notified of any updates.

If necessary, we may notify users by email of changes to this Privacy Policy.

Complaints

If you have complaints about how we process your personal data, please contact us using the details in the Contact Information section below.

We will acknowledge your complaint within 30 days and will work to resolve it without undue delay.

You also have the right to make a complaint directly to the Information Commissioner’s Office (ICO), the UK’s supervisory authority, without contacting us first, and at any stage if you remain unhappy with how we have handled your complaint.

Contact Information

dataprotection@danaherandwalsh.co.uk

0116 269 5900

20 Granite Way, Mountsorrel, Leicestershire, LE12 7TZ.

Danaher & Walsh Group Ltd

Company No. 03957969