1. Introduction
Welcome to Panesar Commercial Management Ltd (“we”, “us”, or “our”). We are committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, and safeguard your personal data when you use our services, interact with our website, or contact us. It applies to all individuals, including clients, website visitors, and professional contacts in the UK and internationally.
We are a specialist provider of quantity surveying, commercial management, project management, dispute resolution and related services. We treat your data with the highest standards of confidentiality, security, and legal compliance.
2. Contact Information
If you have questions about this policy or how we handle your data, please contact:
Panesar Commercial Management Ltd
Email: office@panesarcm.com
Phone: 07557215777
Address: 124 City Road, London, EC1V 2NX
3. License to Use Website
3.1 Unless otherwise stated, we or our licensors own the intellectual property rights in the website and material on the website. All rights are reserved.
3.2 You may view, download for caching purposes only, and print pages from the website for your own personal use, subject to the restrictions below.
3.3 You must not:
- Republish material from this website (including republication on another website)
- Sell, rent or sub-license material
- Reproduce, duplicate, copy or otherwise exploit material for commercial purposes without our prior written permission
- Edit or otherwise modify any material on the website
- Redistribute material, except for content specifically and expressly made available for redistribution
3.4 We reserve the right to restrict or suspend access to our website if you breach these terms.
4. Acceptable Use
4.1 You must not use our website:
- In any way that causes, or may cause, damage to the website or impairs its availability
- In connection with any unlawful, illegal, fraudulent or harmful purpose or activity
- To transmit or distribute viruses, spyware, malware or other malicious software
4.2 You may not conduct any systematic or automated data collection (including scraping, data mining, data extraction and data harvesting) on or in relation to our website without our express written consent.
4.3 You must not use the website to transmit or send unsolicited commercial communications.
5. Data Policy
5.1 Lawful Basis
We process your personal data in compliance with the UK Data Protection Act 2018, UK GDPR, and other applicable data protection laws. Data is collected and processed lawfully and fairly for the following legal bases:
- Contractual necessity (e.g. providing services)
- Legal obligation (e.g. regulatory or statutory compliance)
- Legitimate interest (e.g. business operations, communication)
- Consent (e.g. marketing communications)
5.2 Types of Data We Collect
We collect different types of personal data depending on your relationship with us, which may include:
- Full name
- Company name and job title
- Contact details (email, phone number, address)
- Subject and content of enquiry
- Marketing preferences
- Technical data (e.g. IP address, browser, usage data)
- Recruitment-related data, including:
- CVs and cover letters submitted through our website
- Employment history and qualifications
- References or professional certifications
- Interview notes and assessment results
- Equal opportunities monitoring information (where provided)
All personal data collected during recruitment is used solely for the purpose of assessing your suitability for employment or freelance work with us, and for fulfilling our legal or contractual obligations during the hiring process.
5.3 Project-Related and Technical Data
In the course of delivering services, we may collect additional information related to your project or enquiry, including but not limited to:
- Scope of works, timelines, budgets, contract values
- Tender documentation, claims, dispute materials
- Business correspondence, reports, meeting notes, and assessments
- Drawings, schedules, cost data and specifications shared for service purposes
- Technical data about your visit to our website such as:
- IP address and geographic location
- Browser type/version and operating system
- Referral source and browsing behaviour
We collect only the minimum data necessary for these purposes. All data is collected only where relevant, necessary and proportionate to the purpose of providing or improving our services.
5.4 Use of Personal Data
We use your personal data to:
- Deliver our services and fulfil contracts
- Respond to enquiries and manage our relationship with you
- Provide updates or communications relevant to your project
- Improve our website, services, and internal processes
- Ensure compliance with applicable laws and regulations
- Send marketing material (only where consent is given)
We will not use your data for purposes materially different from those outlined without prior notice and, where applicable, consent.
5.5 Sharing Your Data
We may share personal data we hold with any member of our group, which means our subsidiaries, our ultimate holding company, and its subsidiaries.
We only share personal data where necessary and always under strict confidentiality agreements. Typical third parties include:
- IT support and hosting providers
- Legal or regulatory advisors
- Business consultants
- Cloud software services
We may also disclose personal data we hold to third parties:
- To comply with a legal obligation or to enforce or apply any contract with you or other agreements.
- To protect our rights, property, or the safety of our employees, customers, or others. This may include exchanging information with other companies and organisations for fraud prevention and credit risk reduction.
We ensure all third parties are subject to data protection obligations at least equivalent to those required by UK and international law.
5.6 International Data Transfers
If data is transferred or accessed outside of the UK (e.g. cloud services hosted in the EEA or beyond), we ensure equivalent safeguards are in place, including:
- Adequacy decisions
- Standard Contractual Clauses (SCCs)
- International Data Transfer Agreements (IDTAs)
Data transfers may include transfers to countries such as those within the European Economic Area (EEA), the United States, and the United Arab Emirates. Appropriate safeguards such as adequacy decisions, Standard Contractual Clauses (SCCs), or International Data Transfer Agreements (IDTAs) are always in place.
5.7 Cookies
We use cookies and other tracking technologies to improve your browsing experience and analyse traffic. You can manage cookie preferences through your browser settings.
6. Your Rights
Under data protection law, you have the following rights:
- Right of access – to know what personal data we hold about you
- Right to rectification – to correct inaccurate or incomplete data
- Right to erasure – to request deletion of your data, where appropriate
- Right to restrict processing – to request limitation of data use
- Right to data portability – to receive data in a structured format
- Right to object – to certain uses of your personal data
- Right to withdraw consent – where processing is based on consent
To exercise any of these rights, please contact us using the details in Section 2.
7. Withdrawing Consent
You may withdraw your consent to receive marketing or other non-essential communications at any time. This does not affect data processed before your withdrawal.
8. Data Security
We implement appropriate technical and organisational measures to ensure your data is secure, including:
- Secure servers and encryption protocols
- Access controls and staff training
- Regular security audits and backups
We take all reasonable precautions to protect against unlawful or unauthorised processing of personal data, as well as accidental loss or damage. Procedures and technologies are in place to maintain security from collection through to destruction. Personal data will only be transferred to processors who agree to comply with these measures or who have equivalent safeguards in place.
All information you provide is stored on secure servers located in the UK or on secure servers operated by approved third-party providers.
Due to the inherent design of the internet, transmission of data cannot be guaranteed completely secure. While we strive to protect your personal data, any transmission to our website is at your own risk. Upon receipt, we apply strict procedures and technical controls to safeguard your data by design and by default.
We adhere to stringent procedures to ensure compliance with all applicable data protection legislation.
9. Data Retention
We retain personal data only for as long as necessary to:
- Fulfil the purposes for which it was collected
- Comply with legal and contractual obligations
- Resolve disputes and enforce our agreements
Once no longer required, data is securely deleted or anonymised.
10. Communications
We may record telephone calls or retain email communications for:
- Training and quality assurance
- Auditing or dispute resolution
- Legal and operational purposes
11. Complaints
If you believe we have mishandled your data or failed to uphold your rights, please contact us in the first instance. You may also complain to the Information Commissioner’s Office (ICO) at:
Tel: 0303 123 1113
12. Changes to This Privacy Policy
We reserve the right to amend this policy to reflect changes in law, regulations or our business practices. Updated versions will be posted on our website so please review this page periodically to stay informed of any changes.
13. Legal Disclaimers
If any section of this Privacy Policy is deemed unlawful or unenforceable by a court of law, it will not affect the remaining provisions, which shall continue in full force and effect.