Privacy Policy

Last updated: February 2026

RJ Cross Ltd (“we”, “us”, “our”) is committed to protecting your privacy and handling personal information responsibly, and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (as amended).

This Privacy Policy explains how we collect, use, share, and protect personal information when:

• You contact us, request a quote, or engage our asbestos consultancy services (including surveys, air testing, management plans, or related services);
   
• You visit our website: https://www.rjcross-asbestos.uk;
   
• We interact with you as a client, prospective client, supplier, contractor, or other business contact.
   

1. Who we are

RJ Cross Ltd is a UK-based asbestos consultancy providing asbestos surveys, sampling, analysis management services, compliance advice, and related services.

Data Controller: RJ Cross Ltd
Registered address: 27 River Avenue, Hoddesdon, Hertfordshire, EN11 0JS
Company number: 15577816
Contact: Rory Cross, Managing Director
Email: info@rjcross-asbestos.uk
Telephone: 01962 673787

2. What personal information we collect

We may collect and process the following types of personal information:

• Identity and contact data: name, job title, company name, business address, email address, and telephone number;
   
• Service-related data: details about the property or site address, access arrangements, survey requirements, site plans or drawings you provide, which may occasionally contain personal data;
   
• Financial and transactional data: billing details, invoices, purchase orders, and payment records (usually business-related);
   
• Communication data: emails, call notes, enquiry forms, and meeting records;
   
• Technical data: IP address, browser type, device information, and website usage data (see our Cookie Notice where applicable);
   
• Other information: any personal data you choose to provide voluntarily.
   

We do not intentionally collect special category data (such as health information, ethnicity, or criminal conviction data). If such data is incidentally provided (for example, within health and safety documentation), it will only be processed where strictly necessary and lawful.

3. How we collect personal information

We collect personal information in the following ways:

• Directly from you (via enquiry forms, emails, phone calls, or meetings);
   
• From third parties (such as consultants, duty holders, or main contractors providing contact details for survey coordination);
   
• Automatically through website technologies (cookies and server logs — see our Cookie Notice);
   
• From public sources (such as Companies House or publicly available property records, where relevant).
   

4. How and why we use personal information

We process personal information only where we have a lawful basis under UK GDPR, including:

• Performance of a contract (Article 6(1)(b))
  To provide asbestos consultancy services, issue quotations, arrange site access, deliver reports, and manage invoicing.
   
• Legitimate interests (Article 6(1)(f))
  To operate our business, maintain records, comply with health and safety obligations, improve services, and communicate with clients where relevant.
   
• Legal obligation (Article 6(1)(c))
  To comply with asbestos regulations (including the Control of Asbestos Regulations 2012), tax and VAT requirements, and record-keeping duties.
   
• Consent (Article 6(1)(a))
  Only where required (for example, optional marketing communications). Consent may be withdrawn at any time.
   

We do not use automated decision-making or profiling.

5. Who we share personal information with

We may share personal information with:

• Professional advisers (accountants, insurers, legal advisers);
   
• Sub-contractors and laboratories (including UKAS-accredited laboratories for sample analysis), acting as data processors on our behalf;
   
• IT and service providers (such as cloud storage, email systems, accounting software, and CRM platforms) under appropriate data processing agreements;
   
• Regulators or enforcement bodies (including the HSE, local authorities, or courts), where required by law;
   
• Other parties involved in your project, where agreed or necessary (for example, main contractors or property owners).
   

We do not sell personal data. International transfers are limited and only occur where appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or equivalent protections.

6. How long we keep personal information

We retain personal information only for as long as necessary, including:

• Client and project records: typically 6–40 years, depending on survey type, asbestos management requirements, and limitation periods;

• General correspondence and enquiries: usually 2–6 years;

• Financial records: 6 years (HMRC requirements);

• Website logs: typically 12–24 months.
   

Personal data is reviewed periodically and securely deleted or anonymised when no longer required.

7. Security

We use appropriate technical and organisational measures to protect personal data, including access controls, secure systems, and staff awareness. However, no method of transmission or storage is completely secure.

8. Your rights under UK GDPR

You have the right to:

• Access your personal data;

• Request correction of inaccurate or incomplete data;

• Request erasure (in certain circumstances);

• Restrict processing;

• Object to processing (including direct marketing);

• Request data portability (where applicable);

• Withdraw consent (where processing is based on consent).
   

To exercise your rights, please contact us using the details above. We aim to respond within one month.

You also have the right to complain to the Information Commissioner’s Office (ICO):
Website: https://ico.org.uk/make-a-complaint
Helpline: 0303 123 1113

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The date at the top indicates when it was last reviewed. Please check back periodically for updates.

10. Contact us

If you have any questions about this Privacy Policy or how we handle personal data, please contact:

Rory Cross – Managing Director
Email: info@rjcross-asbestos.uk

Telephone: 01962 673787

Thank you for trusting RJ Cross Ltd with your information.