1. Who Holds Your Information
CHO BUILDING SERVICES LTD is a building services company registered in the United Kingdom and trading from its workshop at 32 Broughton Road, Croft, LEICESTER - LE9 3EA, United Kingdom (GB). The Company is the data controller for the purposes of data protection law whenever it decides how personal information will be used and why. Where a building owner, landlord, tenant or contractor sends information to the Company, that relationship is with this same legal entity, and no other business takes over responsibility for it.
The site is published by CHO Build, the developer who prepared the web content for the Company. CHO Build acts as a processor on the instructions of the Company, which remains accountable for the choices set out in this notice. Every enquiry, quotation and contract is handled by humans working at the Broughton Road workshop, and they follow the rules in this policy as well as the law of the United Kingdom.
You can reach the Company at any time using the details shown at the foot of this page. If you are outside the United Kingdom you should still write to the address above, because that is where decisions about your data are made.
2. The Scope of This Policy
This policy covers everyone whose information touches the Company. That includes people who browse this website, people who ask for a brochure or a quotation, named contacts at facilities management companies, site visitors, tenants and staff who pass information about a building, and people who contact the office by post, email or telephone. It also covers the small amount of personal information that may appear in building records we receive, such as the name of the person who keys a plant room or the obligation holder named on a safety certificate.
The policy does not pretend to cover information about the Company employees in their employment files, because that is dealt with by a separate internal policy that those employees are told about. Nothing here limits any right you already hold under the law, and where a law offers greater protection this Company follows the stricter rule.
3. How Information Is Collected
Information reaches the Company in three main ways. First, you give it to us directly when you fill in the form on this site, write an email to office@chobuild.autos, call +13094905507, or hand a printed enquiry to an engineer during a site visit. Second, we collect it automatically in small amounts as you use the website, for example the pages that a browser requests and a rough idea of where in the world that browser sits. Third, we receive it from other people who are already working on your building, such as a landlord, an agent, a main contractor, or the maker of a control panel who passes on an operating history.
The Company is honest about the fact that a site survey often needs a little personal context, because plant rooms sit inside buildings that belong to someone. Where a third party gives us your details, we will only use those details for the purpose that person or the building actually needs, and we will not build a secret profile from them.
4. Categories of Information We Hold
The Company keeps its records lean, the way a joiner keeps a tool list lean. Typically we hold contact details such as a name, a job title, an organisation, an email address, a telephone number and the address of the building the enquiry concerns. We hold the content of enquires and quotations so that we can answer you and deliver the work. Where a contract is agreed we hold billing information, an invoice address, payment dates and a record of what was quoted compared with what was charged.
From website visitors we hold a small technical trail of pages viewed, approximate region, the kind of browser and device, and visit times. That trail is used to keep the site working and to understand which pages matter. From site access we may hold a visitor log while work is in progress, which records names for safety and security reasons that are explained later in this notice.
5. Lawful Reasons for Processing
Under data protection law the Company must have a lawful reason before it uses personal information. For most day to day work the reason is the performance of a contract, because we cannot design, price, install or maintain building services without the details that let us visit the right building and speak to the right person. Before a contract begins the lawful reason is a legitimate interest shared between us and you, which is to explore whether we can help each other without creating binding commitments.
Where we carry records for safety, such as gas certificates, electrical test results or emergency lighting logs, the reason is a legal obligation that the Company itself must satisfy. Where we send marketing material to someone who has asked for it, the reason is consent, and where we hold a very small amount of information purely to keep the site secure the reason is the legitimate interest of the Company and its visitors in a reliable service. Each lawful reason is recorded so that every decision can be explained later.
6. How Your Information Is Used
Your information is used for the purpose that brought you to us, and for no secret purpose held back in a corner of the workshop. If you ask for a quotation we use your details to prepare it, send it, answer questions about it, and eventually invoice the work if it is agreed. If you arrange a visit we use your details to confirm the time, speak to the right building contact and log the visit for safety. If you buy maintenance services we use your details to schedule work, and we call you when a technician is on the way to the plant room.
We may use your contact details to send a short courtesy note after a job is complete, to ask whether the work reached the standard you expected. We use aggregate website numbers to decide which pages deserve more of our attention. We do not sell your information, we do not rent it, and we do not hand it to advertisers so that they can chase you around the internet.
7. Where Your Information Lives
The Company stores most of its working information on secure systems provided by reputable suppliers who keep servers inside the United Kingdom and the European Economic Area. Where a supplier stores a backup in another country we choose suppliers whose protection is judged adequate, or who are covered by an approved safeguard that the law recognises. Documents we hold on paper, such as a signed certificate or a site sketch, are kept in a locked cabinet at the Broughton Road address and are only taken out to the bench when a job genuinely needs them.
Email passes through ordinary internet routing like every message, but the Company encourages anyone sending a quotation or a list of plant equipment to mark confidential material clearly so that it is treated with the care it deserves. Nothing sent by email is ever permanently secret once it travels, so we try not to chase the edges of that fact.
9. How Long We Keep Information
The Company keeps information only for as long as a record still does an honest job. An enquiry that never turns into work is generally kept for a short period so that we can answer a follow up question, and is then closed and removed. Records that belong to a finished contract, such as a certificate or a test log, are kept for the period that safety law or good engineering practice demands, because a future owner of the building may need to prove what was done and when.
After the keeping period ends the information is deleted, shredded or made anonymous so that it can no longer point back to a named person. Website visit numbers are kept in an aggregate form that cannot single anyone out, and billing records that accounting rules require us to hold are kept in a separate and limited file until tax law lets them go.
10. How We Protect Information
Protection is a habit at the bench, not a badge on the wall. The Company keeps its systems behind sensible passwords and two factor checks, limits who can open a quotation file, and back up the files that matter so that an accident does not become a loss. Our workshop door is controlled, signed visitors are supervised, and confidential papers sit in a lockable cabinet rather than in the tray beside the kettle.
We train the small team so that a cold call claiming to be from the bank does not walk away with access, and so that an email attachment is not opened on impulse. Where a payment is taken we use a payment provider that never lets a full card number sit on our own systems. These steps are not a promise that nothing can ever go wrong, but they are a genuine and well maintained effort to make failure rare.
12. Marketing and Your Consent
The Company sends marketing material only to people who have asked for it or otherwise clearly expect to hear from us, such as a facilities team that asked for our capability statement on a tender. That material is limited to things we genuinely do, such as a reminder that we are quoting on a plant room and would welcome a fuller brief, or an invitation to a seasonal maintenance reminder. Every marketing message tells you plainly how to stop receiving them.
Stopping marketing has no effect on any contract you have with us. Work continues, certificates still arrive, and the only difference is that we stop sending the friendly extras. Where a legal requirement demands consent before a particular type of message is sent, we collect that consent clearly and keep a record of when it was given and how it was expressed.
13. Privacy for Children
The Company does not design its services for children, and it does not knowingly collect information from a child. The buildings we work on are commercial plant rooms, schools and factories, and the people we deal with are adults who run them. If a school sends a form or a competition our way, every piece of that material is handled through the adult who is responsible for it.
If we learn that the details of a child under the age of consent have reached us without a parent or guardian being involved, we will delete them from our files as soon as the mistake is pointed out and we will tell the responsible adult what happened. Parents and guardians with a concern can always write to the address on this page, and we treat those letters with particular care.
14. CCTV, Visitors and Site Records
Because a plant room holds high voltage and high pressure equipment, the Company keeps a short visitor and signing in record for its own workshop so that every person on the premises at any moment can be accounted for in an emergency. That record holds a name, a company, an arrival time and the person being visited, and it is kept no longer than the safety review after a visit requires.
On a client site we follow the access rules that the building itself sets, which may mean registering with reception and wearing a badge. We do not install our own CCTV on a client building unless it has separately asked us to and has taken its own advice about doing so. Site diaries may carry a first name against a task so that the client knows who to call, but those notes are not used for any other purpose.
15. International Transfers
The Company tries hard to keep personal information on servers inside the United Kingdom and the European Economic Area. Occasionally a tool we rely on, such as an email or a document host, keeps an encrypted copy of service metadata on a server in the United States or another country. Where that happens the Company chooses a supplier covered by the adequacy or safeguard arrangements that the relevant law recognises, so that the same protection travels with the data.
Any international transfer is documented in the same record that logs our lawful reasons. If a transfer is challenged we can point to the exact safeguard in place, rather than to a vague hope. If you object to your information resting on a server outside the United Kingdom for the shortest technical moment an email needs, we are happy to talk on the phone or in person at the workshop instead.
16. Data Breach Response
Should the worst happen and information reach the wrong hands, the Company has a rehearsed plan rather than a scramble. The incident is contained first, by locking the affected account or system, then assessed to see what types of information were involved and how sensitive they are. Where the law requires it we report a serious breach to the supervisory authority within the time the law allows, and we tell anyone whose information carried a real risk of harm.
Reporting is never used as a reason to be slow. The Company would rather apologise early for a small incident than hide it until it grows. Each breach, however small, is followed by a short review of the tool, the habit or the gap that let it happen, so that the same mistake does not knock twice at the same door.
17. Automated Decisions and Profiling
The Company does not make automated decisions about you that have a legal or significant effect, and it does not build profiles to decide who is a good risk or who should be turned away. Every quotation is read by a person at the Broughton Road desk, who weighs the drawing, the budget and the sensible engineering before anything is promised.
Website numbers are looked at in groups, never as a way to single out an individual visitor, and no visitor is ever scored or ranked by us. If a supplier suggests a shortcut that sounds like profiling, the Company declines it. Where a genuine automated step is used for something harmless, such as removing duplicate email addresses from a mailing list, it is always reversible and supervised by a person who can see the result.
18. Your Rights and Choices
Data protection law gives you a clear set of levers on the Company. You can ask for a copy of the personal information we hold about you. You can ask us to correct a detail that has gone wrong, such as a misspelt name or an old telephone number, and we will put it right without fuss. You can ask us to delete information where there is no longer a lawful reason to hold it, and you can ask us to pause processing while a dispute about accuracy is sorted out.
In a limited set of situations you can ask us to hand your information to you in a structured way, and you can object to processing that relies on a legitimate interest where your own circumstances outweigh our need. Making any of these requests costs you nothing and will never make us treat you as a difficult customer. We answer every request within the time the law sets, and we explain in plain words if we cannot do exactly what was asked and why.
19. Changes to This Policy
This policy will change as the Company grows, as the law shifts and as the workshop finds better tools. When a change matters, the Company updates the date at the top of this page and, where the change affects a right you hold, we make an effort to tell people who gave us contact details in the past. The version that applies at any moment is the one published on this page.
We try never to change this policy to take away an existing right. Where legal development forces a narrower reading, we make that change clearly and with a plain explanation of what moved and why it moved, so that nobody discovers a lost right by accident.
20. How to Contact the Company
Questions, requests and concerns about this policy are welcome at any time. Write to CHO BUILDING SERVICES LTD, 32 Broughton Road, Croft, LEICESTER - LE9 3EA, United Kingdom (GB) or email office@chobuild.autos, or telephone +13094905507 during bench hours. A person answers, and that person routes your letter to whoever holds the right records so that you are never passed from empty voice mailbox to empty voice mailbox.
You also have the right to complain to the supervisory authority for the United Kingdom if you feel the Company has fallen short. Nothing in this policy limits that right, and we would simply ask that you give us the first chance to put a mistake right, because the people at the bench would far rather fix a problem than argue about it.
21. Managing Cookies in Your Browser
Every browser offers a quiet corner where its cookie habits can be tuned. In most browsers the route runs through a settings menu under headings such as privacy, security or history. There you can choose to block third party cookies, to clear cookies when the browser closes, or to refuse all cookies for a single site. Because this site uses so little, any of those choices leaves the pages readable.
If you clear your cookies you will simply start a fresh visit with no memory of the last one, which is exactly what a private workshop would expect. Should you need help finding the switch in a particular browser the Company would rather you asked us than fight the settings alone, and we will walk through it over the phone in a minute.
CHO BUILDING SERVICES LTD | 32 Broughton Road, Croft, LEICESTER - LE9 3EA, United Kingdom (GB) | office@chobuild.autos | +13094905507
Back to the CHO BUILD homepage.