Privacy notice

Introduction
National House-Building Council (“NHBC”, “we”, “our” or “us”) respects your privacy and is committed to the protection of your personal information.
The controller is National House-Building Council (Registered Number 00320784) of NHBC House, Davy Avenue, Knowlhill, Milton Keynes MK8 5FP.
This privacy policy sets out the basis by which any personal information we collect from you, or that you provide to us, will be processed by us in our capacity as controller, why we use such information, who we share it with and the rights to which you may be entitled. Please read the following carefully to understand our views and practices regarding your personal information and how we will treat it.
This privacy policy also covers the other members of the NHBC Group who are listed below:
NHBC Services Limited (Registered Number 03067703)
NHBC Building Control Services Limited (Registered Number 01952969)
-
We will collect and use your personal information to conduct our business, to provide access to our on-line portals, to enable you to set up and operate an account with us, in order to enable you to access, use and/or purchase our services and products, to undertake surveys and for the purposes set out in more detail in this section.
Your information may be shared with other members of the NHBC Group and some third parties.
Vulnerability data – information about health, life events, resilience and capability that helps us identify if you might be a vulnerable person so that we can better meet your needs.
What we collect How we use it Information when you communicate with us:
This may be in person, through our website or via email, when completing an application or registration form, over the phone, through social media or via any other medium, including:
-
your contact details (name, address, telephone number, email address)
-
the information provided when you complete forms via the website; our online portals or hard copy paper forms submitted to us
-
the details of your communications with us
-
the details of our messages to you
-
the recording of phone calls made to/from our Claims, Consumer Affairs and Customer Services teams
-
Vulnerability data – information about health, life events, resilience and capability
- deal with the specific reason that you have contacted us
- process and administer claims
- provide our services and products
- carry out our obligations under any contract with you
- comply with legal and regulatory requirements
- answer any issues or concerns
- monitor customer communications for quality and training purposes
- analyse and improve our services
- notify you of changes to our services
-
helps us identify if you might be a vulnerable person so that we can better meet your needs.
Personal information inferred from your dealings with us
-
Vulnerability data – information about health, life events, resilience and capability
- helps us identify if you might be a vulnerable person so that we can better meet your needs.
Information provided as part of your registration with NHBC and administration of that registration including:
- your contact details
- your date of birth
- details of your role within the registering organisation
- insolvency history
- association with any previous NHBC registered business
- consider and process the application for registration
- provide our services and products
- notify you of issues relating to NHBC and its products and services
- administer an application for change of legal status of the registered builder
- administer an application for reinstatement to the NHBC Register
Information provided as part of your account set up on any NHBC portal including your:
-
contact details
-
username
-
password
-
account settings
-
account preferences
-
email address
-
provide the respective services to which that account relates
-
manage and administer our systems and portals
-
identify how you would like to use your account
-
notify you of changes to our services
-
allow you to use features of our services (such as on-line training/booking)
-
provide online system management and user account support
Information about the way you use our services including:
-
the services that we have provided or you have purchased
-
when and where you have made use of the services
-
payment details
-
whether you have opened electronic communications from us
-
whether you have clicked on links in electronic communications from us
-
deal with the specific reason that you have contacted us
-
answer any issues or concerns
-
carry out our obligations under any contract with you
-
allow you to use features of our services (such as on-line training/booking)
-
administer, analyse and improve our services
-
identify products and marketing that may be of interest to you
-
personalise our service of things you are interested in and how you use our services
-
notify you of changes to our services
-
undertake statistical analysis and research
Information that you give us to purchase or book a conference or course (whether this is online or over the phone or via an order form) including:
-
your contact details
-
your job title
-
your bank account and payment details
-
(if applicable) the details you provide to open an account with us
-
the services (including any ancillary material) purchased
-
provide our services
-
carry out our obligations under any contract with you
-
manage and administer our services;
-
process and fulfil your order
-
provide joining instructions and other information for the course/conference
-
take payment from you or provide a refund
-
onboard you as a delegate
-
to maintain a record of your purchases
-
to notify you in the future of relevant courses/conferences
-
help us ensure that our customers are genuine and to prevent fraud
Information provided if you complete any survey, questionnaire or feedback form including:
-
contact details provided (if any)
-
the answers and information submitted
-
any comments and requests made in connection with completion of the survey
-
conduct analytical review of the services/products provided
-
provide information to third parties
-
follow up any issues raised
-
provide any requested follow up information
-
administer any prize draws etc connected with completion of the form;
-
analyse and improve our service
Information that we collect through your use of our website including:
-
device information such as operating system, unique device identifiers, the mobile network system, location data
-
hardware and browser settings
-
date and time of requests
-
the requests you make
-
the pages you visit and search engine terms you use
-
your IP address
-
provide our services
-
undertake systems administration
-
ensure content is provided in the most effective manner
-
allow you to use features of our services (such as on-line training/booking)
-
undertake internal operations (e.g. data analytics, testing etc.)
-
audit the website
-
develop and improve our services
-
identify issues with the website and a user's experience of it
-
monitor the way our website is used
-
to keep the website safe and secure
Information that we collect from third party partners and corporate customers which may include:
-
details of home purchases from builders, developers, housing associations or via the conveyancing portal
-
credit reference agencies
-
payment processing companies;
-
the NHBC Group
-
course delegate details
-
unique learner number details
-
details from third parties who promote courses operated by NHBC
-
provide our services and products
-
provide and administer training courses
-
administer enrolment and attendance of training courses
-
manage and administer our systems
-
take payment from or give you a refund
-
help us ensure that our customers are genuine and to prevent fraud
-
personalise our service
-
undertake surveys and statistical analysis and research
We use Worldpay and Global Iris for payment services. If you purchase anything from us via Worldpay or Global Iris they will collect your payment information. You provide this information directly to Worldpay or Global Iris and we do not collect or store this data. Worldpay and Global Iris also collect identifying information about the devices that connect to their services. Worldpay and Global Iris use this information to operate and improve the services they provide to us, including for fraud detection. You can learn more about the how Worldpay processes your personal information in Worldpay's Privacy Notice and how Global Iris processes your personal information in Global Iris' Privacy Statement.
We also work closely with third parties such as various analytics providers and search information providers and may receive information about you from them.
We may receive your data and information if you use services provided by other members of the NHBC Group.
We may also collect information and content which you make publically available on your social media accounts.
-
-
We collect and use your personal information for a variety of reasons.
We need some information to enter into and perform our contract with you – for example your property details and any claims details in connection with claims under our Buildmark products, contact and payment details and registration details for builders and developers to ensure compliance with the NHBC Rules.
Some information processing is required to comply with a legal obligation due to our anti-fraud and anti-money laundering screening obligations or in the public interest such as making sure we verify our customers' identities. We are also required to process certain data in order to comply with the legal requirements placed upon us by the Insurance Distribution Directive ((EU) 2016/97). Your personal information may also be processed if it is necessary on reasonable request by a law enforcement or regulatory authority, body or agency, to enforce or apply the terms of any contract or legal obligation with us or in the defence of a legal claim. We will not delete personal information if relevant to an investigation or a dispute. It will continue to be stored until those issues are fully resolved.
Other information we collect because we have legitimate business interests, for example, in:
-
providing you with up-to-date policy information
-
keeping you updated with regard to our fees and charges
-
ensuring that our regulatory and legal obligations are complied with
-
telling you about the various products and services that we provide
-
providing communications updating you as to the developments and training in connection with the areas which we regulate
-
making sure our records are up-to-date
-
operating incentive programmes to encourage excellence
-
making sure our products and services are paid for promptly and in full
-
understanding how you use our products, services, training and materials
-
obtaining and distributing feedback relating to quality of parties on the NHBC Register’s performance
-
understanding and responding to your feedback
-
providing communications relating to market and industry issues
-
analysing the services our customers want
-
improving our services
-
receiving information from other entities in the NHBC Group about shared customers
Some information is processed because you have given your consent. This includes our sharing your personal information with third party organisations where you specifically consented to us sharing your data with such organisations. This consent can be withdrawn at any time through the NHBC Preference Centre which can be found at www.nhbc.co.uk/my-preferences
You can manage your personal data on a day to day basis through the NHBC preference centre. The preference centre is a portal for you to manage how we communicate with you and what we communicate to you.
We will keep your information for as long as it is reasonably necessary. It will depend on factors such as statutory requirements which specify that certain data must be retained for specific periods (e.g. information provided in connection with Building Control), whether you have any outstanding claims, an account with us or have interacted with us recently. We will also routinely refresh our information to ensure we keep it up-to-date.
Where possible, we rely on your consent to document any vulnerabilities you have declared which helps us to better meet your needs and to comply with regulatory requirements about how we treat vulnerable people. In some cases, where it is not possible to obtain consent, we believe that it is in your best interests and there are substantial public interests in us helping our customers in this way.
If personal information is not provided we may not be able to provide information which you have requested or provide the relevant product or service for you.
-
-
Certain types of personal information are more sensitive than others. This is known as "special information" and includes information about health and disability issues, ethnicity and religion.
We may in certain circumstances collect or receive such special information. We have identified below details of the special information we may collect or receive and how we will use it.
What we collect How we use it Information that you give us or that we receive when using our services:
- information relating to health and disability issues which you provide to us in connection with any claim you make or any use of our services
-
information on ethnicity and religion
Enable us to take account of any such health and disability issues in connection with:
- processing any claim you may make
- providing services
- comply with regulatory requirements about how we treat vulnerable people
-
enable us to flag any relevant vulnerabilities in accordance with regulatory obligations
-
undertake equal opportunities monitoring in connection with the provision of menu choices etc. respecting your religion
-
When you provide us with this information you are consenting that we may collect and use it in the way we have set out above.
We will keep your information for as long as it is reasonably necessary in connection for the purpose for which such information is being processed. We will also routinely refresh our information to ensure we keep it up-to-date.
-
Cookies are small text files that are placed on your computer by websites that you visit. They are widely used to make websites work, or work more efficiently, and to provide information to help us improve the website user experience and deliver a better service. Some of the cookies we use are essential for the site to operate.
What do we use cookies for?
Necessary cookies
Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. Without these cookies, the website may not be able to provide many services that the users expect from it.
Preferences cookies
Preference cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.
Statistics cookies
Also known as “performance cookies,” these cookies collect information about how you use a website, like which pages you visited, and which links you clicked on. None of this information can be used to identify you. It is all aggregated and, therefore, anonymised.
Advertising & marketing cookies
Cookies are used for advertising and marketing purposes and track visitors across websites. These cookies are used to identify your interests and display ads that are relevant and engaging to you by understanding how you interact with our websites and third-party advertisers.
These cookies track your online activity to help advertisers deliver more relevant advertising or to limit how many times you see an ad. These cookies can share that information with other organisations or advertisers. These are persistent cookies and almost always of third-party provenance.
Managing your cookie preferences
We don’t give you the option to turn off essential cookies when you manage your cookie preferences because these cookies are necessary to make our sites function properly. For the other categories of cookies, you can control how they are used on NHBC site.
Other ways to manage your cookie preferences
You have the ability to accept or decline cookies. Most internet browser software automatically accepts cookies, but you can usually modify your browser software setting to decline cookies, or receive a warning before a cookie is stored, if you prefer. Please refer to your internet browser's instructions or help screen to learn more about these functions.
You can disable or remove cookies from your computer by using your browser settings. Remember, deleting your cookies or accessing our website from a different browser or device will effectively ignore your existing preferences for using our website. In a few cases, blocking cookies may reduce the functionality of some websites or prevent access to them altogether.
For further information about cookies, visit All About Cookies.
To find information relating to other browsers, visit the browser developer's website.
To opt out of being tracked by Google Analytics across all websites visit Google Analytics Opt-Out Page.
-
We will take all reasonable care to keep your data secure and prevent unauthorised access to it. All information you provide to us is stored on our secure servers. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your data, we cannot guarantee the security of your data transmitted to our website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
-
We may disclose your personal information within NHBC including to other members of the NHBC Group so that we can provide the best service across the NHBC Group.
We may also share your personal information with certain contractors, suppliers or service providers. They may process your personal data for us, for example, remedial works contractors, loss adjustors and construction professionals. Our suppliers and service providers will be required to meet our standards on processing information and security. The information we provide them, including your information, will only be provided in connection with the performance of their function.
Where we operate courses on behalf of third party training providers and principals we will pass your enrolment information and details of your performance to such third parties.
Homeowner specific information from completed homeowner surveys may be passed to the relevant builder to the extent that you as the homeowner have elected to allow this in the survey form.
We may also share your information with certain third parties either when we receive your consent (see above – "Why we collect and how long we keep your information") or because we need them to see your information to provide services or products to you. These include credit reference agencies, payment gateway providers, anti-fraud databases, screening agencies and other partners we do business with.
We will only transfer data to jurisdictions within the European Union as appropriate safeguards are in place to provide an adequate level of protection for your information.
We may also disclose your personal data to third parties in the following circumstances:
-
if there is a requirement for personal data to be passed to others involved with a claim made under the Buildmark policy such as the original builder, or a consultant or remedial works contractor that NHBC may employ in connection with your claim(s) and related claim(s)
-
in the event that we sell or transfer any business or assets, in which case we may disclose your personal data to the prospective buyer of such business or assets
-
if NHBC or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets
-
if we are defending a legal claim your personal data may be transferred a required in connection with defending such claim
-
if we are under a duty to disclose or share your personal data in order to comply with any legal obligations, and other agreements; or to protect the rights, property, or safety of NHBC, our customers or others
Your personal data may be shared if it is made anonymous and aggregated, as in such circumstances the information will cease to be personal data.
-
-
We set out below the rights you have over your information and how you can exercise those rights.
Some of the rights listed below will only apply in certain circumstances. In particular, they will generally not be available if there are outstanding contracts between us, if we are required by law to keep the information or if the information is relevant to a legal dispute.
-
we need your consent for some of the ways we use your information e.g. for marketing. You can withdraw that consent at any time
-
you can ask us to confirm if we are processing your information
-
if we are processing your information, you can ask for access to your information
-
you can ask to correct your information if it is wrong
-
you have a right to be forgotten and you can ask that our systems stop using your information
-
you can ask us to restrict how we use your information
-
you can ask us to stop using your personal information
-
you have the right to complain to the relevant supervisory authority which in the United Kingdom is the Information Commissioner's Office.
To exercise your rights you can email your request to our Data Protection Officer at dpo@nhbc.co.uk.
-
-
Our website may, from time to time, contain links to and from the websites of third parties as a service to our users. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
-
This policy will be changed from time to time.
If we change anything important about this policy (the information we collect, how we use it or why) we will highlight those changes at the top of the policy and provide a prominent link to it for a reasonable length of time following the change.
-
Questions, comments and requests regarding this privacy policy can be directed to the Data Protection Officer at dpo@nhbc.co.uk.