Privacy notice
What we collect, why, who sees it and how long we keep it. Written to be read. Last updated 21 September 2026.
Who we are
The Accreditation Desk is a trading name of TAD Compliance Ltd, registered in England and Wales, company number 17464090, registered office 82A James Carter Road, Mildenhall, Suffolk IP28 7DE. We are the data controller for the information described here and are registered with the Information Commissioner's Office, registration C1992037. For anything about your data, email enquiries@accreditationdesk.co.uk.
What we collect and why
When you enquire. Your name, company, email, phone number, what you need and anything you choose to tell us. We use it to reply and to quote. Our lawful basis is that you have asked us to take steps before entering a contract, and our legitimate interest in answering enquiries.
When you become a client. The company information, insurance documents, accounts, training records, accident records and details of named people that an accreditation scheme, a buyer or an auditor asks for. This often includes personal data about your workers, such as names, job titles, qualifications and card numbers. We use it only to write your documents and complete your submission. Our lawful basis is performance of our contract with you. For your workers' data you remain the controller and we act on your instructions. We ask you not to send medical information, and we remove personal details that a submission does not need.
When we write to another business. We sometimes email limited companies and LLPs we think we could work with, using contact details they publish. Our lawful basis is legitimate interests. Every email says who we are and how to stop further contact, and we keep a do not contact list so that a no stays a no.
Invoices and accounts. The records the law requires a company to keep. Our lawful basis is legal obligation.
Who else handles it
We do not sell data and we do not share it for anyone else's marketing. We use a small number of suppliers who process data on our behalf: Netlify (website hosting and the enquiry form), Google (Workspace email and file storage, and Google Ads measurement if you accept the cookie), and WhatsApp if you choose to message us that way. When you instruct us to submit an application, the information goes to the scheme or buyer you have chosen, for example Constructionline or CHAS, under their own privacy notice. Some of these suppliers process data outside the United Kingdom. Where they do, the transfer is covered by UK adequacy regulations or by the contractual safeguards approved for UK transfers. Our own staff may access your information while working outside the UK.
How long we keep it
Enquiries that do not become work are deleted within twelve months. Client files are kept while we are working for you and for up to twenty four months after our last piece of work, so that a renewal does not mean starting again. Ask and we will delete them sooner. Invoices and accounting records are kept for six years as the law requires. Do not contact records are kept for as long as they are needed to honour your request.
Your rights
You can ask for a copy of the information we hold about you, ask us to correct it, delete it or stop using it, and object to our use of it. Email enquiries@accreditationdesk.co.uk and we will reply within one month. If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk, although we would like the chance to put it right first.