Our aim is to create a business in which continuous improvement and excellence is intuitive in everything we do, developing a motivated and engaged workforce that embraces the ideas of a learning organisation. We aim to have fi rst class performance in Quality, through our strategic objectives inleadership, people and process. Our senior management team are responsible for putting in place the organisation and process to deliver this. We are committed to achieving this by: • Implementing a Quality Management system that supports the strategic direction of the company • Meeting all applicable requirements • Evaluating and reducing Quality risks and setting clear objectives • Providing clear and visible leadership throughout the company and setting personal examples of our commitment to Quality • Building a learning organisation culture and capturing data that we can review and use to continually improve performance, with the participation and contribution from our people • Having an organisation and processes in place to ensure that we have people competent in Quality Management Systems throughout the organisation • Defi ning current and future needs and expectations of our customers and other interested parties

Our aim is to create a business in which reducing waste and preventing pollution is a guiding principle in everything we do from supplier selection to service delivery. We aim to have fi rst class performance in environmental performance, through our strategic objectives in leadership, people and process. Our senior management team are responsible for putting in place the organisation and process to deliver this. We are committed to achieving this by:

• Implementing an Environmental Management system that supports the strategic direction of the company
• Meeting all applicable requirements
• Evaluating and reducing Environmental risks and setting clear objectives
• Providing clear and visible leadership throughout the company and setting personal examples of our commitment to the environment
• Building a learning organisation culture and capturing data that we can review and use to continually improve our environmental performance, with the participation and contribution from our people
• Having an organisation and processes in place to ensure that we have people competent in Environmental Management Systems throughout the organisation

In order to operate effi ciently, we must collect information about people with whom we work. These may include members of the public, current, past and prospective employees, customers, clients and suppliers. In addition, we may be required by law to collect and use information in order to comply with the requirements of central government. This personal information must be handled properly under legislation which regulates the way that we handle personal data that we collect in the course of our business and gives certain rights to people whose personal data we may hold. We consider that the correct treatment of personal data is integral to our successful operations and to maintaining trust of the persons we deal with. As an ethical business, we fully appreciate the underlying principles of the relevant laws and support and we are committed to full compliance of their requirements. Personal data includes a variety of information including names, addresses, telephone numbers, photographs of people and other personal details. It may also include any expression of opinion about a living individual or any indication of our intentions about that individual.

Principles:

We will comply with data protection principles by making sure that personal data is:

• 1. Captured in an open manner, adequate, relevant and not excessive
• 2. Fairly and lawfully processed in accordance with the individual’s rights, for limited / specifi c purposes
• 3. Held securely, maintained as accurate and up-to-date, but held for no longer than necessary
• 4. Stored in a country which the data has adequate protection for the individuals
• and that at least one of the following conditions are met before we process any personal data:
• 1. The individual has consented to the processing
• 2. The processing is necessary for the performance of a contract with the individual, or required under a legal obligation
• 3. The processing is necessary to protect vital interests of the individual or carry out public functions e.g. administration of justice
• 4. The processing is necessary in order to pursue our legitimate interests or those of third parties (unless it could unjustifi ably prejudice the interests of the individual)

SUBJECT ACCESS RIGHTS:

Any individual who makes a valid subject access request is entitled to be:

• 1. Told whether their personal data is being processed
• 2. Given a description of the personal data, reason for processing and whether it has
• 3. Been shared with any other organisations or persons
• 4. Given details of the source of the data (where this is available)
• 5. Given a copy of the information comprising the data:
• A register of these requests is required to be held, together with the result of the requests. Individuals are entitled only to their own personal data, and not to information relating to other people unless they are acting on behalf of that person. In all circumstances, written consent incl by email from a verifi able account will be required.

EXEMPT INFORMATION:

We may not be able to release some information. Information which is exempt from a subject access request includes:

• 1. Personal data where disclosure could prejudice the prevention or detection of crime
• 2. Management forecasts/management planning
• 3. Legal professional privilege (advice received from solicitors, for example)
• 4. Personal data identifying another person (a third party) whose details cannot be disclosed without their permission

OUR COMMITMENT:

We will take all necessary steps to ensure that personal data is kept secure at all times against unauthorised or unlawful loss or disclosure and everyone managing and handling personal information understands that they are responsible for following good data protection practice. We will ensure that:

• 1. There is someone with specifi c responsibility for data protection in the organisation
• 2. Staff who handle personal information are appropriately supervised and trained
• 3. Queries about handling personal information are promptly and courteously dealt with
• 4. Methods of handling personal information are regularly assessed and evaluated
• 5. Any disclosure of personal data will be in compliance with approved procedures.