Effective date: 2 October 2026 | Version: 1.0
Granite Elite Ltd is committed to handling personal information lawfully, fairly, transparently and securely. This notice explains what personal information we may collect, why we use it, who we may share it with, how long we keep it, and the rights available to you.
Granite Elite Ltd is a security services company operating from Scotland and providing services across the UK and, where applicable, internationally. For personal information that Granite Elite Ltd determines the purposes and means of processing, Granite Elite Ltd acts as the data controller.
Granite Elite Ltd
Unit 10, Burnbank Business Centre
Altens Industrial Estate
Aberdeen AB12 3LF
Scotland, United Kingdom
Email:
info@granite-elite.co.uk
Website:
https://www.granite-elite.co.uk/
This policy applies to personal information processed through the Granite Elite website and in connection with enquiries, quotations, client and supplier relationships, recruitment, website administration and related business activities.
Separate or supplementary privacy information may be provided where a particular service or processing activity requires more specific information.
Depending on how you interact with Granite Elite, we may collect:
Please avoid providing special category information or criminal-offence information unless it is necessary for the relevant purpose and Granite Elite has requested it or is otherwise permitted to process it.
Where such information is processed, Granite Elite will identify an appropriate legal condition in addition to an Article 6 lawful basis.
We may obtain information directly from you when you contact us, complete a website form, request services, apply for a role, communicate with our staff or enter into a business relationship with us.
We may also receive information from clients, employers, referees, recruitment sources, public sources, professional advisers, service providers or other third parties where lawful and relevant.
Where required, privacy information will be provided within the applicable legal timeframe.
Granite Elite identifies a lawful basis before processing personal information. The basis depends on the purpose and circumstances.
| Purpose | Typical Processing | Likely Lawful Basis |
|---|---|---|
| Responding to enquiries and preparing quotations | Using contact details and information about requested services to respond and take steps requested before a contract. | Contract / Legitimate interests |
| Providing and administering services | Managing client contacts, contracts, communications, service delivery and associated records. | Contract / Legitimate interests / Legal obligation |
| Recruitment and workforce administration | Assessing applications, communicating with candidates, verifying suitability and meeting employment or regulatory requirements. | Contract steps / Legal obligation / Legitimate interests |
| Business administration and finance | Managing suppliers, invoices, accounting, audit, insurance and corporate records. | Contract / Legal obligation / Legitimate interests |
| Website operation and cybersecurity | Operating, protecting, troubleshooting and monitoring the website and systems; preventing misuse and security incidents. | Legitimate interests / Legal obligation |
| Legal claims, compliance and safeguarding | Establishing, exercising or defending legal rights; responding to lawful requests; protecting people, property and business interests. | Legal obligation / Legitimate interests |
| Marketing communications | Sending relevant business communications where permitted and respecting applicable opt-out and consent requirements. | Consent or legitimate interests, as applicable |
Where Granite Elite relies on legitimate interests, those interests may include operating and improving the business, responding to business enquiries, maintaining client and supplier relationships, protecting systems and premises, preventing fraud or misuse, ensuring service quality, and establishing or defending legal rights.
We consider whether the processing is necessary and balance these interests against the rights and freedoms of the individuals concerned.
You may object to processing based on legitimate interests in appropriate circumstances.
If you apply to work with or provide services to Granite Elite, we may use the information you provide to assess your application, communicate with you, verify qualifications or licences, obtain references, consider suitability, meet legal or regulatory requirements and, if successful, prepare for and administer the working relationship.
Additional checks may be required for security-sector roles.
Where criminal-offence data, special category data or vetting information is processed, Granite Elite will do so only where a valid legal condition and appropriate safeguards apply.
The website may use cookies and similar storage or access technologies for essential operation, security, functionality, analytics or other stated purposes.
Some low-risk technologies may be used without consent where permitted by law. Technologies that require consent will be used only after the required choice has been obtained.
Further information is available in our Cookie Policy.
We may share personal information where necessary with categories of recipients such as:
Service providers acting as processors are expected to process information only on documented instructions and to apply appropriate security and confidentiality measures.
Granite Elite does not sell personal information.
Some technology or service providers may process information outside the UK.
Where personal information is transferred internationally, Granite Elite will use an applicable lawful transfer mechanism and appropriate safeguards where required, such as UK adequacy regulations or approved contractual safeguards, and will consider relevant transfer risks.
You may contact us for further information about safeguards relevant to a particular transfer.
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, regulatory, contractual, insurance, accounting, security and dispute-resolution requirements.
Retention periods vary by record type. When a fixed period is not appropriate, we use criteria such as:
Information that is no longer required will be securely deleted, destroyed or anonymised as appropriate.
Granite Elite uses proportionate technical and organisational measures intended to protect personal information against unauthorised or unlawful access, alteration, disclosure, loss or destruction.
Measures may include:
No internet or electronic system can be guaranteed to be completely secure, but we review safeguards in light of the risks involved.
Depending on the circumstances and the lawful basis used, you may have rights to:
These rights are subject to legal conditions and exemptions and do not all apply in every situation.
To exercise a right, contact info@granite-elite.co.uk.
We may need to verify your identity and clarify the scope of your request. We will respond within the timeframe required by applicable data protection law.
If you are concerned about how Granite Elite has handled your personal information, please contact us first at info@granite-elite.co.uk or at our postal address.
We will acknowledge and handle data protection complaints through an appropriate internal process and provide an outcome within the period required by applicable law.
You also have the right to complain to the UK data protection regulator. Current contact and complaint information is available from the Information Commissioner's Office at https://ico.org.uk/.
Granite Elite does not intend to make decisions about website users solely by automated means that produce legal or similarly significant effects unless this is lawful and appropriate safeguards are in place.
If such processing is introduced and specific notice is required, we will provide meaningful information about the processing and the safeguards available.
The Granite Elite website and services are not directed at children.
We do not knowingly seek to collect personal information from children through the general website except where this is necessary and lawful for a specific activity.
If processing involving children is introduced, Granite Elite will assess the additional protections required.
The website may contain links to third-party websites or services. Granite Elite is not responsible for the privacy practices of independent third parties.
You should review the privacy information provided by those organisations when using their services.
We may update this Privacy Policy to reflect changes in our services, processing activities, technology or legal requirements.
The current version will be published on our website with an updated effective date.
Where a change materially affects how we use personal information, we will take reasonable steps to bring the change to the attention of affected individuals where required.
For questions about this policy, to exercise your data protection rights, or to raise a data protection complaint, contact:
Granite Elite LtdThis policy is designed with reference to the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), and the Data (Use and Access) Act 2025, as amended and in force.
Granite Elite should keep this policy under review alongside its actual data flows, retention schedule, cookie configuration, contracts and internal data-protection procedures.