UK Docks Website Privacy Notice

Last Updated: Oct 31, 2026

Who We Are

This notice explains how UK Docks Marine Services North Limited collects, uses and protects personal information. It applies to our website and to anyone who contacts us, applies for a job, visits or works at one of our sites, or deals with us as a customer or supplier.

UK Docks Marine Services North Limited is the data controller for your personal information. We are registered in England and Wales under company number 01297874. Our registered office is River Drive, South Shields, Tyne and Wear, NE33 1LH.

Our Operations Director is our Data Protection Officer. You can contact them about anything in this notice:

•      by email: enquiries@ukdocks.com, marked for the attention of the Data Protection Officer

•      by phone: +44 (0) 191 456 9375

•      by post: Data Protection Officer, UK Docks Marine Services North Limited, River Drive, South Shields, Tyne and Wear, NE33 1LH

Information We Collect

We only collect the information we need for each purpose. Most of it comes directly from you:

Who you are → What we collect → Where it comes from

  • Website visitors → Device and browser information, pages visited and how you found the site, collected through cookies → Your device, when you use our website

  • People who contact us → Name, organisation, job title, email address, phone number and what you tell us in your message → You

  • Newsletter subscribers → Email address → You

  • Customers and suppliers → Names, job titles and work contact details of people at customer and supplier organisations, and records of our dealings with them → You or your organisation

  • Job applicants → Name, contact details, CV, work history, qualifications, right to work documents, interview notes and references → You, your referees and recruitment agencies you use

  • Applicants for defence work → Identity and background information needed for Baseline Personnel Security Standard (BPSS) checks and, where a role requires it, national security vetting → You and the government bodies that carry out the checks

  • Contractors and site visitors → Name, employer, contact details, emergency contact, induction and training records, competency certificates and site sign-in times → You, your employer and our Site Induction portal

  • Anyone at our sites → CCTV images → Our CCTV cameras

We do not ask for special category information such as health details unless it is needed. Examples are reasonable adjustments for an interview or health and safety information for working on site. Where we do, we explain why at the time.

How We Use Your Information and Our Lawful Basis

UK data protection law says we must have a lawful basis for each use of your information. The table sets out what we do and the basis we rely on:

What we use it for → Lawful basis

  • Replying to your enquiry and preparing quotes → Taking steps you have asked for before a contract, or our legitimate interest in answering enquiries about our services

  • Providing our services and managing contracts with customers and suppliers → Performing a contract, or our legitimate interest in running our business where the contract is with your employer

  • Sending our newsletter → Your consent, which you can withdraw at any time

  • Measuring how our website is used → Your consent, given through the cookie banner

  • Assessing job applications and making offers → Taking steps before an employment contract, and our legitimate interest in recruiting the right people

  • Checking right to work → Legal obligation

  • BPSS checks and vetting for defence roles → Legal obligation and our legitimate interest in meeting the security requirements of our defence contracts

  • Site inductions, sign-in and managing who is on site → Legal obligation under health and safety law, and our legitimate interest in keeping our sites safe and secure

  • CCTV at our sites → Our legitimate interest in protecting people, property and vessels, and in preventing and detecting crime → Keeping our systems and information secure

  • Our legitimate interest in protecting our business, customers and staff → Meeting legal, tax, accounting and regulatory requirements → Legal obligation

  • Making or defending legal claims → Our legitimate interest in protecting our legal rights → Where we rely on legitimate interests, we have balanced our interests against yours. You can ask us for details of that assessment.

Where we handle special category information, such as health information, we do so under Article 9 of the UK GDPR and Schedule 1 of the Data Protection Act 2018. This includes meeting our employment and health and safety obligations. Where vetting involves criminal record information, we handle it only as Schedule 1 of the Data Protection Act 2018 allows.

We do not make decisions about you using only automated means.

Cookies

Cookies are small files saved on your device when you visit a website. Our website is hosted by Squarespace and uses the cookies below.

Cookie → What it does → Type → How long it lasts

crumb

Protects forms on the site against misuse

Necessary

Until you close your browser

ss_cvr

Counts unique visitors and how they use the site

Analytics

2 years

ss_cvt

Tracks a single visit to the site

Analytics

30 minutes

Necessary cookies are needed for the site to work, so they are always on. We only set analytics cookies if you accept them in the cookie banner. You can change your choice at any time through the cookie settings link at the bottom of each page, or by deleting cookies in your browser settings.

Our website links to other sites, such as LinkedIn and our Site Induction portal. Those sites have their own privacy and cookie notices.

Who We Share Information With

We never sell your personal information. We only share it where we need to, and only what is needed. We may share it with:

•      other UK Docks group companies, where they help deliver our services or manage our sites

•      suppliers who process information for us, such as our website host, email and IT providers, IT support and cyber security providers, and the provider of our Site Induction portal

•      recruitment agencies you have applied through, and referees you have named

•      government bodies that carry out BPSS checks and security vetting for defence roles

•      customers, including the Ministry of Defence, where they need details of people working on their vessels or projects for security or access reasons

•      our insurers and professional advisers, such as lawyers and accountants

•      HMRC, the police, the Health and Safety Executive and other authorities, where the law requires it or allows it to prevent or detect crime

Suppliers who process information for us must follow our instructions under a written contract. They may not use it for their own purposes and must keep it secure.

International Transfers

We keep most information in the UK. Some of our suppliers store or access information outside the UK. For example, our website host Squarespace may process information in the United States.

When information leaves the UK, we make sure it is protected by one of the following:

•      UK adequacy regulations, which confirm the receiving country protects personal information to UK standards. For transfers to the United States, this includes the UK Extension to the EU-US Data Privacy Framework.

•      the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses

You can contact us for more information about these safeguards.

How Long We Keep Information

We keep information only for as long as we need it, then delete or destroy it securely.

Information

How long we keep it

Enquiries and customer and supplier contact details

6 years after our last contact

Contract, financial and tax records

6 years after the end of the financial year they relate to

Newsletter subscriptions

Until you unsubscribe

Unsuccessful job applications

6 months after the role is filled

Successful job applications

Moved to your employment record

BPSS and vetting records

For as long as you work on the contract that requires them, then as that contract's security requirements say

Contractor and visitor induction records

3 years after your last site visit

CCTV footage

30 days, then automatically overwritten

We may keep information for longer where we need it for a legal claim, an investigation or an incident, or where the law requires it.

How We Protect Information

Our information security management system is certified to ISO/IEC 27001. We use technical and organisational measures to protect personal information, including:

•      access to information limited to staff who need it for their role

•      multi-factor authentication, encryption and continuous security monitoring

•      data protection and security training for all staff

•      security checks on suppliers who handle information for us

•      a process for responding to security incidents

If a breach is likely to put your rights at risk, we will report it to the Information Commissioner's Office within 72 hours. If the risk to you is high, we will also tell you without delay.

Your Rights

You have the following rights over your personal information:

•      Access: ask for a copy of the information we hold about you

•      Rectification: ask us to correct information that is wrong or incomplete

•      Erasure: ask us to delete your information

•      Restriction: ask us to limit how we use your information

•      Objection: object to us using your information where we rely on legitimate interests

•      Portability: ask for information you gave us in a format you can reuse elsewhere

•      Withdraw consent: where we rely on your consent, withdraw it at any time

Some rights only apply in certain situations. For example, we may need to keep information to meet a legal obligation. If we cannot do what you ask, we will explain why.

To use any of these rights, contact our Data Protection Officer using the details in Who We Are. We may ask you to confirm your identity before we act. There is normally no charge. We will reply within one month, or within three months for complex requests, in which case we will tell you within the first month.

Complaints

If you are unhappy with how we have handled your information, please contact our Data Protection Officer first so we can try to put it right.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection:

•      website: ico.org.uk/make-a-complaint

•      phone: 0303 123 1113

•      post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Changes to This Notice

We review this notice at least once a year and when the way we use personal information changes. The latest version is always on this page.

This notice was last updated on 31 October 2026.