top of page

Biosite privacy notice

EKFB is committed to protecting and maintaining your privacy. We comply with data protection laws that are applicable in respect of data processing within the UK. EKFB determines the purposes and the manner in which personal data is processed. This privacy notice sets out how we collect, use and protect your personal data and your rights in relation to your information.


Information we may collect from you

It is necessary for us to collect and process personal data about you to help manage the safety and security of our workforce and to effectively deliver the services we have engaged to provide. Categories of personal data we may collect include:

  • Name

  • Contact information

  • Date of birth

  • Nationality

  • Your employer details

  • Details about your emergency contact

  • Right to work documents

  • Health information

  • Your qualification records

  • Training records

  • Your profession

  • Whether you are an apprentice

  • Images about you

  • Fingerprint and facial recognition information

  • Your location

Where you have provided details about your emergency contacts, we ask that you obtain their consent to the use of that personal data.

How we will use your information

Your personal data will be used to administer your assignment with us. Your personal data may be used by us to:

  • Communicate with you

  • Perform an induction and enable training and/or briefings to you

  • Manage our workforce including ensuring we have relevant personnel on site to safely deliver services

  • Conduct Right to Work checks

  • Safeguard your safety and security

  • Assess your competence to perform your role

  • Monitor the conduct of our workforce and take appropriate action where necessary

  • Assist with site entry control

  • Assess your fitness to work and consider reasonable adjustments

  • Contact your next of kin in the event of an emergency

  • Assist with our apprenticeship programme

  • Provide information about our business, the site you’re working at and other information relevant to your role

  • Maintain and promote equality and diversity

  • Ensure security clearance is obtained where relevant

  • Send your data to third parties where necessary

  • Improve our business and gain insight into our workforce

We must have a legal reason to process your personal information. We will process your personal data under the following legal bases:

  • To meet our legitimate interest to improve our business and the services we provide as well as to safeguard your safety and security

  • To comply with our legal obligations

  • To comply with our obligations in the field of employment law in respect of biometric and health data

  • Where processing is necessary for reasons of substantial public interest in respect of diversity data

Automated decision making

EKFB does not carry out solely automated decision making (where decisions are made without human intervention). Some of our physical sites have entry barriers. While the overall decision as to whether members of the workforce are permitted on site is made by relevant people on site, the site entry management system assists us to implement that decision at the point of physical entry. You have the right to ask for alternative procedures and to challenge any decisions made.


Sharing information with other data processors

We will only pass your personal data to third parties where it is absolutely necessary. Before passing any of your information, we will assess the appropriateness and necessity of any disclosure and minimise the information we disclose. These third parties may include, where applicable:

  • Our client and business partners, including companies that provide a service to us

  • Companies that perform background and security vetting checks for us

  • Health professionals

  • Learning and training companies

  • Government agencies for apprenticeship schemes

  • The Health and Safety Executive

  • Government bodies, regulators, law enforcement agencies, fraud prevention agencies, courts/tribunals, insurers as well as our professional advisors (including legal advisors and auditors) where we are required to do so

We may disclose your personal data to any member of our organisation who need access to that information. In each case we require all parties to keep all data confidential and secure, and to use the personal data solely for a specified purpose.

We may need to process your data outside of the UK. Where your personal data is transferred outside of the UK, we will take all reasonable steps to ensure that appropriate safeguards are in place to protect your information. Your data may also be shared with another contractor if any of our projects are acquired by a third party, in which case personal data held by our site may be one of the transferred assets.

Information storage and retention

We have in place security measures to protect the security of your personal information and keep it confidential.

We review these measures regularly to make sure they remain appropriate.

Your personal data will be kept for as long as we have an active relationship with you, and taking into account our legal, regulatory and professional obligations. The retention period depends on the nature of the data collected and is held in accordance with our Retention schedule.


Your rights

You have rights regarding your personal information, including where relevant the right to correct, delete, restrict or object to our use of your data, and the right to request access to a copy of your data. You also have the right to object to our use of automated decision making and challenge any decisions made.

If you would like to discuss or exercise these rights, please contact us at

If you do not want us to process your data, then we may not be able to employ you on our site.

In the event that you have cause for complaint please contact us and we will follow up with you to resolve this. If you have a data privacy complaint, you also have the option to direct your complaint to the Information Commissioner’s Office (ICO). Their contact information is available on their website at

How to contact us

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to your site supervisor.

If you would like to contact our Data Protection Representative, please email

Change to our privacy notice

We keep our privacy notice under regular review. Please check back frequently to see any updates or changes to our privacy notice

bottom of page