

Privacy Policy
Updates 9th April 2026
SRS Ltd is committed to protecting the privacy and personal data of all individuals who interact with our business. This Privacy Policy explains who we are, what personal data we collect, how we use it, how we protect it, how long we retain it and what your rights are in relation to it.
This Privacy Policy applies to all personal data collected and processed by SRS Ltd in connection with our website, enquiries, quotations, orders, contracts, marketing communications, recruitment and all other business activities. It applies to customers, prospective customers, suppliers, manufacturing partners, website visitors, job applicants and any other individual whose personal data we process.
SRS Ltd is the data controller for the personal data described in this Privacy Policy. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and all associated legislation as applicable in Northern Ireland.
Please read this Privacy Policy carefully. If you have any questions about how we handle your personal data, please contact us using the details set out in Section 15.
​
1. WHO WE ARE
SRS Ltd is a commercial agency and machinery services company registered in Northern Ireland, operating as a specialist representative for European concrete production machinery manufacturers across the United Kingdom and Ireland.
For the purposes of UK data protection law, SRS Ltd is the data controller in respect of personal data collected and processed through our business activities. Our registered address is 9 Mallabeny Road, Clogher, County Tyrone, Northern Ireland, BT76 0XP.
2. PERSONAL DATA WE COLLECT
We collect personal data only where it is necessary for a legitimate business purpose. The categories of personal data we may collect and process are set out below.
2.1 Customers and Prospective Customers
When you contact us, request a quotation, place an order or engage our services, we may collect:
-
Full name and job title
-
Business name, address and registered number
-
VAT number
-
Email address and telephone number
-
Correspondence and communication records
-
Order history, quotation records and contract documentation
-
Payment information including bank details where relevant to transactions
-
Site and project information provided in connection with enquiries or orders
2.2 Website Visitors
When you visit our website, we may collect:
-
IP address and browser type
-
Pages visited, time spent on pages and navigation behaviour
-
Referring website or search terms used to find our website
-
Device type and operating system
This information is collected automatically through cookies and analytics tools. Please refer to Section 11 for further information on cookies.
2.3 Marketing and Mailing List Subscribers
Where you have subscribed to our mailing list or opted in to receive marketing communications, we may collect:
-
Full name and job title
-
Business name and address
-
Email address and telephone number
-
Country of residence or business
-
Marketing preferences and communication history
2.4 Job Applicants
Where you apply for a position with SRS Ltd, we may collect:
-
Full name, address and contact details
-
Curriculum vitae and covering letter
-
Details of qualifications, employment history and professional experience
-
References and referee details
-
Any other information you provide voluntarily as part of your application
2.5 Manufacturing Partners and Suppliers
In connection with our agency and commercial relationships, we may collect personal data relating to contacts at our manufacturing partners and suppliers, including:
-
Name and job title
-
Business email address and telephone number
-
Correspondence and communication records
2.6 Special Categories of Personal Data
We do not intentionally collect or process special categories of personal data such as data relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, sexual orientation or criminal convictions. If you believe you have submitted such data to us in error, please contact us immediately so we can arrange for its deletion.
3. HOW WE COLLECT YOUR PERSONAL DATA
We collect personal data through the following means:
-
Directly from you when you contact us by telephone, email, post or through our website contact or enquiry forms
-
When you request a quotation, place an order or enter into a contract with us
-
When you subscribe to our mailing list or opt in to receive marketing communications
-
When you apply for a position with SRS Ltd
-
Through our website using cookies and analytics tools
-
From our manufacturing partners where they share contact details of their customer or prospect contacts in the course of our agency relationship
-
From publicly available sources such as company websites, LinkedIn and industry directories where relevant to our business activities
4. HOW WE USE YOUR PERSONAL DATA AND OUR LAWFUL BASIS
We process personal data only where we have a lawful basis for doing so under UK GDPR. The lawful bases we rely upon and the purposes for which we use your personal data are set out below.
4.1 Performance of a Contract (Article 6(1)(b) UK GDPR)
We process personal data where it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes:
-
Processing enquiries, preparing quotations and managing orders
-
Coordinating with manufacturing partners on your behalf
-
Managing delivery, installation and commissioning arrangements
-
Processing payments and issuing invoices
-
Providing aftersales support and managing warranty claims
4.2 Legitimate Interests (Article 6(1)(f) UK GDPR)
We process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests. This includes:
-
Maintaining records of business communications and transactions
-
Managing and developing our relationships with customers, prospective customers and manufacturing partners
-
Monitoring, measuring and improving our products and services
-
Protecting our business against fraud, misrepresentation and legal claims
-
Operating and improving our website
-
Sending relevant business communications to existing customers and contacts
4.3 Compliance with Legal Obligations (Article 6(1)(c) UK GDPR)
We process personal data where it is necessary to comply with our legal and regulatory obligations. This includes:
-
Maintaining financial and accounting records as required by law
-
Complying with tax, VAT and regulatory reporting obligations
-
Responding to lawful requests from regulatory authorities, law enforcement or courts
-
Complying with our obligations under employment law in respect of job applicants
4.4 Consent (Article 6(1)(a) UK GDPR)
Where we rely on your consent to process personal data, we will ask for your clear and specific consent before processing. This applies to:
-
Sending marketing emails, newsletters and promotional communications to individuals who have subscribed or opted in
-
Use of non-essential cookies on our website
You have the right to withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. To withdraw consent, please contact us using the details in Section 15 or use the unsubscribe link in any marketing email.
5. MARKETING COMMUNICATIONS
We will only send you marketing communications by email, telephone or post where you have specifically opted in to receive them, or where we have a legitimate interest in contacting you as an existing customer or business contact in relation to products or services similar to those you have previously engaged with.
You can opt out of marketing communications at any time by:
Clicking the unsubscribe link in any marketing email
Emailing us at info@srsmachinery.com
Telephoning us on +44 (0) 7712 000981
Writing to us at SRS Ltd, 9 Mallabeny Road, Clogher, County Tyrone, Northern Ireland, BT76 0XP
We will process your opt-out request promptly and in any event within 10 working days. Please note that opting out of marketing communications does not affect our ability to send you transactional communications such as order confirmations, invoices or service notifications.
6. DISCLOSURE AND SHARING OF YOUR PERSONAL DATA
We do not sell, rent or trade personal data to third parties. We may share personal data in the following circumstances:
6.1 Manufacturing Partners
Where you place an enquiry or order in relation to specific machinery or equipment, we will share relevant personal and business data with the appropriate manufacturing partner to enable them to fulfil the order, provide technical support or process warranty claims. Our manufacturing partners are located within and outside the United Kingdom and European Economic Area. Please refer to Section 8 for further information on international transfers.
6.2 Third Party Service Providers
We engage carefully selected third party service providers who process personal data on our behalf in accordance with our instructions. These providers are not permitted to use personal data for their own purposes or to transfer it to further third parties without our authorisation. Our current third party service providers include:
-
Mailchimp (email marketing platform)
-
Brightpay (payroll processing)
-
Wix (website hosting and management)
-
Google Analytics (website analytics)
-
Microsoft 365 (email and document management)
-
Cloud-based file transfer services used to share large documents or project files with your consent
We may update this list from time to time as our service providers change. The current list will always be reflected in this Privacy Policy.
6.3 Legal and Regulatory Requirements
We may disclose personal data where required to do so by law, regulation, court order or at the request of a regulatory authority or law enforcement agency. We will notify you of any such disclosure where we are legally permitted to do so.
6.4 Business Transfer
In the event that SRS Ltd is subject to a merger, acquisition, restructuring or sale of all or part of its business, personal data held by us may be transferred to the new owners as part of that transaction. Any such transfer will be subject to commitments of confidentiality and the new controller will be required to process personal data in a manner consistent with this Privacy Policy.
7. AUTOMATED DECISION MAKING AND PROFILING
SRS Ltd does not use automated decision-making processes, including profiling, in relation to any personal data we hold. All decisions affecting individuals are made by a human being with appropriate authority and context.
8. INTERNATIONAL DATA TRANSFERS
Some of our manufacturing partners and third party service providers are based outside the United Kingdom and the European Economic Area. Where personal data is transferred to a country that does not provide an equivalent level of data protection to the United Kingdom, we take steps to ensure that appropriate safeguards are in place to protect that data.
These safeguards may include reliance on adequacy decisions made by the UK Government, use of the International Data Transfer Agreement approved by the Information Commissioner's Office, or other transfer mechanisms recognised under UK GDPR.
Where you would like further information about the specific safeguards in place for international transfers of your personal data, please contact us using the details in Section 15.
9. HOW LONG WE RETAIN YOUR PERSONAL DATA
We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by law or regulation. Our retention periods are as follows:
Customer and Transaction Records
Records relating to quotations, orders, contracts, invoices and correspondence are retained for a minimum of 7 years from the date of the transaction to comply with our legal and financial reporting obligations under UK law.
Enquiry and Prospective Customer Records
Where you have submitted an enquiry or requested further information without proceeding to a transaction, your details will be retained for a period of up to 36 months from the date of last contact, or up to 48 months where there is an ongoing or reasonably anticipated business relationship. This is to accommodate the normal capital equipment sales cycle and to allow us to monitor and respond to ongoing interest in our products and services.
Marketing and Mailing List Records
Personal data held for marketing purposes will be retained until you notify us that you no longer wish to receive marketing communications by unsubscribing, emailing or writing to us. Following receipt of an opt-out request, we will retain a suppression record of your contact details to ensure we do not contact you again in error.
Job Applicant Records
Personal data submitted in connection with a job application will be retained for a period of no longer than 12 months from the end of the relevant recruitment process. Where you have consented to us retaining your details for consideration for future roles, we will retain your data for up to 24 months unless you withdraw your consent earlier.
Website Analytics Data
Anonymous website analytics data collected through Google Analytics is retained in accordance with Google's standard retention settings, which can be reviewed at Google's Privacy Policy. This data is anonymous and cannot be used to identify individual visitors.
At the end of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our internal data retention and disposal procedures.
10. SECURITY OF YOUR PERSONAL DATA
SRS Ltd takes the security of personal data seriously and implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. Our security measures include:
-
Encryption of sensitive personal data in transit and at rest
-
Storage of personal data on secure servers protected by firewalls and access controls
-
Restriction of access to personal data to employees and contractors who have a legitimate need to access it in the course of their duties
-
Password protection and multi-factor authentication for access to systems containing personal data
-
Physical security measures including locked filing cabinets for paper-based records
-
Regular review of our security practices and procedures
Whilst we take all reasonable precautions to protect personal data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security and any personal data submitted to us is done so at your own risk. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach and will notify affected individuals where required by law.
11. COOKIES AND WEBSITE ANALYTICS
Our website uses cookies and similar tracking technologies to enhance your experience, analyse website traffic and support our marketing activities. A cookie is a small text file placed on your device when you visit a website.
11.1 Types of Cookies We Use
Strictly necessary cookies are essential for the website to function correctly and cannot be disabled. They do not require your consent.
Analytics cookies are used to collect anonymous information about how visitors use our website, including which pages are visited most frequently and how visitors navigate the site. We use Google Analytics for this purpose. These cookies require your consent.
Marketing and preference cookies may be used to deliver content relevant to your interests and to remember your preferences. These cookies require your consent.
11.2 Managing Cookies
When you first visit our website you will be asked to consent to the use of non-essential cookies. You may withdraw or adjust your cookie consent at any time through the cookie settings on our website. You may also manage cookies through your browser settings, although disabling certain cookies may affect the functionality of our website.
For further information about cookies and how to manage them, please visit www.aboutcookies.org or www.allaboutcookies.org.
12. YOUR RIGHTS UNDER UK GDPR
Under UK data protection law you have the following rights in relation to your personal data. We will respond to all valid requests within one month of receipt. In complex cases or where we receive a high volume of requests, we may extend this period by a further two months, in which case we will notify you of the extension and the reasons for it.
12.1 Right of Access
You have the right to request a copy of the personal data we hold about you and information about how we process it. This is known as a Subject Access Request. There is no charge for making a Subject Access Request unless the request is manifestly unfounded or excessive.
12.2 Right to Rectification
You have the right to request that we correct any personal data we hold about you that is inaccurate or incomplete. We will correct any such data promptly upon receiving your request.
12.3 Right to Erasure
You have the right to request that we delete personal data we hold about you in certain circumstances, including where the data is no longer necessary for the purpose for which it was collected, where you withdraw consent and there is no other lawful basis for processing, or where you object to processing and there are no overriding legitimate grounds. This right does not apply where we are required to retain the data to comply with a legal obligation.
12.4 Right to Restriction of Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate grounds.
12.5 Right to Data Portability
Where we process your personal data on the basis of your consent or in the performance of a contract, and the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have it transmitted to another controller where technically feasible.
12.6 Right to Object
You have the right to object at any time to the processing of your personal data where we rely on legitimate interests as our lawful basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests or the processing is necessary for legal claims. You have an absolute right to object to processing for direct marketing purposes.
12.7 Rights in Relation to Automated Decision Making
As stated in Section 7, SRS Ltd does not use automated decision making or profiling. In the event that this changes, you will have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects.
12.8 Right to Withdraw Consent
Where we rely on your consent as the lawful basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
To exercise any of your rights, please contact us using the details set out in Section 15. We may need to verify your identity before processing your request.
13. COMPLAINTS
If you have a concern about the way in which SRS Ltd has collected or handled your personal data, we ask that you contact us in the first instance so that we can investigate and respond to your concern. We will acknowledge your complaint within 5 working days and aim to provide a full response within one month.
If you are not satisfied with our response, or if you believe that we are processing your personal data unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), which is the supervisory authority for data protection in the United Kingdom.
The ICO can be contacted at:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk
14. THIRD PARTY WEBSITES
Our website may contain links to third party websites, including those of our manufacturing partners. This Privacy Policy applies only to SRS Ltd and our website. We are not responsible for the privacy practices of any third party website and we encourage you to read the privacy policy of any website you visit before submitting personal data.
15. HOW TO CONTACT US
If you have any questions about this Privacy Policy, wish to exercise any of your rights, want to make a Subject Access Request or have a concern about our data handling practices, please contact us by any of the following means:
Email: info@srsmachinery.com
Phone: +44 (0) 7712 000981
Post: SRS Ltd, 9 Mallabeny Road, Clogher, County Tyrone, Northern Ireland, BT76 0XP
Please mark any written correspondence for the attention of the Data Controller.
16. UPDATES TO THIS PRIVACY POLICY
SRS Ltd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in the law or regulatory guidance. The date of the most recent review is shown at the top of this document.
Where we make material changes to this Privacy Policy we will take reasonable steps to bring those changes to your attention, which may include displaying a notice on our website or contacting you directly where appropriate. We recommend that you review this Privacy Policy periodically to stay informed about how we protect your personal data.
Continued use of our website or services following publication of an updated Privacy Policy constitutes acceptance of the revised terms.
This Privacy Policy was prepared in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 as applicable in Northern Ireland. SRS Ltd recommends that all parties seek independent legal advice in relation to data protection compliance. This document does not constitute legal advice.
