This policy explains what personal data TIA Infrastructure Limited collects, why we collect it, how we use and protect it, and what your rights are. We are committed to handling your data transparently and in accordance with UK data protection law.
Who We Are
TIA Infrastructure Limited is a company registered in England and Wales. We are a UK specialist in technical infrastructure — delivering expert project management, BIM and digital design, energy management advisory, security, CCTV and access control, environmental monitoring, battery monitoring, and maintenance and support services across the United Kingdom.
We are the UK subsidiary of the TIA Technologies Group, whose parent entity — TIA Technologies Limited — operates from Nigeria (tiatechnologiesltd.com). TIA Infrastructure Limited is independently registered in England and Wales and operates its UK business under separate governance.
We are the data controller for the personal data we collect and process in connection with our business and this website.
| Company name | TIA Infrastructure Limited |
| Registered in | England & Wales |
| Company number | 17165344 |
| Registered address | 26a Broad Rd, Bristol, BS15 1HZ |
| info@tiainfrastructure.co.uk | |
| Phone | (+44) 734-569-6887 |
| Office hours | Monday–Friday, 08:00–17:00 |
| Website | tiainfrastructure.co.uk |
| ICO registration | 00013818844 — registered at ico.org.uk |
By using our website or engaging our services, you confirm you have read and understood how we handle your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).
What Personal Data We Collect
We only collect data that is genuinely necessary for the purposes described in this policy.
Data you give us directly
- Your name, job title and organisation name
- Your email address, phone number and postal address
- Details of your project or service requirement — submitted via our website contact form, appointment booking form, email or telephone
- Your preferred service type, selected when booking an appointment through our website
- Payment information — processed securely by our payment provider; we do not store card details
- Any correspondence you send us — emails, telephone call notes, form submissions
- Newsletter subscription — if you subscribe via our website, we collect your email address only
- Feedback, reviews or testimonials you provide
Data collected automatically when you visit our website
- Your IP address and approximate location (country or region level only)
- Browser type, operating system and device type
- Pages visited, time on site, referral source and navigation path
- Cookie data — see Section 9 for full details
- YouTube video interaction data — our homepage embeds a YouTube video; if you watch it, YouTube's own privacy policy applies to data collected by that player
Data collected in connection with our services
When you engage us to carry out work, we may need additional information depending on the service:
| Service | Additional data we may collect |
|---|---|
| Consultancy & Project Management | Project documents, programme data, correspondence, contact details of relevant members of your project team and stakeholders |
| BIM & Digital Design | Project drawings, BIM Execution Plans, site information, CDE access details, contact details of your design team members |
| Energy Management Advisory | Energy consumption data, half-hourly supply data, site address, meter reference numbers, contact details for energy manager or facilities team |
| Security, CCTV & Access Control (Dahua systems) | Site address, site layout, camera coverage plan, access control user list (where provided by you for configuration). We install systems — we do not operate or store footage. See Section 6. |
| Environmental Monitoring (AKCP / NTI) | Server room or data centre layout, IT infrastructure details, alert contact details for IT manager or facilities manager |
| Battery Monitoring (PowerShield) | Site address, UPS make/model/serial numbers, battery string configuration, contact details for data centre or facilities team |
| Maintenance & Support contracts | Site address, asset register, PPM visit history, test results and maintenance reports |
Data about third parties you share with us
If you share details of other individuals with us (for example, a tenant, site manager or project team member), you confirm that you have a lawful basis for sharing that information and the individual has been made aware their details will be passed to us.
Special category data
We do not intentionally collect special category personal data (such as health information, ethnic origin or biometric data). If any such data reaches us incidentally, we will delete it unless there is a clear legal basis to retain it.
Lawful Basis for Processing
UK GDPR requires a documented lawful basis for every category of processing. The basis we rely on for each activity is set out below.
| Processing activity | Lawful basis | Detail |
|---|---|---|
| Responding to enquiries and quotations | Legitimate interests | It is in our legitimate interests and yours to respond to your enquiry promptly. |
| Appointment bookings via the website | Legitimate interests | Processing your appointment request to schedule a consultation or site visit. |
| Performing contracted services | Contract | Necessary to carry out the services you have engaged us to deliver. |
| Invoicing and payment | Contract Legal obligation | Necessary to fulfil the contract and comply with HMRC accounting requirements. |
| NICEIC notification of notifiable electrical works | Legal obligation | Self-certification under Building Regulations requires notification to our competent person scheme. |
| Maintenance visit records and reports | Contract Legal obligation | Required by contract, NICEIC registration, and in some cases statute (e.g. fire alarm records under BS 5839-1). |
| Newsletter subscription | Consent | You have opted in by subscribing via the website. You may unsubscribe at any time. |
| Service updates and contract renewal reminders | Contract Legitimate interests | Necessary to maintain the service relationship. Separate from marketing. |
| Marketing communications (non-newsletter) | Consent | Sent only to those who have explicitly opted in. Withdraw at any time. |
| Website analytics | Legitimate interests | Improving our website. Data is anonymised and aggregated. |
| Legal and regulatory compliance | Legal obligation | HMRC records, ICO registration, health and safety records and other statutory requirements. |
How We Use Your Personal Data
Service delivery
- To respond to your enquiry, book an appointment and discuss your project or service requirement
- To prepare and issue quotations, proposals and Terms of Engagement
- To carry out the services you have engaged us to perform
- To issue test certificates, maintenance reports and other compliance documentation
- To notify regulatory bodies as required — NICEIC, and DNO notifications where applicable
- To manage ongoing maintenance and support contracts — scheduling visits, issuing PPM reports and renewal reminders
- To configure access control user lists or environmental monitoring alert contacts where you have provided that data for the purpose of system setup
Administration and finance
- To issue invoices and process payments
- To maintain accounting records in compliance with HMRC requirements
- To manage our contractual obligations and deal with complaints or disputes
Communication and marketing
- To send you our newsletter — if you have subscribed via our website. You may unsubscribe at any time using the link in any newsletter.
- To send service updates, maintenance reminders and contract renewal notices relevant to services you receive
- To send marketing communications — only to those who have explicitly opted in beyond newsletter subscription
- To share content via our social media channels (@tiainfrastructure) — no personal data about you is shared on our social channels without your explicit consent
Website improvement
- To analyse website traffic and usage patterns in aggregate, anonymised form
- To improve the content, structure and performance of tiainfrastructure.co.uk
Who We Share Your Data With
We share personal data only where necessary to perform our services, comply with a legal obligation, or operate our business. We do not sell your data and do not share it for third-party marketing purposes.
| Recipient | Why we share | Basis |
|---|---|---|
| NICEIC / Certsure | Notification of notifiable electrical works under our competent person scheme. Includes property address and description of work. | Legal obligation |
| Dahua Technology UK | Where required for product registration, warranty processing or KIP (Key Installation Partner) programme reporting in connection with CCTV or access control installations. | Contract |
| AKCP / NTI Technology | For product registration or technical support in connection with environmental monitoring deployments. | Contract |
| PowerShield | For partner programme reporting, product registration or PowerShield Assure cloud setup in connection with battery monitoring deployments. | Contract |
| Xero (accounting software) | Our invoicing and accounting platform. Your name, company and address appear on invoices held in Xero. UK/EU GDPR compliant. | Contract |
| Microsoft 365 | Email, calendar, Teams and OneDrive document storage. All data held within Microsoft's UK/EU data centres. | Legitimate interests |
| CookieAdmin Pro (cookie consent platform) | Manages cookie consent preferences for visitors to tiainfrastructure.co.uk. Records your consent choices. See Section 9. | Legal obligation |
| Google Analytics | Anonymised, aggregated website analytics only. IP addresses are anonymised. No personal identification. | Legitimate interests |
| YouTube (Google LLC) | Our website embeds a YouTube video. If you interact with the player, YouTube may set cookies and collect data governed by Google's Privacy Policy. | Legitimate interests |
| Newsletter / email marketing platform | If you subscribe to our newsletter, your email address is held by our email marketing provider to send and manage newsletters. | Consent |
| Professional indemnity insurer | In the event of a claim, relevant correspondence and project data may be shared with our insurer. | Legal obligation |
| HMRC | Tax returns, VAT records and other statutory financial reporting. | Legal obligation |
| Subcontractors (where applicable) | Where specialist subcontractors assist with a project, they receive only the data needed for their role and are bound by confidentiality obligations. | Contract |
| TIA Technologies Limited (parent group) | We may share anonymised project capability data with our parent group for group reporting purposes. No personal data about our UK clients is shared with the parent group without a specific lawful basis. | Legitimate interests |
Security, CCTV & Access Control — A Note on Data Protection
TIA Infrastructure designs and installs Dahua IP camera, HD-CVI, access control and video door entry systems for clients. We do not operate, access or store footage from any system we install. Once handed over, you — the client — become the data controller for any footage or access control data captured by your system.
If you commission a security system from us, the following obligations apply to you as the operator:
- ICO registration You must register with the Information Commissioner's Office as a data controller if your CCTV captures images of identifiable individuals. The annual fee is £40–£55 for most small organisations. Register at ico.org.uk.
- Lawful basis You must document a lawful basis for operating CCTV. For most businesses this is legitimate interests, which requires a completed Legitimate Interests Assessment (LIA) to be retained.
- Retention period Footage must not be kept longer than necessary — typically 30 days for most commercial applications, unless an active investigation requires longer retention.
- Signage Clearly visible signs must be displayed at all camera locations stating that CCTV is in operation, who is responsible and how individuals can access the footage policy.
- Access control data If your access control system records entry/exit events linked to named individuals (cardholders), this constitutes personal data under UK GDPR and must be managed accordingly — including retention limits and access restrictions.
- Subject Access Requests Individuals have the right to request footage of themselves. You must be able to respond within one calendar month.
How Long We Keep Your Data
We retain personal data only as long as is necessary for the purpose it was collected and in accordance with our legal obligations.
| Data type | Retention period | Reason |
|---|---|---|
| Enquiries and appointment requests not resulting in a contract | 12 months from last contact | Deleted after this period unless the enquiry is renewed |
| Client contact details and project correspondence | 6 years after end of last engagement | Limitation Act 1980 — contractual claims can be made up to 6 years after the event |
| Electrical and maintenance test certificates | 6 years minimum; life of installation recommended | NICEIC registration requirements; IET recommends retention for the life of the installation |
| Invoices and financial records | 6 years after end of financial year | HMRC requirement under the Companies Act 2006 and tax legislation |
| Maintenance visit reports and PPM records | 6 years from date of report | Limitation Act; statutory requirements for fire and electrical records |
| Fire alarm maintenance records | 3 years minimum | BS 5839-1 industry standard for fire system records |
| Health and safety records (risk assessments, RAMS) | 6 years minimum | HSE guidance and Limitation Act 1980 |
| CCTV and access control installation documentation | 6 years from handover | Limitation Act; potential warranty or defects claims |
| Battery and environmental monitoring records | 6 years from date of report | Limitation Act; contract and warranty records |
| Website analytics data | 26 months | Google Analytics default; data is anonymised and aggregated |
| Newsletter subscription and consent records | Until unsubscribed, then deleted within 30 days | UK GDPR requirement to evidence and honour consent |
| Cookie consent records (CookieAdmin Pro) | 12 months or until preference is updated | UK GDPR requirement to evidence consent for non-essential cookies |
When data is no longer required, we securely delete or anonymise it. Paper records are shredded. Electronic records are permanently deleted from all systems, including backups, within 30 days of the deletion decision.
Your Rights Under UK GDPR
You have the following rights in relation to the personal data we hold about you as an individual. These rights do not apply to data held about a company as a legal entity.
Right of access
Request a copy of all personal data we hold about you. We respond within one calendar month at no charge. Email us with the subject line 'Subject Access Request' and proof of identity.
Right to rectification
If data we hold about you is inaccurate or incomplete, you can ask us to correct it. We will do so within one calendar month.
Right to erasure
Ask us to delete your personal data. We will comply unless we are required to retain it by law — for example, financial records or electrical certificates. Where we cannot delete, we will explain why.
Right to restrict processing
Ask us to restrict how we use your data — for example, while you dispute its accuracy. We will stop processing (other than storage) until resolved.
Right to data portability
Where we process your data by automated means and on the basis of consent or contract, you can ask us to provide it in a structured, machine-readable format.
Right to object
Object to processing based on our legitimate interests. We will stop unless we can demonstrate compelling grounds that override your rights, or the processing is required for legal claims.
Right to withdraw consent
Where we process your data based on consent (e.g. newsletter subscription), you can withdraw at any time via the unsubscribe link or by emailing us. Withdrawal does not affect the lawfulness of prior processing.
Right to complain to the ICO
If you are unhappy with how we handle your data, you can complain to the ICO. We would ask that you contact us first so we can try to resolve the matter directly.
To exercise any right, email info@tiainfrastructure.co.uk or call (+44) 734-569-6887. We may ask for proof of identity. We always respond within one calendar month at no charge.
Information Commissioner's Office
Website: ico.org.uk · Helpline: 0303 123 1113
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Cookies
Our website uses cookies managed by CookieAdmin Pro. When you first visit tiainfrastructure.co.uk, a cookie consent banner appears asking for your preferences. You can customise, accept or reject non-essential cookies at any time using the consent tool, which is accessible via the icon in the bottom-right corner of every page.
| Category | Purpose | Can you refuse? |
|---|---|---|
| Necessary | Essential for the website to function — your cookie consent preferences, secure login sessions and security tokens. No personal data is collected for marketing or tracking purposes by these cookies. | No — required for the site to work |
| Functional | Enable features such as content sharing on social media, feedback tools and third-party embedded tools. May allow third parties to track your activity. | Yes — manage via the consent banner |
| Analytical | Track visitor interactions and provide insights on metrics such as visitor count, bounce rate, session duration and traffic sources. Used to improve our website. IP addresses are anonymised. | Yes — manage via the consent banner |
| Advertisement | Deliver personalised advertisements based on your browsing behaviour and analyse the effectiveness of ad campaigns. We do not currently run paid advertising on our website, but this category may be set by embedded third-party tools. | Yes — manage via the consent banner |
| Unclassified | Cookies that are in the process of being classified. Their purpose will be confirmed and this policy updated accordingly. | Yes — manage via the consent banner |
You can also manage cookies through your browser settings. Note that disabling cookies may affect the functionality of some parts of our website.
How We Protect Your Data
We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration.
Technical measures
- All data in transit between your browser and our website is encrypted using TLS (HTTPS)
- Email is delivered via Microsoft 365 with enterprise-grade security and encryption in transit
- Documents containing personal data are stored in Microsoft OneDrive with access restricted to authorised TIA Infrastructure personnel only
- All devices used to access business data are password-protected with multi-factor authentication (MFA) enabled
- Software and plugins — including our WordPress installation — are kept up to date with security patches applied promptly
Organisational measures
- Access to personal data is restricted to individuals who need it to perform their role
- All subcontractors who handle personal data on our behalf are bound by confidentiality obligations
- Paper documents containing personal data are stored securely and shredded when no longer needed
- We review our data security practices annually
Data breach procedure
In the event of a personal data breach likely to result in a risk to your rights and freedoms, we are legally required to notify the ICO within 72 hours. If there is a high risk, we will also notify you directly without undue delay. To report a suspected breach, contact us immediately at info@tiainfrastructure.co.uk.
International Data Transfers
We primarily store and process personal data within the United Kingdom. Where we use third-party services, we ensure that any transfers outside the UK are covered by appropriate safeguards.
Microsoft 365 and Google Analytics store data within UK or EU data centres and comply with UK GDPR through standard contractual clauses and adequacy decisions where applicable.
Regarding our parent group: TIA Technologies Limited is based in Nigeria. Personal data about our UK clients, contacts and website visitors is not shared with or transferred to TIA Technologies Limited. Our UK operations are managed independently under UK governance and UK data protection law.
Third-Party Links
Our website contains links to third-party websites, including our technology partners (Dahua Technology UK, AKCP, NTI Technology, PowerShield), our parent group website (tiatechnologiesltd.com), trade bodies, and regulatory bodies such as the ICO. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies before providing any personal data to them.
Our social media channels — @tiainfraltd — operate on third-party platforms (LinkedIn, Instagram, X and others). When you interact with our social media content, those platforms' own privacy policies apply to data they collect.
Children's Data
Our website and services are directed at business clients and adult consumers. We do not knowingly collect personal data from children under the age of 13. If you believe we have inadvertently collected such data, please contact us at info@tiainfrastructure.co.uk and we will delete it promptly.
Changes to This Privacy Policy
We review and update this policy at least annually, or whenever there is a material change to how we process personal data — for example, when a new service is launched or a new third-party tool is added to the website. The current version number and effective date are displayed at the top of this page.
If we make significant changes to how we use your personal data, we will notify you by email (where we hold your address) or by placing a prominent notice on our website.
Continued use of our website or services after any update constitutes acceptance of the revised policy.
How to Contact Us
For any questions, concerns or requests relating to this Privacy Policy or the personal data we hold, please contact us directly. We aim to respond to all data protection queries within one working day.
Data Controller — TIA Infrastructure Limited
If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office:
Information Commissioner's Office
Website: ico.org.uk · Helpline: 0303 123 1113
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF