Privacy Notice

1. Who is responsible for your personal data?

This Privacy Notice (“Notice”) applies whenever Balfour Beatty plc, its subsidiary companies, group affiliates, joint venture entities or associated businesses (referred to in this Notice as “Balfour Beatty”, “we” or “us”) processes any personal data about you, such as collecting it, using it and storing it, for the reasons listed under section 4 below. This includes the processing performed by Balfour Beatty Living Places Limited, who act as an agent of Balfour Beatty Group Limited, a subsidiary within Balfour Beatty plc’s group of companies. This Notice only applies to and does not extend to other websites that can be accessed via links on this website, such as social media platforms. If you decide to visit any of these linked websites, please note that they have their own privacy and cookie information which we recommend that you review.

This Notice sits alongside and supplements Balfour Beatty’s Employee Privacy Notice (found on Balfour Beatty’s Business Management System), Project Privacy Notice (found here: and Website Privacy Notice (found here: If there is any conflicting information between this Notice and these other privacy notices, then this Notice prevails.

Balfour Beatty is the controller of the personal data that we process as part of this Notice, unless otherwise stated. This Notice describes how and why we process your personal data and the rights you can exercise.

2. Personal data we collect and process about you

We currently collect and process the following personal data for the purposes described under section 4:

Category of personal data

Examples of what we collect and process

Browsing information Your IP address, operating system, browser type, browsing behaviour, cookie preferences and cookie identifiers.
Commercial information The company that you represent.
Contact information Your postal address, email address and telephone number.
Enquiry information The nature and contents of your request/enquiry and any associated attachments.
Fault information Location/unit number of the faulty streetlight, a description of the issue and any associated images.
Personal identification information Your name.
Survey information The area where you live and your satisfaction with the street lighting and associated services provided in your area.

3. How we obtain your personal data

The personal data we process is provided to us directly by you when you use this website.

4. Why we obtain your personal data

We obtain and process your personal data for the following reasons:

Purpose for processing


Analytics and website improvement We collect and aggregate browsing information to gain insights into how our website is being used and to identify areas for improvement.
Enquiry resolution and service improvement Using the contact forms on this website enables us to address your enquiries, consider your suggestions and ultimately enhance the delivery of our services to you.
Legal requests and claims We comply with requests for personal data made by relevant regulators, government departments and law enforcement authorities. We may also process your personal data for establishing, defending, or pursuing potential legal claims.
Security and fraud prevention We use the Google reCAPTCHA cookie on this website to carry out a risk analysis and prevent fraudulent or suspicious activity when you submit enquiries or report faults. This may involve the processing of your personal data.

We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects.

5. Sharing and transferring your personal data

Your personal data may be shared, where necessary, with:

Category of recipient

Reason for sharing your personal data

CAPTCHA service We share your personal data with Google’s reCAPTCHA service to determine whether individuals submitting information via this website are human and to deter bot attacks and spam.
Client Coventry City Council is the client that we have engaged with and are delivering street lighting services on behalf of. They may request from your personal data, such as information relating to a faulty streetlight, for their own purposes as a separate data controller.
Cookie management platform We use a consent platform from OneTrust to record and remember your cookie preferences and ensure compliance with relevant laws. This may involve sharing some of your browsing information such as your IP address.
Survey software provider We use Microsoft Forms for the collection and storage of your survey responses. You have the choice to remain anonymous, but if you wish, you can also provide your email address for us to reach out to you.
Web analytics platforms We use tools such as Google Analytics and Siteimprove to understand how our website is being used and identify areas for improvement. This may involve sharing some of your browsing information such as your IP address.
Website publishing platform and designer Our website is powered by WordPress and developed by Think Design Manchester Ltd. As part of delivering this service, they may have visibility of your personal data, although this will largely be incidental.

Your personal data may also be disclosed to regulators, public authorities, insurers, law firms, dispute resolution bodies, courts, as well as our subsidiary companies, affiliates within our group, entities with whom we have a joint venture or associated businesses, and our advisors and auditors.

Where data is transferred outside of the European Economic Area (EEA) or the UK, we ensure that appropriate safeguards are in place, for example the International Data Transfer Addendum or International Data Transfer Agreement issued by the Information Commissioner’s Office (ICO) in the UK and the Standard Contractual Clauses adopted by the European Commission. For more information on international data transfers and the appropriate safeguards that we apply, where applicable, and how you can receive a copy of them, please contact our Data Privacy Team at

6. Lawfulness for processing your personal data

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this personal data are:

Lawful basis

Further details or justification (where relevant)

Your consent You are able to remove your consent at any time and can do this by contacting the Data Privacy Team at
We have a legal obligation For example, we may be legally required to share your personal data with relevant regulators, government departments and law enforcement authorities for investigatory and compliance purposes.
We have a legitimate interest For example, processing your personal data would be within our legitimate interests when it’s necessary for defending against a legal claim or for recording and responding to an enquiry or fault.

7. How we store your personal data

Your personal data is securely stored and we only keep it for as long as it is necessary for Balfour Beatty to process it for the purposes described in this Notice and in accordance with our own retention policies (available here:

We will retain personal data we collect from you where we have an ongoing and valid business reason to do so (for example, to comply with applicable legal, tax or accounting requirements). When we have no ongoing and valid business reason to process your personal data, we will either delete or anonymise it or, if this is not possible (for example, because your personal data has been stored in backup archives), we will securely store your personal data and isolate it from any further processing until deletion is possible.

8. Your data protection rights

Under data protection law, you have rights including:

Individual rights

Further details

Your right of access You have the right to ask us for copies of your personal data.
Your right to rectification You have the right to ask us to rectify personal data you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure You have the right to ask us to erase your personal data in certain circumstances.
Your right to restriction of processing You have the right to ask us to restrict the processing of your personal data in certain circumstances.
Your right to object to processing You have the right to object to the processing of your personal data in certain circumstances.
Your right to data portability You have the right to ask that we transfer the personal data you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact the Data Privacy Team at if you wish to make a request and exercise any of these rights.

9. How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at You can also make a complaint to the supervisory authority – in the UK that is the Information Commissioner’s Office (ICO) whose details are here:

10. Contact us

If you have any questions about this Notice, or how Balfour Beatty processes your personal data, please reach out to our Data Privacy Team at You can also contact our Data Protection Officer at this same email address.

11. Updates to this Notice

We may update this Notice from time to time in response to legal, technical, or business developments. If we make any material changes to how we process and use your personal data, we will notify you to inform you of the change.

You can see when this Notice was last updated by checking the “last updated” date displayed at the end of this Notice.

Last updated: 13/09/23