Policies

Our Policies page outlines our commitment to health & safety, environmental responsibility, and customer care, ensuring transparency and professionalism in every aspect of our roofing services.

Our Policies

Anti-bribery & Corruption Policy

It is our policy to conduct all our business in an honest and ethical manner. We take a zero-tolerance approach to bribery and corruption and are committed to acting professionally, fairly and with integrity in all our business dealings and relationships wherever we operate.

It is our best practice objective that those we do business with a similar zero tolerance approach to bribery and corruption.

Alliance Roofing (Yorkshire) LTD is committed to the practice of responsible corporate behaviour and to complying with all laws, regulations and other requirements which govern the conduct of our operations. The Directors are committed to implementing and enforcing systems throughout the company to prevent, monitor and eliminate bribery in accordance with its obligations under the Bribery Act 2010.
The Company is fully committed to instilling a strong anti-corruption culture and is fully committed to compliance with all anti-bribery and anti-corruption legislation including, but not limited to, the Bribery Act 2010 (“the Act”) and ensures that no bribes or other corrupt payments, inducements or similar are made, offered, sought or obtained by us or anyone working on our behalf.
We are bound by the laws of the UK including the Bribery Act 2010, in respect of our conduct both at home and abroad. We must also comply with laws relevant to countering bribery and corruption in the jurisdictions in which we operate.

Bribery and corruption are criminal offences and are punishable for individuals by up to 10 years imprisonment and an unlimited fine, and if the Company is found to have taken part in corruption, we could face an unlimited fine, be excluded from tendering for public contracts and face damage to our reputation. We therefore take our legal responsibilities very seriously and expect you and our clients to do the same.

“Third party” means any individual or organisation you come into contact with during the course of your work for us, and includes actual and potential customer, suppliers, distributors, business contacts, agents, advisers, government and public bodies, including their advisors, representatives and officials, politicians and political parties.

Management and senior staff at all levels are responsible for ensuring those reporting to them is made aware of and understand this policy.

A bribe is, and inducement or reward offered, promised, or provided in order to gain any commercial, contractual, regulatory or personal advantage through “improper performance”. “Improper Performance” happens when a person fails to act (1) in good faith (2) impartially or (3) in accordance with a position of trust.

This policy does not prohibit normal or appropriate hospitality (given and received) to or from third parties.

The giving or receipt of gifts and hospitality is not prohibited, if the following requirements are met:

You have disclosed it to your line manager in advance (where it is possible to do so, or as soon as possible afterwards)
It is not made with the intention of influencing, inducing, or rewarding a third party in order to gain any advantage through improper performance, or in explicit or implicit exchange for favours or benefits.
It complies with local law
It is given in our name, not in your name
It does not include cash or a cash equivalent (such as gift certificates or vouchers)
It is appropriate in the circumstances, for example in the UK it is customary for small gifts to be given and Christmas time
Taking into account the reason for the gift, it is appropriate type and value and given at an appropriate time. For example, customers are unlikely to be able to accept hospitality from use if we are participating in a tender process with them.

You must ensure you read, understand, and comply with this policy at all times. You must be open about gifts and hospitality given or received and you must disclose these to your line manager in (where it is possible to do so, or as soon as possible afterwards) The prevention, detection and reporting of bribery and other forms of corruption are the responsibility of all those working for us under our control. All workers are required to avoid any activity that might lead to or suggest a breach of this policy. You must notify your manager as soon as possible if you believe or suspect that a conflict with this policy has occurred or may occur in the future.

Fraud and Malpractice

The Company tries to ensure that a risk (and fraud) awareness culture exists in this organisation. This policy applies to any irregularity, or suspected irregularity, involving employees as well as consultants, vendors, contractors, and / or any other parties with a business relationship with this organisation. Any investigative activity required will be conducted without regard to any person’s relationship to this organisation, position, or length of service.

Fraud and Malpractice comprises both the use of deception to obtain an unjust or illegal financial advantage and intentional misrepresentations affecting any aspect of company activity by one or more individuals among management, staff or third parties. 4.3 All Managers and staff have a duty to familiarise themselves with the types of improprieties that might be expected to occur within their areas of responsibility and to be alert for any indications or irregularity.

Fraud and malpractice plan

The purpose of this plan is to ensure that timely and effective action is taken in the event of fraud/malpractice. The plan acts and increases the chances of a successful investigation.

The plan defines authority levels, responsibilities for action, and reporting seniors in the event of a suspected fraud or malpractice.
Prevent further loss.
Establish and secure evidence necessary for criminal and / or disciplinary action.
Notify the Board of Directors immediately.
Determine when and how to contact the police and establish Seniors of communication.
Assign responsibility for investigating the incident.
Minimise and recover losses.
Review the reasons for the incident, the measures taken to prevent a recurrence, and determine any action needed to strengthen future responses to fraud or malpractice.
Keep all personnel with a need to know suitably informed about the incident as the investigation develops.
Help promote an anti-fraud culture by making it clear to employees and others that the Company will pursue all cases of fraud or malpractice vigorously taking appropriate legal and / or disciplinary action in all cases where that is justified.

Action Following Detection:

When any member of staff suspects that a fraud has occurred, he / she must notify his / her Senior Manager immediately. Speed is of the essence and this initial report should be verbal and must be followed up within 24 hours by a written report addressed to the Senior Manager which should cover:

The amount / value if established.
The position regarding recovery or company exposure.
The period over which the irregularity occurred, if known
The date of discovery and how the suspected fraud / malpractice was discovered.
The type of irregularity and what led to it i.e.: a. Was there a breakdown in the systems of internal control, or b. Is there any inherent weakness in the system of internal control which allowed it to occur.
Whether the person responsible has been identified.
Whether any collusion with others is suspected.
Details of any actions taken to date.
Any other information or comments which might be useful.

Responsibility for Compliance and Scope of Policy

This Policy applies to all employees, agents, contractors, subcontractors, consultants, business partners and any other parties (including individuals, partnerships, and bodies corporate) associated with the Company or any of its subsidiaries.
It is the responsibility of all the above-mentioned parties to ensure that bribery is prevented, detected and reported and all such reports should be made in accordance with the Company’s Whistleblowing Policy or as otherwise stated in this Policy, as appropriate.
No party may: give or promise any financial or other advantage to another party (or use a third party to do the same) on the Company’s behalf where that advantage is intended to induce the other party to perform a particular function improperly, to reward them for the same, or where the acceptance of that advantage will constitute improper conduct.
Request or agree to receive any financial or other advantage from another party where that advantage is intended to induce the improper performance of a particular function, where the acceptance of that advantage will constitute improper conduct, or where the recipient intends to act improperly in anticipation of such an advantage.
Parties must be aware and alert at all times of all bribery risks as described in this Policy. Exercise due diligence always when dealing with third parties on behalf of the Company; and report any and all concerns relating to bribery to a director or the Office Manager or, in the case of non-employees, their normal point of contact within the Company, or otherwise in accordance with the Company’s Whistleblowing Policy. Confidentiality will be maintained during any investigation to the extent that is practical and appropriate in the circumstance.

Due Diligence and Risks

The Company depends on all employees, and those acting for the organisation, to assist in the prevention of bribery. Therefore, all employees and others acting for, or on behalf of, the Company are expected to report any suspected bribery to the Company following the Company’s Anti-Bribery procedures.
All employees will receive the support of the Company if they report of suspected bribery in good faith even if, following an investigation, it is found that no bribery took place.

Monitoring and Review

The company monitors the effectiveness and reviews the implementation of this policy at appropriate intervals, considering its suitability, adequacy and effectiveness. Any improvements identified are made as soon as possible. Internal control systems and procedures are also subject to regular review to provide assurance that they are effective in countering any risks of bribery and corruption.
All Workers are aware that they are responsible for the success of this policy and should ensure they use it to disclose any suspected danger or wrongdoing.

Fatigue & Mental Health Policy

FATIGUE POLICY

This policy supplements the health & safety policy statement. Any employee must not commence or continue work if he or she is fatigued to such an extent that their condition may prejudice his or her safety, or the safety of others. Managers will not plan work arrangements for personnel who are fatigued or are likely to become fatigued during the work period. Managers and supervisors are authorised to prevent any employee from commencing work or continuing to work if they believe the person is fatigued. To contribute to improved safety performance through the control of fatigue limitations on hours worked will be applied. Employees must:

Not work more than twelve hours in any one shift.
Not work more than 72 hours in a calendar week.
Have a minimum rest period of 12 hours between booking off and booking on for consecutive shifts.
Not work more than 13 shifts within any 14 consecutive days. Calculating the total hours and shifts worked must include the hours worked for another supplier and on all infrastructures.

Recording and monitoring will take place weekly using the working hours data. Exceedance of these hours in emergency situations shall only be permitted once the risk of fatigue has been assessed and an acceptable outcome achieved. The implementation of this policy is the responsibility of the Health & Safety Manager.

MENTAL HEALTH POLICY

1. What is positive mental health and wellbeing?

Just as we all have physical health that varies from person to person and from time to time, we all have mental health which fluctuates. The World Health Organisation defines mental health as ‘a state of well-being in which every individual realizes his or her own potential, can cope with the normal stresses of life, can work productively and fruitfully, and is able to make a contribution to her or his community’.

2. Why it matters to Alliance Roofing (Yorkshire) Ltd

Whilst most of us have positive mental health and wellbeing most of the time, our mental health can change. There may be times when we are ‘thriving’, times when we start to struggle, and times when we develop a diagnosable mental health condition. 1 in 6 UK workers are currently experiencing a mental health condition, and 1 in 4 workers will have some form of mental health condition in any one year such as anxiety, depression, or feeling the effects of undue stress. These conditions might last a long or a short time or they might come and go. And just as we help our employees to keep physically well and support them through physical illness or disability, we undertake to do the same for our staff with respect to mental health and wellbeing. We aim to help all staff keep mentally well and to support them through periods of poor mental health whether they remain at work or take time off.

3. What the policy aims to do

The purpose of this policy is for Alliance Roofing (Yorkshire) Ltd to establish, promote and maintain the mental health and wellbeing of all our staff through workplace practices, and encourage staff to take responsibility for their own mental health and wellbeing. This policy sets out what help is available to support all staff to have positive mental health and wellbeing, how to access help, what procedures to follow, what documents to use, and how we measure and report on its impact. By developing a positive culture and by implementing practical, relevant and effective practices we can contribute to Alliance Roofing (Yorkshire) Ltd’s success and sustainability. Overall, this policy aims to: a. build and maintain a workplace environment and culture that promotes positive mental health and wellbeing and prevents discrimination (including bullying and harassment); b. increase employee knowledge and awareness of mental health and wellbeing issues and behaviours; c. recognise and address sources of stress in the workplace; d. support those staff who are experiencing poor mental health; e. reduce stigma around depression and anxiety in the workplace; f. facilitate employees’ active participation in a range of initiatives that support and promote mental health and wellbeing for all staff.

4. What and who the policy is for

Mental health conditions and the effects of stress can affect anyone, regardless of their position in the organisation. This policy applies equally to all employees including part-time staff, contractors, freelancers, and volunteers (from now on referred to as ‘staff’).

5. Where the policy sits alongside other HR policies

This policy should be read and followed in conjunction with our physical health / substance misuse / absence/ disciplinary/ other Alliance Roofing (Yorkshire) Ltd policies as appropriate.

6. How it contributes to Alliance Roofing (Yorkshire) Ltd Mental Health and Wellbeing Strategy or Plan

This policy is part of Alliance Roofing (Yorkshire) Ltd’s overarching strategy/ plan to promote positive mental health and wellbeing in the workplace. Whereas the strategy/ plan outlines several areas of improvement over the next X years and might include specific plans, the focus of this policy is on what values we hold, what responsibilities we have, what we will undertake and in turn what we expect from our staff.

7. Promoting a whole organisation approach

Alliance Roofing (Yorkshire) Ltd undertakes: a) to promote staff wellbeing by engaging proactively with staff, identifying and offering wellbeing initiatives following the 5 Ways to Wellbeing (developed by the New Economics Foundation), e.g. keeping active, organising social events, CPD events on wellbeing, volunteering or fundraising etc.; b) to provide training for line managers and all staff to raise mental health awareness and support better wellbeing; c) to have fair and non-discriminatory recruitment practices and to welcome applications from people with mental health conditions; d) to identify and effectively address sources of stress in the workplace following the Health and Safety Executive (HSE) stress at work guidance e.g. flexible working, appropriate induction, training when roles change, training on customer care etc.; e) to ask regularly about employees’ wellbeing; to be aware of common mental health conditions and the impact these can have at work; to talk with employees about their work in the context of their mental health and wellbeing; to make reasonable adjustments to work during periods of poor mental health or recovery; to comply with the Equality Act 2010; f) to enable conversations about mental health without stigma; g) to provide information about and promote access to helplines and/or local services when needed.

8. Who is responsible for what?

Alliance Roofing Yorkshire Ltd Management has a responsibility to: a) ensure that all staff are made aware of this policy; b) actively support and contribute to the implementation of this policy, including its goals; c) manage the implementation and review of this policy. In turn we encourage our employees to undertake to: a) understand this policy and seek clarification from management where required; b) consider this policy while completing work-related duties and at any time while representing Alliance Roofing (Yorkshire) Ltd; c) support fellow staff in their awareness of this policy; d) support and contribute to Chapmans Steel Fabrication Solutions Ltd’s aim of providing a mentally healthy and supportive environment for all staff. All staff have a responsibility to: a) take reasonable care of their own mental health and wellbeing as well as their physical health; b) take reasonable care that their actions do not adversely affect the health and safety of other people in the workplace; c) alert their line manager if they notice that their mental health is slipping or that they are struggling at work; d) alert their line manager if they believe that one of their colleagues is struggling with their mental health or wellbeing so that their colleague can be supported promptly and so that they themselves can be supported; e) take part in constructive conversations about what support or reasonable adjustments can be made to support them at work or on their return to work after a period of illness; f) stay in touch during time off work; g) avoid using stigmatising language about people with mental health conditions and avoid discriminatory behaviour.

9. How Alliance Roofing (Yorkshire) Ltd measures the impact of this policy

As an organisation, Alliance Roofing (Yorkshire) Ltd acknowledges that measuring and reporting the impact of this policy and procedures is key to achieving its aims, i.e., promoting and maintaining the mental health and wellbeing of all our staff. We are therefore committed to the effective measurement of the impact of this policy and to reporting on it regularly. The policy has many strands and the impact will be assessed in a number of different ways, including monitoring and reporting: a) staff turnover due to mental health conditions or stress and as a proportion of all staff turnover; b) staff absences due to mental health conditions or stress and as proportion of all staff absences; c) accidents or errors at work that might be attributable to mental health difficulties at work; d) staff survey data about stress and stigma – optional for staff to complete – e) number of new referrals to counselling/ EAP; f) where appropriate, feedback from suppliers and customers.

10. How this policy is communicated

Alliance Roofing (Yorkshire) Ltd will ensure that: a) all staff receive a copy of this policy at induction; b) this policy is easily accessible by all members of the organisation; c) employees are informed when a particular activity aligns with this policy; d) employees are empowered to actively contribute to and provide feedback on this policy; e) employees are notified of all changes to this policy.

11. How often this policy will be reviewed

This policy will be reviewed on an annual basis. Effectiveness of the policy will be assessed through a) feedback from staff and management; b) review of the policy by management to determine if its overall objectives have been met and to identify both barriers and supports to ensuring that progress is sustained. The Managing Director shall review this policy annually or following significant changes.

Health & Safety Policy

1.0 General Statement of Intent
2.0 Roles and Responsibilities
3.0 Arrangements
3.1 Accident Reporting & Investigation
3.2 Alcohol and Controlled Drugs
3.3 Asbestos
3.4 CDM Regulations
3.5 COSHH Assessments
3.6 COVID-19
3.7 Communication with workers
3.8 Contractors and Sub-Contractors
3.9 Control of Silica Dust
3.10 Control of Wood Dust
3.11 Equipment Inspections & Records
3.12 External Health and Safety Consultants
3.13 Fire Safety
3.14 Risk Assessments
3.15 Working at Height

Modern Slavery Policy

Slavery and the Human Trafficking Statement

Alliance Roofing Yorkshire (LTD) is committed to ensuring that there is no modern slavery or human trafficking in any part of our company. This statement is made in pursuant to section 54, part 6 of the Modern Slavery Act 2015 and sets out steps we have taken to ensure that slavery and human trafficking is not taking place in any part of our business.

Here at Alliance Roofing Yorkshire (LTD) we are committed to preventing slavery and Human trafficking violations in its own operations. We have a zero-tolerance policy towards slavery and require any external companies we work alongside to comply with our company values.

Organisation structure

Alliance roofing Yorkshire (LTD) is a provider of roofing services to both retail and business customers throughout the UK. Our organisation consists of 2 directors and a number of employees.

Our supply chain

Our supply chains consist of any external company that’s directly involved in roofing and maintenance, that also include the hire of skips, scaffolding companies and the delivery of materials etc.

Our Policy on Slavery and Human Trafficking

Alliance Roofing Yorkshire (LTD) act ethically and with integrity in our business relationships and are committed to implanting and enforcing effective systems and controls to ensure slavery and human trafficking is not taking place anywhere in our company. This is reinforced by our corporate social responsibility strategy and principles.

We endeavour to:

Review our suppliers and identify any potential risk areas in our supply chains
Mitigate the risk of slavery and human trafficking occurring from any of our suppliers
Monitor potential risk areas in our business
Protect whistle-blowers

We have a zero-tolerance policy when it comes to Modern Slavery and Human trafficking.

Risk and compliance

We have evaluated the nature and extend of our exposure to the risk of slavery and human trafficking occurring in our business. We operate a low-risk environment due to the requirements by the HSE to work on contractual sites. Where we have evidence of failure to comply with our policies and produces by any of our external or internal contractors we will whistle-blow if necessary.

Further Steps

We remain committed to further developing our company programme to ensure that there is no slavery or Human Trafficking in our business and ensure that all our employees and suppliers are fully aware and involved in the compliance programme.

This statement is made for the financial year ending 2022.

All our staff are required to do courses whether this be online or in person to update knowledge on modern slavery.

Quality Management Policy

1.1. Introduction

Alliance Roofing (Yorkshire) Ltd prides itself on delivering the highest levels of service to all its customers and clients. Alliance Roofing (Yorkshire) Ltd recognises the importance of maintaining strict quality assurance standards to ensure that all Alliance Roofing (Yorkshire) Ltd work meets and exceeds it commitments to clients. Continuous improvement and feedback are essential to the development of Alliance Roofing (Yorkshire) Ltd quality processes and are documented and retained to ensure that quality management principles are rigorously enforced. Alliance Roofing (Yorkshire) Ltd requires all staff to use the quality management system. A copy of Alliance Roofing’s quality management system is made available to all staff via the staff handbook. The policy is regularly updated to ensure that it complies with the latest standard in quality system management.

1.2. Alliance Roofing (Yorkshire) Ltd quality assurance policy objectives

To establish, document, implement, and maintain a quality management system and continually improve its effectiveness in accordance with client, supplier, and business needs.
To ensure that client’s needs and expectations are determined and fulfilled to deliver a consistently high standard of service, in accordance with Alliance Roofing (Yorkshire) Ltd corporate values and business objectives.
To communicate quality assurance principles to all staff, clients, associates, and stakeholders to meet customer needs and to fulfil legal requirements.
To establish the quality policy and quality objectives across Alliance Roofing (Yorkshire) Ltd processes.
To enhance sustainability (including Alliance Roofing (Yorkshire) Ltd Environmental Policy) of Alliance Roofing (Yorkshire) Ltd business, reducing waste and minimising environmental impact.

1.3. Scope of Alliance Roofing (Yorkshire) Ltd quality assurance policy

Alliance Roofing (Yorkshire) Ltd quality assurance policy applies to all work undertaken by Alliance Roofing (Yorkshire) Ltd on behalf of its clients, including goods and services provided by third party agents and suppliers, and sub-contractors when necessary.
The policy applies to all staff, who are actively required to engage in quality assurance procedures including record keeping, and proactively responding to feedback.
Responsibility for the quality assurance policy lies with the Managing Director.
The General Manager is responsible for ensuring that all staff are compliant in maintaining documents and records necessary for compliance with Alliance Roofing (Yorkshire) Ltd quality standards.
The Managing Director is responsible for ensuring that all staff recognise quality assurance principles and have the necessary skills and training to fulfil their role within the quality management process.

1.4. Customer Focus

Alliance Roofing (Yorkshire) Ltd strives to ensure that it closely works in partnership with the client and the client’s professional representatives to deliver a finished project on time, on budget and to the exacting qualities expected. A Contracts Manager / Appointed Site Supervisor is assigned to each project to ensure that all services are delivered in accordance with the Schedule of Works, issued drawings and to the issued programme. The Contracts Manager / Appointed Site Supervisor acts as a key point of liaison for raising any issues regarding changed to specification or project timelines, which can be escalated to director level if the Contracts Manager / Appointed Site Supervisor is unable to resolve them. The Contracts Manager / Appointed Site Supervisor is also responsible for ensuring the feedback on project outcome is monitored and retained within the quality system.

1.5. Leadership

Alliance Roofing (Yorkshire) Ltd communicates its vision to all employees, clients and stakeholders. Alliance Roofing (Yorkshire) Ltd values are stated to all staff upon induction and reinforced with regular corporate training. Alliance Roofing (Yorkshire) Ltd management team ensures that appropriate resources, including the latest technology and access to health and safety, and professional training for staff are available.

1.6. Alliance Roofing (Yorkshire) Ltd quality assurance process – implementation

Each project is assigned a file. This file contains all relevant documents relating to the project for quality assurance purposes including:

Copies of priced tender documents and/or official confirmation of order
Copies of the clients’ general schedule of works.
Copies of the specification
Copies of drawings
Copies of the Health and Safety Construction Plan
Copies of asbestos report – confirming appropriate action to be taken
Copies of the Health and Safety Construction Plan, including risk assessments and method statements
Copies of all correspondence be it posted or via e-mail
Copies of purchase orders
Copies of site meetings
Copies of architect’s drawings
Copies of valuations together with payment certificates
Records of retentions and dates for release
Summaries of feedback and evaluation reports
Copies of any issues or complaints that arose during the project process, and the recommendations taken

Riddor Policy

Incident/Accident Reporting Policy

It is the aim of the company to ensure compliance with the relevant requirements of the Health and Safety at Work etc. Act 1974 and [England, Scotland and Wales: Reporting of Injuries, Diseases and Dangerous Occurrences Regulations, 2013.][Northern Ireland: Reporting of Injuries, Diseases and Dangerous Occurrences Regulations (Northern Ireland) 1997.]

All accidents and incidents occurring site are recorded using Accident book and Alliance Roofing (Yorkshire) LTD Significant Incident form. The directors, Daniel Oates/Thomas Broadhead will carry out prompt investigation of each accident, incident and near miss, record information in the investigation section of M 252A and agree with the site manager appropriate measures to be taken to prevent similar occurrence from happening in the future. These are discussed at the team meeting and any changes implemented within the specified period of time. Additional training is provided as required.

Any injuries and dangerous occurrences reportable under RIDDOR are reported by the Health and Safety Manager online within the specified time.

Refer to Accident Reporting (M 252) for the full procedure.

Whistleblowing Policy

In this policy, ‘Whistleblowing’ means the reporting by employees of suspected misconduct, illegal acts, or failure to act with Alliance Roofing (Yorkshire) LTD.

The aim of this policy is to encourage employees and others who have serious concerns about any aspect of Alliance Roofing (Yorkshire) LTD to come forward and voice those concerns.

Qualifying Disclosures

Certain disclosures are prescribed by law as “qualifying disclosures”. A “qualifying disclosure” means a disclosure of information that the employee genuinely and reasonably believes is in the public interest and shows that Alliance Roofing (Yorkshire) Ltd has committed a “relevant failure” by:

Committing a criminal offence
Failing to comply with a legal obligation
A miscarriage of justice
Endangering the health and safety of an individual
Environmental damage
Concealing any information relating to the above

These acts can be in the past, present, or future, so that, for example, a disclosure qualifies if it relates to environmental damage that has happened, is happening, or is likely to happen.

The Employment Rights Act 1996 provides protection for workers who ‘blow the whistle’ where they reasonably believe that some form of illegality, injustice or breach of health and safety has occurred or is likely to occur. The disclosure has to be “in the public interest”. We encourage you to use the procedure to raise any such concerns.

The Procedure

In the first instance you should report any concerns you may have to the HR Team, your line manager, or the relevant Director, as appropriate, who will treat the matter with complete confidence. If you are not satisfied with the explanation or reason given to you, you should raise the matter with the appropriate official organisation or regulatory body.
If you do not report your concerns to the HR Team, your line manager, or the relevant Director, you should take them direct to the appropriate organisation or body.

Treatment By Others

Bullying, harassment, or any other detrimental treatment afforded to a colleague who has made a qualifying disclosure is unacceptable. Anyone found to have acted in such a manner would be subject to disciplinary action. Alliance Roofing (Yorkshire) Ltd will take any concerns that may be raised relating to the above matters very seriously. The director shall review this policy annually or following significant changes.

Information Security Policy

Purpose

Information that’s collected, analysed, stored, communicated, and reported upon may be subject to theft, misuse, loss, and corruption. Information may be put at risk by poor education and training, and the breach of security controls.

Information security incidents can give rise to embarrassment, financial loss, non-compliance with standards and legislation, as well as possible judgements being made against Alliance Roofing (Yorkshire) Ltd.

This high-level Information Security Policy sits alongside the ‘Information Risk Management Policy’ and ‘Data Protection Policy’. This is to provide the high-level outline of, and justification for, Alliance Roofing (Yorkshire) LTD risk-based information security controls.

Objectives

Alliance Roofing (Yorkshire) LTD objectives are that:

Our information risks are identified, managed, and treated according to an agreed risk tolerance.
Our authorised users can securely access and share information to perform their roles.
Our physical, procedural, and technical controls balance user experience and security.
Our contractual and legal obligations relating to information security are met.
Our teaching, research and administrative activity considers information security.
Individuals accessing our information are aware of their information security responsibilities.
Incidents affecting our information assets are resolved and learnt from to improve our controls.

Scope

The Information Security Policy and its supporting controls, processes and procedures apply to all information used at Alliance Roofing (Yorkshire) LTD, in all formats. This includes information processed by other organisations in their dealings with Alliance Roofing (Yorkshire) LTD.

The Information Security Policy and its supporting controls, processes and procedures apply to all individuals who have access to Alliance Roofing (Yorkshire) LTD information and technologies. This includes external parties that provide information processing services to Alliance Roofing (Yorkshire) LTD.

Compliance monitoring

Compliance with the controls in this policy will be monitored by the Information Security Team and reported to the Information Governance Board.

Review

A review of this policy will be undertaken by the Company Director. This will be annually or as required and will be approved by the Company Director.

Policy Statement

It is Alliance Roofing (Yorkshire) LTD policy to ensure that information is protected from a loss of:

Confidentiality – information will be accessible only to authorised individuals.
Integrity – the accuracy and completeness of information will be maintained.
Availability – information will be accessible to authorised users and processes when required.
Alliance Roofing (Yorkshire) LTD will implement an Information Security Management System based on certified standards as required. Alliance Roofing (Yorkshire) LTD will be mindful of the approaches adopted by its stakeholders, including research partners.
Alliance Roofing (Yorkshire) LTD will adopt a risk-based approach to the application of the following controls:

Information security policies

A set of lower-level controls, processes and procedures for information security will be defined, in support of the high-level Information Security Policy and its stated objectives. This suite of supporting documentation will be approved by the Director, published and communicated to Alliance Roofing (Yorkshire) LTD users and relevant external parties.

Organisation of information security

Alliance Roofing (Yorkshire) LTD will define and implement suitable governance arrangements for the management of information security. This will include identification and allocation of security responsibilities, to initiate and control the implementation and operation of information security within Alliance Roofing (Yorkshire) LTD.

Alliance Roofing (Yorkshire) LTD will appoint:

an Executive to chair the Information Governance Board and take accountability for information risk.
an Information Governance Board to influence, oversee and promote the effective management of alliance Roofing (Yorkshire) LTD information.
an Information Security specialist to manage the day-to-day information security function.
Information Asset Owners (IAOs) to assume local accountability for information management.
Information Asset Managers (IAMs) responsible for day-to-day information management.

Human resources security

Alliance Roofing (Yorkshire) LTD security policies and expectations for acceptable use will be communicated to all users to ensure that they understand their responsibilities. Information security education and training will be made available to all staff. Poor or inappropriate behaviour will be addressed.

Where practical, security responsibilities will be included in role descriptions, person specifications and personal development plans.

Asset management

All assets will be documented and accounted for. This includes:

Information
Software
Electronic information processing equipment
Service utilities
People

Owners will be identified for all assets, and they will be responsible for the maintenance and protection of their assets.

All information assets will be classified according to their legal requirements, business value, criticality, and sensitivity. Classification will indicate appropriate handling requirements. All information assets will have a defined retention and disposal schedule.

Access control

Access to all information will be controlled and will be driven by business requirements. Access will be granted, or arrangements made for users according to their role and the classification of information, only to a level that will allow them to carry out their duties.

A formal user registration and de-registration procedure will be maintained for access to all information systems and services. This will include mandatory authentication methods based on the sensitivity of the information being accessed and will include consideration of multiple factors as appropriate.

Specific controls will be implemented for users with elevated privileges, to reduce the risk of negligent or deliberate system misuse. The separation of duties will be implemented, where practical.

Cryptography

Alliance Roofing (Yorkshire) LTD will provide guidance and tools to ensure proper and effective use of cryptography to protect the confidentiality, authenticity and integrity of information and systems.

Physical and environmental security

Information processing facilities are housed in secure areas, physically protected from unauthorised access, damage and interference by defined security perimeters. Layered internal and external security controls will be in place to deter or prevent unauthorised access and protect assets. This includes those that are critical or sensitive, against forcible or hidden attacks.

Operations security

Alliance Roofing (Yorkshire) LTD will ensure the correct and secure operations of information processing systems. This will include:

Documented operating procedures.
The use of formal change and capacity management.
Controls against malware.
Defined use of logging.
Vulnerability management.

Communications security

Alliance Roofing (Yorkshire) LTD will maintain network security controls to ensure the protection of information within its networks. Alliance Roofing (Yorkshire) LTD will also provide the tools and guidance to ensure the secure transfer of information both within its networks and with external entities. This is in line with the classification and handling requirements associated with that information.

System acquisition, development, and maintenance

Information security requirements will be defined during the development of business requirements for new information systems or changes to existing information systems.

Controls to reduce any risks identified will be implemented where appropriate.

Systems development will be subject to change control and separation of test, development and operational environments.

Supplier relationships

Alliance Roofing (Yorkshire) LTD information security requirements will be considered when establishing relationships with suppliers, to ensure that assets accessible to suppliers are protected.

Supplier activity will be monitored and audited according to the value of the assets and the associated risks.

Information security incident management

Guidance will be available on what constitutes an information security incident and how this should be reported. Actual or suspected breaches of information security must be reported and will be investigated. The appropriate action to correct the breach will be taken, and any learning built into controls.

Information security aspects of business continuity management

Alliance Roofing (Yorkshire) LTD will have in place arrangements to protect critical business processes from the effects of major failures of information systems or disasters. This is to ensure their timely recovery in line with documented business needs. This will include appropriate backup routines and built-in resilience.

Business continuity plans must be maintained and tested in support of this policy. Business impact analysis will be undertaken, detailing the consequences of:

Disasters
Security failures
Loss of service
Lack of service availability

Cyber Security

We have implemented strict security measures to protect against cyber-attacks, including regular software updates and monitoring systems. Our employees and contractors receive regular training on our cybersecurity policies, and we are committed to compliance with all applicable regulations.

Compliance

The design, operation, use and management of information systems must comply with all statutory, regulatory, and contractual security requirements.

Currently this includes:

Data protection legislation
The payment card industry standard (PCI-DSS)
The government’s Prevent strategy
Alliance Roofing (Yorkshire) LTD contractual commitments

Alliance Roofing (Yorkshire) LTD will use a combination of internal and external audits to demonstrate compliance against chosen standards and best practice, including against internal policies and procedures. This will include:

IT health checks
Gap analyses against documented standards
Internal checks on staff compliance
Returns from Information Asset Owners

GDPR Policy

Introduction

Alliance Roofing (Yorkshire) Ltd are committed to delivering an exceptional customer service.

We wanted to let you know that we’ve made some changes to our Privacy Policy to reflect upcoming changes to data laws in the UK (GDPR).

We provide a clear privacy notice wherever personal data is collected to ensure that consent is requested, and that the data subject is informed of their rights in relation to their personal data.
Our company demonstrates data subject(s) consent to the processing of his or her personal data or explicit consent for sensitive personal data by asking for permission.
Our company demonstrates data subject(s) consent is intelligible and accessible using clear and plain language.
Our company demonstrates data subject(s) are informed of their right to withdraw consent before giving consent notice in line with our agreed consent notice.
Our company demonstrates processing of data is limited to that stated in the contract, bound by the explicit consent given by the data subject.

What is GDPR?

GDPR (also known as the General Data Protection Regulation) is a new European framework for data protection laws. It gives you greater protection and rights and will give you more control over how your data is used.

We fully support these new regulations and have reflected our commitment to protect your rights and interests in our new Privacy Policy statement. We’ve provided clarity on what data we have, how we use it, why we need it and who has access to it. We’ve also appointed a Data Protection Officer who you can contact if you have any concerns.

We understand that customers care about the use and storage of their personal information, and we value your trust in allowing us to do this in a careful and sensible manner. We have created this privacy policy statement to demonstrate our commitment to the privacy of our customers.

Personal information which we collect

Company name and address.
Company contact details (including responsibilities, telephone numbers & contact email addresses).
Company bank account details.
Details on IT infrastructure & services supplied.
Trading history and relevant information.

How we use your information

Our legal basis for collecting your personal data is to allow us to:

Ensure we can trade with your business and make/receive payments as required.
Provide marketing information to you on related products and services,
Provide information on technical issues and general notifications regarding our business.

How long we will keep your personal information

We retain your information to comply with our legal obligations arising from contracts entered with you, for example tax regulations.

We will remove your data from our systems at the end of the applicable data retention periods unless we are required by current or future law to retain your personal information for a longer period.

Our approach to information security

To protect your information, Alliance Roofing (Yorkshire) Ltd has policies and procedures in place and our staff have received full training on the new legislation and what their responsibilities are.

Your rights

At any point you can contact us to request details concerning the information we hold about you, why we have that information, who has access to the information and where we got the information. Your GDPR rights are.

The right to be informed: We will always tell individuals what data is being collected, how it’s being used, how long it will be kept and whether it will be shared with any third parties. This information must be communicated concisely and in plain language.
The right to access: Individuals can submit subject access requests, which oblige organisations to provide a copy of any personal data concerning the individual. Organisations have a maximum of one month to produce this information, although there are exceptions for requests that are manifestly unfounded, repetitive, or excessive. We cannot charge the individual for this information processing.
The right to rectification: If the individual discovers that the information, we hold on to them is inaccurate or incomplete, they can request that it be updated. As with the right to access, we have one month to do this, and the same exceptions apply.
The right to erasure (also known as ‘the right to be forgotten’): Individuals can request that we erase their data in certain circumstances, such as when the data is no longer necessary, the data was unlawfully processed, or it no longer meets the lawful ground for which it was collected. This includes instances where the individual withdraws consent.
The right to restrict processing: Individuals can request that we limit the way we use personal data. It’s an alternative to requesting the erasure of data and might be used when the individual contests the accuracy of their personal data or when the individual no longer needs the information but the organisation requires it to establish, exercise or defend a legal claim.
The right to data portability: Individuals are permitted to obtain and reuse their personal data for their own purposes across different services. This right only applies to personal data that an individual has provided to us by way of a contract or consent.
The right to object: Individuals can object to the processing of personal data that is collected on the grounds of legitimate interests or the performance of a task in the interest/exercise of official authority. Organisations must stop processing information unless they can demonstrate compelling legitimate grounds for the processing that overrides the interests, rights and freedoms of the individual or if the processing is for the establishment or exercise of defence of legal claims.
Rights related to automated decision-making including profiling: The GDPR includes provisions for decisions made with no human involvement, such as profiling, which uses personal data to make calculated assumptions about individuals. There are strict rules about this kind of processing, and individuals are permitted to challenge and request a review of the processing if they believe the rules aren’t being followed.

You can withdraw your consent for us to process and hold your data by contacting us via allianceroofingltd@gmail.com

Sharing your information

We would not share your data with anyone else unless we have your express consent and we will never disclose, rent, trade or sell your personal information to any third parties for their marketing purposes.

We do disclose or transfer your data or personal information to other companies, data processors or agents employed by us to perform any necessary functions on our behalf but they are bound by similar terms to those set out in our privacy policy and may not use this information for their own purposes.

Contact details

If you have any queries about this policy, need further information you can use the details below to contact us.

allianceroofingltd@gmail.com

Policies

Our Policies

Contents

Services

Address

Phone

Mobile

Other Links