uRisk is committed to protecting your privacy, and that includes protecting the privacy of any data you share with us. This policy sets out what data we collect, what we do with your data, when and how we store your data, and what you can do if you have questions or wish to exercise rights you have with respect to your data.
What data do we collect, and why?
Through the use of pages on our website and interaction with our products and services, we may collect data from you. Sometimes the data we collect relates to you or identifies you. In this policy, data that relates to or identifies a natural person is defined as “personal data.” “Data” always includes personal data. Our goal is always to maintain the highest levels of privacy and security with your personal data, in keeping with the principles of the Federal Trade Commission Act and related regulations, the General Data Protection Regulation, and applicable local privacy laws. We will always try to give you appropriate notice of what data we collect and how we will use it, and we will only process your data when we consider it fair and lawful to do so.
We may collect the following data from you:
- Records of your visits to our website, through cookies and otherwise (which records may include: traffic data; location information; logs; information about your computer or mobile device such as if applicable your IP address, operating system, mobile carrier, or device identifying information)
- Records of correspondence between us and you (for example, records of your and our communication for purposes of support services)
- Comments, posts, or other data you upload to our site (for example, in the comments section of our blog posts)
- Information you provide by completing forms on our website or in our products and services (for example, purchase information and information you provide when subscribing to newsletters or contacting us)
- Sometimes the reason for collection will be obvious (such as when you give us your email address to allow us to contact you). When it is not, we will describe to you at the time of collection the purpose for collecting the data and if possible ask for your consent. To the extent possible, we anonymize or pseudonymize data we collect from you.
In general, we do not intentionally collect sensitive personal data. Sensitive personal data is data of the kind regulated by Article 9 or Article 10 of the GDPR, such as personal identity numbers; financial account information; information concerning racial or ethnic origin; political opinions; religious, philosophical, or other beliefs; membership in trade unions or professional or trade associations; physical or mental health information; biometric data; genetic data; data concerning sexual activity or orientation; or data concerning criminal records or suspected criminal activity. However, if you provide us with sensitive personal data, whether through the website or through any of our products or services, you explicitly consent to our use and processing of that data.
Additionally, we do not intentionally collect personal data from anyone under the age of eighteen (18), and to the extent reasonably possible we take steps to verify that you are a legal adult when we collect data from you. By using our website, products, or services, and by submitting any data to us, you warrant that you are eighteen (18) years of age or older.
How do we use data we collect from you?
We use the data we collect from you to provide information, services, or products you have requested or purchased, and to allow you to interact with us and the website. This may include sending you emails from time to time; these emails always contain either information you have requested or that you have consented to receive, or information we have a legitimate interest in delivering (such as notices of product changes). You can always unsubscribe from any email list by clicking the indicated link in the email.
When applicable we analyse this information to improve our website, improve the products and services we provide, and to protect us and you from malicious web activity. We may share this information with third parties. Those third parties and their respective privacy policies are as follows:
- Google Analytics (https://policies.google.com/privacy)
How long do we keep your data?
In general, we keep your data only as long as necessary to provide the service or product you requested. If you are a customer who has an account with us, we will keep the data connected to your account until you ask us to destroy it. This is in order to help us remember information about previous interactions with you (for example, records of support service) or in order to comply with our legal and contractual obligations. Ordinarily, if your account is inactive, your data will only be stored so that the account can be reactivated in the future, and your data will not be processed for any other purpose. You can ask us to destroy your data at any time by following the procedures outlined in this policy, but if we do not have certain information about you, it may be impossible for us to provide any products or services to you.
Where is your data stored?
We are a business located in the UK. When we store your data, it is stored in the UK. However, data we collect may be routed or transferred internationally by us or by our business partners during the course of providing products and services to you and others.
How do we ensure your data is secure?
We take a number of steps to ensure that data we collect is protected from unauthorized access, alteration, disclosure, or destruction, including the following:
- Many of our services are encrypted using SSL.
- We regularly review our data collection, storage, and processing practices, including physical and electronic security measures.
- We restrict access to your personal data to only those employees, agents, and business partners who need access to it in order to deliver requested products and services.
- All of our employees, agents, and business partners are subject to strict confidentiality and nondisclosure obligations, the violation of which may result in termination and/or liability.
- All of our employees and agents receive regular appropriate training, including training in information privacy suitable to their respective fields and disciplines.
Do we share your data?
We may transfer your data to our business partners, some of whom may be located in other countries. We strive to do business only with partners who uphold high standards of data privacy and security, and whenever we transfer data to a third party, we take steps to make sure that the data will remain secure and private as required by applicable law and our internal guidelines.
Sometimes we may be required to share your data for specific purposes. These purposes may include:
- In order for us to comply with a legal obligation or to detect, prevent, or otherwise address fraud or crime
- In order to detect or correct technical or security issues
- In order to apply or enforce our Terms and Conditions, or to protect the rights, property, or safety of us, you, our customers, our business partners, others, or the public
- In order to maintain continuity of service in the event that we sell or liquidate some or all of our business or assets
- Additionally, our website may contain links to our business partners or other third parties. Please understand that those websites have their own policies, and we do not accept any responsibility or liability for your use of those websites or any products or services available there.
What about data we obtain from third parties?
Sometimes we may obtain your personal data from a third party, either through the use of our website or through some of our products or services. Due to the nature of our products, it is possible that we may even obtain your data unsolicited from a third party. We may also obtain your personal data from our business partners through contractual relationships or through software they develop. We apply the same standards of security and privacy to all personal data in our possession, and you have rights with respect to your data regardless of its source. When and to the extent possible, we will notify you of the source if we obtain your data from a third party without your consent within at least thirty (30) days.
Are you required to supply us with your personal data?
Sometimes we have to have your personal data in order to interact with you. Supplying some personal information is a prerequisite to purchasing products or services from us, obtaining support services, or using the website. If you do not provide the requested data in those instances, you will not be able to purchase any products or services from us, you will not have access to support services, and you may lose some functionality when interacting with the website, respectively.
What rights do you have with respect to your personal data?
You have a right to know if we have any of your personal data and to have access to that data, and you have the right to have any incorrect personal data corrected. If you have given us consent to have or use your data, you have the right to withdraw that consent at any time. You also have the right to have your personal data erased or to transport your data. Ordinarily we do not use automated decision-making with respect to any personal data, but if we do, you have the right to object.
You have the right to lodge a complaint with a supervisory authority. Which authority is appropriate varies depending on your jurisdiction. If you wish to lodge a complaint, we can assist you in determining where the complaint should be lodged.
You may contact us at any time at https://www.urisk.co.uk/contact-us, to exercise any of these rights. Understand that sometimes we have to have your data in order to interact with you, and so exercising some or all of these rights might impact your ability to use our website or our products and services.
What if you have further questions?
If you have any additional questions about our privacy practices, please contact us at https://www.urisk.co.uk/contact-us.
Why choose uRisk?
25 Years Experience
Customer Service Excellence
City & Guilds Qualified
UKAS Accredited Testing
Full Compliance Services
Get in Touch with a Quick Message
Legionella Risk Assessment FAQs
When and how often do I need a legionella risk assessment?
Under the Health and Safety at Work Act 1974 and in compliance with the Approved Code of Practice (ACoP L8, HSG 274), duty holders, including employers and those in control of premises, must ensure the health and safety of their employees or others who may be affected by their undertaking, this includes the risk of legionella. Legionnaires Disease is a form of pneumonia, which can be fatal and the main route of infection is through inhalation, by inhaling airborne water droplets that contain Legionella. This also applies if you are a private Landlord and have rental properties which are occupied.
This includes legionella awareness, taking suitable precautions to prevent, manage and control the risk of exposure to legionella. You can do this by undertaking the following: legionella awareness training, a risk assessment, actioning all identified risks within the initial report with remedial works, sampling the water quality to confirm bacterial presence with water testing, and carrying out ongoing record keeping also known as monitoring.
We also offer a legionella awareness training course. You can learn all you need to know about legionella bacteria, legionnaires disease and water systems from the comfort of your own home with our online course and awareness training. Our Legionella awareness course is succinct and easy to follow, telling you what you need to know about legionella bacteria. As well as, giving you all the information you need about legionnaires disease, legionella bacteria and disease awareness. Our online course aims to make legionella awareness training accessible to all.
Do I need legionella bacteria testing, a risk assessment or both?
Legionella and legionnaires testing, water testing or sampling is not to be confused with a legionella risk assessment. You are required by law to undertake a legionella risk assessment under the Health and Safety at Work Act 1974, COSHH and a number of other regulations where you can show you are working to comply with the HSE's HSG 274 legionella guidelines. Testing or sampling for legionella awareness, whilst not a legal requirement on it's own, it plays an important role in determining how efficient a water system is managed. Your risk assessment may identify that sampling is required due to existing risks or as control measures and management precaution. In this instance legionella awareness sampling then becomes a requirement from your assessment. Without an L8 risk assessment you will not know where and how many samples are required. And without water testing/sampling you cannot determine how affective your control and management is. These two actions therefore should be undertaken together, not necessarily at the same time but unison to effectively management your risk from legionella. Legionella awareness training is another step in helping ensure your company is free of legionella bacteria.
Water testing services include Legionella, e-Coli, total viable count (TVC), Pseudomonas, hard water, chlorine free, pH levels and more. Learn more about legionella testing. We only use UKAS approved laboratories giving you peace of mind that the test will be of the highest quality possible.
We also offer legionella awareness training. You can learn all you need to know about legionella bacteria, legionnaires disease and water systems from the comfort of your own home with our online course and awareness training. Our Legionella awareness course is succinct and easy to follow. Giving you all the information you need about legionnaires disease, legionella bacteria and water systems. Our online course aims to make legionella awareness training accessible to all.
How much does an L8 risk assessment cost?
All assessments vary in prices depending on the number of water outlets, cold water storage tanks, hot water cylinders, combi boilers and other water assets that may be present. The number of assets within your water system will determine the time spent on site and how long it will take to produce your report.
So how much does it cost? Across the industry, prices vary enormously often depending on the size of the company you use and their processes, the speed of works and professionalism. There are two types of assessments, the first is commercial and the second domestic, also referred to as residential rental properties or landlord risk assessments.
Commercial risk assessments normally start from £250 to in excess of £750, however our prices start from £99 depending on the size of the water systems and location.
Domestic risk assessments can range tremendously with a number of plumbers, gas engineers and other tradesmen offering these assessments without the specialist training, it’s important to check that your assessor or engineer is properly qualified. Our prices start from £55 for multiple landlord properties to £95 for single landlord properties. Our prices for residential rental properties are based on the property being no more than 5 bedrooms.
How long will the risk assessment take?
On average, the time our qualified assessor spends on site is 1 hour for every 10 outlets (sinks, showers, baths, etc). So an assessment can take anywhere between 30 minutes to 6 or 7 hours. It entirely depends on the size of your water system and the number of water assets you have such as cold water storage tanks, cylinders or combination boilers.
Our engineers will work closely with you to ensure minimal disruption to your business is caused. Clear and easy access to rooms and buildings will play a part in time spent on site at your premises.
When will I receive your findings?
You will receive your LRA report between 2-10 working days from the date the assessment was carried out. From time to time, not often, our team will need a little more time, so please expect to have your report no later than 30 days. Need your assessment sooner? Get your report, guaranteed next day delivery via email for just £50.
What happens after I receive the report?
Within your report document, you will have an action plan offering guidance which lists all identified dangers of legionella and risks associated with legionella, with photos, that need remedying in order of importance. By following our advice and undertaking remedial works you will reduce the risk of exposure to Legionnaires' disease. Once all the remedial works are complete, you will then need to focus on implementing your monitoring (periodical checks and maintenance) with a logbook for recording keeping all legal duties and monitoring requirements.
Are uRisk qualified?
Yes, all of our assessors are fully qualified and accredited by City & Guilds and can help assist you in meeting compliance today for HSE (ACoP L8). We are also Safe Contractor and Construction Online approved so you can rest assured that you are working with a trusted water hygiene service provider who put health and safety first.
All our engineers are DBS Checked to ensure suitable people are entering your premises and to safeguard vulnerable people. We are committed to maintaining the highest standards.
Do uRisk service my area?
Yes, our services are nationwide. Whether you have one or multiple water systems and one or multiple sites, we provide services across the country, with qualified engineers scattered throughout the UK and offices based in Hertfordshire which is a 30-minute train journey to London King’s Cross.
Who is the Legionella Responsible Person?
Who is the Legionella Responsible Person?
The legionella responsible person would be an individual involved in managing the risk of legionella bacteria in your companies water systems, whether your company uses hot and cold water systems. Especially water systems that pose a reasonably foreseeable legionella risk. A companies legionella responsible person may include (but are not limited to) Duty Holders, a Companies Responsible Persons, Deputy Responsible Persons and Landlords.
Role of the Legionella Responsible Person: Training
When it comes to legionella responsible person training, the responsible person must first be assigned. These individuals who have been selected as the legionella responsible person, whether they are Duty Holders, a Companies Responsible Persons, Deputy Responsible Persons and or Landlords, must undergo the relevant legionella responsible person training. These aforementioned roles typically have significant control over and responsibility for the management of legionella in the workplace, in accordance the Health and Safety Executives ACOP L8, and Health and Safety Guidance HSG274 Parts 2 and 3.
Duty Holder Training Courses
Typically candidates will have management responsibility for the day-to-day control of legionella risk systems, monitor legionella bacteria in water systems, compliance requirements, the safe storage of water and safe operation of water risk systems under their control.
If you require training involving the health safety management, the risks associated with managing water and the control of legionella in hot and cold water systems you should consider our city guilds accredited programme and online course.
Control of Legionella Bacteria in Hot & Cold Water Systems
- The role of the responsible person, or duty holder, is to have the knowledge to monitor and regulate legionella bacteria risk management in hot and cold water systems. As well as identify bacteria risk systems and meet compliance requirements.
- This responsible person, or duty holder, must know the necessary steps associated to the control of legionella bacteria in hot and cold water systems and be able to provide technical guidance and effective safety management of bacteria risk systems.
- The role of the responsible person, or duty holder, is to pass the necessary legionella safety training in the control of legionella bacteria in water systems and maintaining water safety. The Duty holder must pass a city guilds accredited legionella training course, so as to have the necessary knowledge to be able to provide technical guidance relevant to the United Kingdom health safety laws for risk systems.