LEGITIMATE INTEREST ASSESSMENT

Approved by JimPatrick Munupe, Founder & Director · 16 January 2026 · Next review due 16 January 2027

This statement explains how Ascent Onsite Group Ltd(“AOG”, “we”) uses legitimate interests as a lawful basis for processing personal data under the UK GDPR. It supports our Privacy Policy and summarises the legitimate interest assessment we carry out before relying on this basis.

1. What legitimate interest means

Legitimate interests is one of six lawful bases for processing under the UK GDPR. We can rely on it where the processing is necessary for our genuine interests, or those of a third party, provided those interests are not overridden by the rights and freedoms of the individuals concerned. Before relying on it, we apply a three-part test: purpose, necessity and balancing.

2. When we rely on it

• Responding to business enquiries and preparing quotes and tenders.
• Managing and securing our sites, including the safety of staff, visitors and the public.
• Administering and improving our services and website.
• Preventing fraud and ensuring network and information security.
• Limited business-to-business marketing to relevant contacts, where you can object at any time.

3. Purpose test

We identify the specific interest pursued by each processing activity, why it matters to AOG and any third party, and the benefit we expect. The purposes listed above are legitimate, clearly defined and not in breach of any law. We maintain detailed legitimate interest assessment records for each processing activity.

4. Necessity test

We consider whether the processing is a reasonable and proportionate way to achieve the purpose, and whether we could achieve the same outcome in a less intrusive way. Where a less intrusive route is reasonably available, we use it instead. We do not process more personal data than is required to fulfil the stated purpose.

5. Balancing test

We weigh our interest against the interests, rights and freedoms of the individual. We take account of the nature of the data, the reasonable expectations of the individual, and the likely impact of the processing. Where the impact on the individual outweighs our interest, we do not rely on legitimate interests. We apply additional care to any data relating to children or vulnerable people.

6. Your right to object

Where we rely on legitimate interests, you have the right to object to the processing. For direct marketing, we will always stop on request. For other processing, we will stop unless we can show compelling legitimate grounds that override your interests, or the processing is for the establishment, exercise or defence of legal claims.

7. Contact

To object, or to ask for a copy of the relevant legitimate interest assessment, email support@ascentonsite.groupor write to the data protection contact at our registered office: Ascent Onsite Group Ltd, Unit 4 Ground Floor, The Cobalt Centre, Siskin Parkway East, Coventry CV3 4PE. You can also complain to the Information Commissioner's Office at ico.org.uk.