Privacy policy.

UK Built Ltd ("we", "us", "our") is the controller of the personal information described in this policy. We are registered with the Information Commissioner's Office (ICO) under registration number ZA123456.

This policy explains what we collect, why, how we use it, and the rights you have under UK data-protection law. It applies to our website at ukbuilt.co.uk and to anyone who contacts us about a project.

1. Who we are

UK Built Ltd is a construction company incorporated in England and Wales (Company Number 12345678), with its registered office in London. For any privacy-related query, contact our Data Protection Officer at privacy@ukbuilt.co.uk or call 07404 181018.

2. What information we collect

We only collect personal information that is reasonably necessary for our business. The kinds of information we collect include:

• Identity & contact details — name, email, phone number, property address, provided when you make an enquiry, request a quote, or sign a contract with us.
• Project details — property type, scope of work, drawings, planning status, budget range, and any notes you share with us.
• Financial details — bank account details (for invoices and payments), and limited payment-card information processed by our payment provider (we never store full card numbers).
• Website usage — pages visited, time on site, approximate location, device and browser type. See our cookie policy for details.

3. Why we collect it (lawful basis)

Under the UK GDPR, we must have a lawful basis for handling your information. The bases we rely on are:

• Performance of a contract (Article 6(1)(b)) — to provide a quote, manage a project, and fulfil our contractual obligations to you.
• Legitimate interests (Article 6(1)(f)) — to operate and improve our business, prevent fraud, ensure site safety, and keep records of completed work.
• Legal obligation (Article 6(1)(c)) — to comply with tax, insurance, health & safety, and construction-industry record-keeping requirements.
• Consent (Article 6(1)(a)) — for marketing communications and non-essential cookies. You can withdraw consent at any time.

4. How we use it

We use your personal information to:

• Respond to your enquiry and provide quotes.
• Plan, manage, and deliver construction projects you have asked us to carry out.
• Issue invoices and process payments.
• Comply with our legal obligations (HMRC, HSE, insurance, Building Regulations).
• Send service communications about a project (e.g. programme changes, completion certificates).
• Send marketing communications (only with your consent).

We will never sell your personal information, and we do not share it with third parties for their own marketing purposes.

5. Who we share it with

We share personal information with a small number of trusted service providers, only as needed:

• Subcontractors and suppliers — for delivering your project (e.g. electricians, plumbers, material suppliers). They only receive information necessary for the work.
• Professional advisers — accountants, solicitors, and insurance providers.
• Payment processor — for invoice payments.
• Email and IT providers — who host our systems and backups.
• Regulators and authorities — HMRC, HSE, Building Control, and law enforcement with proper authority.

Each provider is bound by their own data-protection obligations and may only use your information to provide the service they offer us.

6. International transfers

We do not routinely transfer your personal information outside the UK. Where a service provider is based outside the UK (for example, a cloud host), we ensure adequate safeguards are in place — either UK adequacy regulations, Standard Contractual Clauses, or equivalent approved mechanisms.

7. How we protect it

We take appropriate technical and organisational measures to protect your personal information, including:

• Encrypted connections (HTTPS/TLS) on our website and email.
• Access controls on internal systems, with least-privilege permissions.
• Regular review of the third-party providers who handle data on our behalf.
• Staff training on data-protection obligations.

8. How long we keep it

We keep personal information only for as long as needed for the purpose it was collected, or as required by law. Typical retention periods:

• Enquiries that don't lead to work — 12 months
• Project records — 7 years (HMRC and construction-industry record-keeping requirement)
• Health & safety records — minimum 5 years (RIDDOR)
• Marketing list — until you unsubscribe

9. Your rights

Under the UK GDPR, you have the right to:

• Access the personal information we hold about you.
• Rectification if the information is inaccurate or incomplete.
• Erasure ("right to be forgotten") in certain circumstances.
• Restriction of processing in certain circumstances.
• Object to processing based on legitimate interests or for direct marketing.
• Data portability for information you provided to us.
• Withdraw consent at any time (where processing is based on consent).
• Lodge a complaint with the ICO.

To exercise any of these rights, contact privacy@ukbuilt.co.uk. We will respond within one calendar month.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page with a "last updated" date at the top. If the changes are material, we will let you know by email if you are a current or past client.