Privacy Policy
1. Who we are
Stevenson Building Contractors Limited (“we”, “us”, “our”) is the data controller for the personal information described in this policy. We are registered in England and Wales under company number 04475375, at Chargrove House, Main Road, Shurdington, Cheltenham, Gloucestershire, GL51 4GA. You can reach us at office@stevensonbuilding.co.uk or on 01454 269 430.
This policy explains what we do with personal information collected through www.stevensonbuildingcontractors.com and when you contact us about building work. It does not cover third-party websites you reach through links on our site.
2. What we collect
When you use our enquiry form, email us or call us, we collect your name, email address, telephone number, the address of the property the enquiry relates to, and whatever details you give us about the work.
When you browse the site, we and our analytics provider collect technical information: your IP address (normally anonymised), browser and device type, the pages you visit and how long you spend on them, and how you found us. This is collected using cookies, and only with your consent. See our Cookie Policy.
3. How we use it, and our lawful basis
Data protection law requires us to have a valid lawful basis for each use of your information:
- To respond to enquiries and answer questions about our services. Basis: our legitimate interest in running the business and replying to people who contact us.
- To prepare quotations, estimates and specifications. Basis: steps taken at your request before entering into a contract.
- To carry out building work, manage the project, invoice you and take payment. Basis: performance of our contract with you.
- To keep project records for warranty, insurance and dispute purposes. Basis: our legitimate interest in protecting our position and honouring our obligations.
- To meet health and safety, building control, accounting and tax duties. Basis: legal obligation.
- To understand how the website is used and improve it. Basis: your consent, given through our cookie banner.
- To keep the website secure. Basis: our legitimate interest in protecting the site and its users.
Where we rely on legitimate interests, we have satisfied ourselves that our interests are not overridden by your rights. You can object at any time.
We may send you information about our services where you have asked us to, or where you are an existing customer and the work is similar to what we have already done for you. Every marketing email includes an unsubscribe link.
4. Who we share it with
We do not sell your personal information. We share it only where necessary, with: subcontractors, tradespeople, suppliers, architects, surveyors and building control bodies involved in your project; our IT, hosting, email and cloud storage providers; our analytics provider, where you have consented; our accountants, insurers and, if needed, our legal advisers; and regulators or authorities where the law requires it. It may also transfer to a buyer if we sell or reorganise the business.
Where a supplier processes information on our behalf, we have a written agreement requiring them to keep it secure and use it only as we instruct.
5. Storage and transfers abroad
We aim to keep personal information in the UK and the European Economic Area. Some providers, including Google, may process data outside the UK. Where that happens we rely on a safeguard recognised under UK law, such as adequacy regulations or the International Data Transfer Agreement. Ask us if you would like more detail.
6. How long we keep it
- Enquiries that do not lead to a quotation: [12] months from last contact.
- Quotations not accepted: [2] years from the date of the quotation.
- Customer and project records: [6] years from completion, or [12] years where the contract was executed as a deed.
- Accounting and tax records: 6 years from the end of the accounting period, as the law requires.
- Health and safety records: as long as the applicable regulations require.
At the end of the relevant period we securely delete or anonymise the information, unless we are required to keep it for longer.
7. Security
We use appropriate technical and organisational measures to protect personal information, including access controls, password protection, secure connections to our website, and limiting access to those who need it. No transmission over the internet can be guaranteed to be completely secure.
8. Your rights
You have the right to be told how we use your information, to get a copy of it, to have it corrected, to have it deleted where there is no good reason for us to keep it, to restrict how we use it while a concern is resolved, to object to uses based on legitimate interests, to object to direct marketing at any time, to have it transferred to you or another organisation where it was provided by you, and to withdraw consent where we rely on it.
To exercise any of these, email office@stevensonbuilding.co.uk. We will respond within one month and there is normally no charge, though we may ask you to confirm your identity first.
9. Children
Our website and services are aimed at adults and businesses. We do not knowingly collect personal information from children. If you believe a child has given us their details, contact us and we will delete them.
10. Complaints
If you are unhappy with how we have handled your information, please contact us first at office@stevensonbuilding.co.uk so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk, on 0303 123 1113, or at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
11. Changes
We may update this policy from time to time. The date at the top shows when it was last changed.