Website Privacy Policy
1. Introduction
Build Plus (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal data with transparency and care. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website or contact us about our services.
We are a building company offering new builds, extensions, and heating installation services. This policy applies to all personal data we collect through our website, enquiry forms, emails, and telephone communications.
We encourage you to read this policy carefully. By using our website, you acknowledge that you have read and understood how we process your personal data.
2. Who We Are (Data Controller)
Build Plus is the data controller responsible for your personal data. Our contact details are:
| Company Name | Build Plus |
| Address | [Registered Address, Town, County, Postcode] |
| info@buildplus.co.uk | |
| Telephone | [Your Phone Number] |
| Website | www.buildplus.co.uk |
| ICO Reference | [Your ICO Registration Number] |
If you have any questions about this policy or how we handle your data, please contact us using the details above.
3. Personal Data We Collect
Depending on how you interact with us, we may collect the following categories of personal data:
3.1 Information You Provide Directly
- Your name and contact details (email address, phone number, postal address)
- The nature of your building or heating project enquiry
- Photographs or plans you share with us to support a quote or estimate
- Payment and billing information (processed securely via third-party payment providers)
- Any other information you voluntarily include in messages or forms
3.2 Information Collected Automatically
- Your IP address and approximate location
- Browser type, operating system, and device information
- Pages visited on our website, time spent, and links clicked
- Referring website or search terms that brought you to our site
- Cookie identifiers and session data (see Section 9 for our Cookie Policy)
3.3 Information from Third Parties
- Publicly available professional information (e.g. from LinkedIn or company directories)
- Referrals from existing clients, partners, or trade bodies
- Information from review platforms such as Checkatrade or Trustpilot
4. How We Use Your Personal Data
We use your personal data only for legitimate purposes. The table below sets out each purpose and the legal basis under UK GDPR on which we rely:
| Purpose | Details & Legal Basis |
|---|---|
| Responding to enquiries | To respond to your project enquiries, provide quotes, and discuss your requirements with you. Legal basis: Legitimate interests / Pre-contractual steps. |
| Delivering our services | To manage contracts, arrange site visits, and deliver building, extension, or heating installation work. Legal basis: Performance of a contract. |
| Processing payments | To raise invoices, process payments, and maintain financial records. Legal basis: Performance of a contract / Legal obligation. |
| Marketing communications | To send you information about our services, promotions, or project updates where you have consented or we have a legitimate interest. Legal basis: Consent / Legitimate interests. |
| Improving our website | To understand how visitors use our website and improve user experience. Legal basis: Legitimate interests. |
| Legal and regulatory compliance | To comply with applicable laws, regulations, and professional obligations, including tax and health and safety requirements. Legal basis: Legal obligation. |
| Protecting our business | To detect, prevent, and investigate fraud, security incidents, or legal claims. Legal basis: Legitimate interests. |
5. Our Legal Basis for Processing
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we must have a valid legal basis for processing your personal data. We rely on the following bases:
- Contract: Where processing is necessary to fulfil a contract with you or take steps at your request before entering into one.
- Legal obligation: Where processing is required to comply with a legal or regulatory duty.
- Legitimate interests: Where we have a genuine business need to process your data, and that need is not outweighed by your rights and interests.
- Consent: Where you have given us clear and specific consent to process your data for a particular purpose (e.g. marketing emails). You may withdraw consent at any time.
6. Sharing Your Personal Data
We do not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your information with trusted third parties only where necessary and in the following circumstances:
- Subcontractors and trade professionals engaged to carry out work on your project, who are bound by confidentiality obligations.
- IT and website service providers who host our website, manage our email systems, or provide customer relationship management (CRM) tools.
- Accounting, payroll, and financial service providers for billing and bookkeeping purposes.
- Legal and professional advisers, including solicitors and insurers, where necessary.
- Regulatory authorities, government bodies, or law enforcement agencies where required by law or to protect our legal rights.
All third parties we work with are required to process your data in accordance with data protection law and our instructions. We do not transfer your personal data outside the United Kingdom except where appropriate safeguards are in place.
7. How Long We Keep Your Data
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our general retention periods are set out below:
| Enquiry records (no contract formed) | 12 months from date of last contact |
| Client and project records | 7 years from project completion (for tax and legal purposes) |
| Financial and invoicing records | 7 years (as required by HMRC) |
| Warranty and guarantee documentation | Duration of the warranty period plus 2 years |
| Marketing consent records | Until you withdraw consent or 3 years of inactivity |
| Website analytics data | 26 months (in anonymised/aggregated form) |
| CCTV footage (if applicable on site) | 31 days unless required for investigation |
When your data is no longer required, we will securely delete or anonymise it in accordance with our data retention procedures.
8. Your Rights
Under UK data protection law, you have the following rights regarding your personal data. You may exercise any of these rights free of charge by contacting us at the details in Section 2:
| Your Right | What it means |
|---|---|
| Right of Access | You can request a copy of the personal data we hold about you (a Subject Access Request). We will respond within one month. |
| Right to Rectification | You can ask us to correct any inaccurate or incomplete personal data we hold about you. |
| Right to Erasure | You can ask us to delete your personal data where there is no compelling reason for us to continue holding it (“right to be forgotten”). |
| Right to Restrict Processing | You can ask us to limit how we use your data in certain circumstances, such as while a dispute is resolved. |
| Right to Data Portability | You can request that we transfer your data to another organisation or provide it to you in a structured, commonly used format. |
| Right to Object | You can object to us processing your data based on legitimate interests or for direct marketing purposes. |
| Rights re: Automated Decisions | You have the right not to be subject to decisions made solely by automated processing that significantly affect you. We do not use automated decision-making in our operations. |
| Right to Withdraw Consent | Where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of prior processing. |
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection supervisory authority. You can contact the ICO at www.ico.org.uk or by calling 0303 123 1113.
9. Cookies
Our website uses cookies to distinguish you from other users, improve your experience, and help us understand how our site is used. A cookie is a small text file placed on your device when you visit a website.
9.1 Types of Cookies We Use
| Strictly Necessary | Essential for the website to function. These cannot be switched off. Examples: session cookies, security tokens. |
| Performance / Analytics | Help us understand visitor behaviour and improve our website (e.g. Google Analytics). These are set only with your consent. |
| Functionality | Remember your preferences and settings to enhance your experience. Set only with your consent. |
| Marketing | Used to deliver relevant advertising and track the effectiveness of campaigns. Set only with your consent. |
9.2 Managing Cookies
When you first visit our website, you will be shown a cookie consent banner. You can choose to accept all cookies, reject non-essential cookies, or customise your preferences. You can also update your cookie settings at any time using the cookie preferences link in our website footer.
You can also control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. For more information about cookies, visit www.allaboutcookies.org.
10. Third-Party Links
Our website may contain links to third-party websites, social media platforms, or services (for example, Checkatrade, Trustpilot, or Google Maps). These links are provided for your convenience and information only. Build Plus is not responsible for the privacy practices or content of those third-party sites. We encourage you to read the privacy policies of any external sites you visit.
11. Data Security
We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against accidental loss, unauthorised access, alteration, or disclosure. These measures include:
- SSL/TLS encryption for data transmitted via our website
- Password protection and access controls on systems holding personal data
- Regular software updates and security patches
- Restricted access to personal data on a need-to-know basis
- Secure disposal of physical documents containing personal data
While we take every reasonable precaution, no method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the ICO as required by law.
12. Children’s Privacy
Our website and services are not directed at children under the age of 13, and we do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will take steps to delete it.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make changes, we will update the “Last updated” date at the top of this document and, where the changes are significant, we will notify you by email or by placing a prominent notice on our website.
We encourage you to review this policy periodically. Your continued use of our website after any changes are made constitutes your acceptance of the updated policy.
14. Contact Us & Complaints
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
| info@buildplus.co.uk | |
| Post | Data Enquiries, Build Plus, [Registered Address, Town, Postcode] |
| Phone | [Your Phone Number] |
| Website | www.buildplus.co.uk |
We will aim to respond to all requests within 30 days. If you are not satisfied with our response, you have the right to make a complaint to the Information Commissioner’s Office (ICO):
| ICO Website | www.ico.org.uk |
| Helpline | 0303 123 1113 |
| Post | Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF |