We use your information to answer enquiries, prepare quotations, carry out building projects, manage our business and meet legal obligations. We do not sell personal information and we do not currently use enquiry details for promotional email or text marketing.
01
WHO WE ARE
ATC BUILDING SERVICES LTD is the controller responsible for the personal information described in this policy. We are registered in England and Wales under company number 15511081.
REGISTERED OFFICE20 Bluebell Street
Plymouth, England
PL6 8DY
This policy applies to customers, prospective customers, website visitors, suppliers, subcontractors, professional advisers and other people whose information we handle through our business.
02
INFORMATION WE COLLECT
Depending on how you interact with us, we may collect:
- Identity and contact details — name, address, postcode, email address, telephone number and preferred contact method.
- Enquiry and project details — property address, project type, budget, preferred timeframe, plans, specifications, photographs, measurements, access details and messages.
- Contract and transaction details — quotations, estimates, agreements, variations, invoices, payment status and limited payment references. We do not need your full card details.
- Property and site information — condition, utilities, hazards, permissions, drawings, inspections, progress records, completion records and site photographs.
- Communications — emails, letters, call notes, complaint records, feedback and records of permissions you give us.
- Supplier and professional details — business contact, insurance, competence, tax and payment information needed to manage working relationships.
- Technical information — IP address, browser/device information, request time, pages or resources requested, referring address and security logs generated when the website is used.
Please do not send health information or other sensitive information unless it is genuinely needed, for example to arrange safe or accessible site access. If we need this information, we will explain how it will be handled and identify an additional legal condition where required.
Where information comes from
Most information comes directly from you through our website, email, telephone, social media, a site visit or project paperwork. We may also receive relevant information from someone acting for you, joint property owners, architects, surveyors, engineers, subcontractors, suppliers, local authorities, building control, public registers or referral partners. If you give us another person's details, please ensure they know you are doing so and can read this policy.
03
HOW AND WHY WE USE IT
UK data protection law requires a lawful basis for each use of personal information. Our principal purposes and bases are:
| Purpose | Lawful basis |
|---|---|
| Respond to an enquiry, arrange a visit and prepare or discuss a quotation. | Steps requested before entering a contract; our legitimate interest in responding to genuine enquiries. |
| Form, administer and perform a project contract, including access, communications, payments, variations, handover and aftercare. | Performance of a contract or steps requested before one. |
| Purchase materials, coordinate workers, subcontractors and professional advisers, and manage project safety and quality. | Performance of a contract; legal obligations; legitimate interests in delivering and managing work safely. |
| Issue invoices, keep tax and accounting records, verify identity where required and respond to lawful authority requests. | Legal obligation; legitimate interests in maintaining accurate business records. |
| Handle complaints, defects, disputes, insurance matters and legal claims. | Contract; legal obligation; legitimate interests in resolving issues and establishing, exercising or defending legal claims. |
| Protect our website, systems, workforce, customers and property; prevent misuse, fraud and security incidents. | Legal obligation; legitimate interests in security and preventing wrongdoing. |
| Use an identifiable review, testimonial or project image in marketing. | Your permission or consent, which can be withdrawn for future use. |
No current direct marketing
We do not currently use enquiry details to send promotional email or text marketing. If this changes, we will update this policy and comply with the Privacy and Electronic Communications Regulations, including providing any consent choice and a simple opt-out. Service messages about your enquiry, quotation or project are not marketing.
If information is not provided
Fields marked as required are needed to assess and respond to a website enquiry. If information required for a quotation, contract, safety obligation or payment is not provided, we may be unable to quote, begin or continue the relevant work. Providing information for marketing photographs or testimonials is always optional.
04
SHARING AND TRANSFERS
We share only what is reasonably necessary. Depending on the project, recipients may include:
- our authorised staff, workers and subcontractors;
- architects, engineers, surveyors, building control, local authorities, utility providers and other project professionals;
- material suppliers, plant hire, waste carriers and delivery providers where delivery or site details are required;
- website hosting, IT, communications, email, document storage and security providers acting for us;
- accountants, banks, payment providers, insurers, brokers, legal advisers and debt recovery providers;
- police, regulators, courts, HMRC or another authority where disclosure is required or permitted by law; and
- a buyer, investor or adviser involved in a genuine sale, merger or restructuring of the business, subject to confidentiality and legal safeguards.
We require service providers to protect information and use it only for the agreed service. We do not sell or rent your personal information.
International transfers
Some technology providers may process or support information outside the UK. Where personal information is transferred internationally, we use providers and safeguards permitted by UK data protection law, such as UK adequacy regulations, the UK International Data Transfer Agreement or an approved UK addendum, together with additional protections where required. You may contact us for more information about the safeguard relevant to your data.
05
RETENTION AND SECURITY
How long we keep information
We keep information only for as long as reasonably needed for the purpose collected, including legal, accounting, insurance and dispute requirements. Our normal periods are:
- Enquiries that do not become projects: up to 12 months after the last meaningful contact.
- Customer, quotation, contract, project and financial records: normally seven years after project completion or the final transaction.
- Complaints, incidents and legal claims: for the applicable claim period and while a matter remains active.
- Project photographs used with permission: while reasonably useful for the agreed purpose, subject to withdrawal affecting future use.
- Technical and security logs: for the shorter period set by operational and hosting security needs, unless needed to investigate an incident.
We may keep information longer where law, an insurer, regulator, dispute or court requires it, or delete or anonymise it sooner where it is no longer needed.
How we protect information
We use proportionate technical and organisational measures designed to prevent unauthorised access, alteration, disclosure or loss. These include access controls, reputable service providers, device and account security, backups where appropriate and limiting access to people who need the information. No internet or storage system is completely secure; if a personal data breach creates a legal notification duty, we will notify the ICO and affected people as required.
06
YOUR DATA PROTECTION RIGHTS
Depending on the circumstances, you may have the right to:
- be informed about how your information is used;
- request access to your personal information and a copy of it;
- ask us to correct inaccurate or incomplete information;
- ask us to erase information where there is no lawful reason to retain it;
- ask us to restrict how information is used;
- receive information you provided in a portable format where the right applies;
- object to processing based on legitimate interests and object at any time to direct marketing; and
- withdraw consent at any time where we rely on consent, without affecting earlier lawful use.
These rights are not absolute and exemptions may apply, for example where records must be kept by law or are needed for legal claims. We do not make decisions about you solely by automated means that produce legal or similarly significant effects.
Making a request
Contact us using the details below and describe what you need. We may ask for reasonable proof of identity to protect your information. We normally respond within one month and do not charge a fee, although the law permits a reasonable fee or refusal for requests that are manifestly unfounded or excessive.
07
WEBSITE, COOKIES AND EXTERNAL SERVICES
Cookies
Our website does not currently set optional analytics or advertising cookies and we do not use advertising pixels. Essential cookies or similar technologies may be used by the website platform where strictly necessary for security, network management or features you request. Because these do not require consent, they may operate automatically. We will update this policy and introduce an appropriate consent choice before adding non-essential cookies.
Server logs and externally hosted content
Our hosting provider may automatically create technical logs when a page or form endpoint is requested. The website may also load media from external content providers; your browser then connects to that provider and may disclose technical details such as your IP address. At the date of this policy, some general website imagery is delivered by Unsplash. Their handling of information is governed by their own privacy information.
Other websites and social media
Links to Facebook, Unsplash or another third-party service take you outside our website. Those organisations are separate controllers and their policies apply. We are not responsible for their privacy practices. Merely displaying a normal external link does not share your enquiry details with that service.
08
CONTACT, COMPLAINTS AND CHANGES
Contact us first
For a privacy question or to exercise a right, email info@atcbuilding.co.uk, call 07771 729 892, or write to ATC Building Services Ltd, 20 Bluebell Street, Plymouth, England, PL6 8DY.
Information Commissioner's Office
You have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator. We would appreciate the opportunity to address your concern first.
Make a complaint to the ICO ↗
Telephone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Changes to this policy
We may update this policy when our services, providers or legal obligations change. The latest version will appear on this page with its updated date. If a material change affects information we already hold, we will take reasonable steps to tell affected people before the new use begins where required.
NEED HELP?