Privacy Policy

Who we are

Design Build Surrey is committed to protecting your privacy and ensuring your personal information is handled responsibly and in accordance with the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website or engage with our services.


What information we collect

We may collect and process the following personal data:

Information you provide to us:

  • Name, email address, phone number, and postal address
  • Details about your property and project requirements
  • Budget and timeline information
  • Communication preferences
  • Any other information you choose to provide when contacting us or filling in forms on our website

Information we collect automatically:

  • IP address and browser type
  • Pages visited and time spent on our website
  • Referring website or source
  • Cookies and similar tracking technologies (see our Cookie Policy)

How we use your information

We use your personal data for the following purposes:

To provide our services:

  • Respond to your enquiries and consultation requests
  • Provide quotations, design proposals, and project documentation
  • Manage and deliver your project
  • Communicate with you about your project

To improve our services:

  • Analyse website usage and improve user experience
  • Conduct customer satisfaction surveys
  • Develop new services and offerings

For marketing purposes (with your consent):

  • Send you information about our services, projects, and industry insights
  • Share case studies and portfolio updates

For legal and regulatory compliance:

  • Comply with legal obligations and regulatory requirements
  • Protect our rights and interests
  • Prevent fraud and ensure site security

Legal basis for processing

We process your personal data on the following legal bases:

  • Consent: When you provide consent for marketing communications or cookies
  • Contract: To fulfil our contractual obligations when you engage our services
  • Legitimate interests: To improve our services, analyse website usage, and protect our business
  • Legal obligation: To comply with legal and regulatory requirements

How we share your information

We do not sell or rent your personal data to third parties.

We may share your information with:

Service providers:

Trusted third parties who assist us in delivering our services, such as architects, engineers, subcontractors, and project management software providers. These parties are contractually obligated to protect your data and use it only for the purposes we specify.

Legal and regulatory authorities:

When required by law or to protect our legal rights.

Business transfers:

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new owner.


How we protect your information

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse.

Our security measures include:

  • Secure servers and encrypted data transmission (SSL)
  • Access controls and password protection
  • Regular security audits and updates
  • Staff training on data protection and confidentiality

However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.


How long we keep your information

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required by law.

Typical retention periods:

  • Enquiries and quotations: 2 years
  • Project documentation: 10 years (to align with warranty and legal requirements)
  • Marketing communications: Until you unsubscribe or withdraw consent
  • Website analytics: 26 months

Your rights

Under GDPR, you have the following rights regarding your personal data:

  • Right to access: Request a copy of the personal data we hold about you
  • Right to rectification: Request correction of inaccurate or incomplete data
  • Right to erasure: Request deletion of your personal data (subject to legal obligations)
  • Right to restrict processing: Request that we limit how we use your data
  • Right to data portability: Request transfer of your data to another organisation
  • Right to object: Object to processing based on legitimate interests or for marketing purposes
  • Right to withdraw consent: Withdraw consent for processing at any time

To exercise any of these rights, please contact us at [Email].


Cookies

Our website uses cookies to improve your browsing experience and analyse site usage.

For detailed information about the cookies we use and how to manage them, please see our [Cookie Policy].


Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. Please review their privacy policies before providing any personal information.


Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised “Last updated” date.

We encourage you to review this Privacy Policy periodically.


Contact us

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us:

Email: [Email]
Phone: 01234 567890
Post: [Address]


Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

ICO Website: www.ico.org.uk
ICO Helpline: 0303 123 1113