Important: This document is a general information template and does not constitute legal advice. It should be reviewed by a qualified UK solicitor to ensure it reflects the company's current practices and circumstances.
This draft policy describes how BSure Roofing and Building Ltd may handle personal information when you visit this website, request a quote, contact us or use services. It must be checked against actual data practices and providers. It is intended to reflect the UK GDPR and Data Protection Act 2018.
1. Who we are
BSure Roofing and Building Ltd is the controller of personal information described in this policy. For privacy enquiries or to exercise your rights, contact us through the website contact page.
2. Information we collect
- Contact details, including your name, telephone number and email address.
- Property and project details, including postcode, service required, urgency and information included in your message or quotation request.
- Correspondence and records of our communications with you.
- Quotation, contract, payment and work records where you become a customer.
- Basic technical records necessarily processed by our website hosting and form providers, such as IP address, browser information, timestamps and security logs.
3. How we use your information
- Respond to enquiries and prepare or provide quotations.
- Arrange, manage and complete roofing or building work.
- Communicate about appointments, work, payments, guarantees and aftercare.
- Keep business, tax and accounting records.
- Protect our website, staff, customers and legal rights.
- Comply with legal and regulatory obligations.
4. Our lawful bases
Depending on the circumstances, we process information because it is necessary to take steps at your request before entering a contract, to perform a contract, to comply with a legal obligation, or for legitimate interests such as responding to enquiries, administering the business, preventing fraud and handling legal claims. Where consent is the appropriate basis, you may withdraw it at any time.
5. Service providers and sharing
We share information only where reasonably necessary. Website enquiry and quotation forms are processed by Formspree, which receives the details entered in the form so that your request can be delivered to us. Website hosting and technical service providers may process limited technical data to operate and secure the site. We may also share relevant information with professional advisers, insurers, payment providers, suppliers or subcontractors where needed for your work, and with public authorities where required by law.
- Formspree (form processing): processes enquiry and quotation form submissions on our behalf.
- We do not sell your personal information.
6. International transfers
Some service providers may process information outside the United Kingdom. Where UK data protection law requires it, appropriate safeguards should be used, such as UK adequacy regulations or approved contractual protections. You may contact us for further information about safeguards relevant to your data.
7. How long we keep information
We retain information only for as long as reasonably necessary for the purpose collected, including responding to enquiries, providing work, meeting warranty, tax and accounting obligations, and handling disputes. Enquiries that do not proceed will generally be reviewed and deleted when no longer needed. Contract and financial records may need to be retained for longer statutory limitation and tax periods.
8. Security
We take reasonable organisational and technical steps to protect personal information and limit access to those who need it. No internet transmission or storage system is completely secure, so absolute security cannot be guaranteed.
9. Cookies and analytics
We have not intentionally installed advertising pixels or third-party behavioural analytics on this website. The website and its service providers may use essential storage or technical identifiers required for security, routing and normal operation. If non-essential analytics or advertising cookies are introduced, this policy and the site’s consent controls should be updated before they are used.
10. Your data protection rights
- Ask for access to your personal information.
- Ask for inaccurate or incomplete information to be corrected.
- Ask for deletion where there is no lawful reason to retain the information.
- Object to, or ask us to restrict, certain processing.
- Ask for eligible information to be transferred in a portable format.
- Withdraw consent where processing is based on consent.
- Complain to the Information Commissioner’s Office at ico.org.uk if you are unhappy with how your information is used.
11. Children
Our services are not directed at children and we do not knowingly seek personal information from them. A parent or guardian should contact us if they believe a child has provided information.
12. Changes to this policy
We may update this policy to reflect legal, technical or business changes. The latest version will be published on this page with its updated date.