Privacy Policy & GDPR Compliance

1. Who We Are & Our Commitment

Buildworks (Mansfield) Limited is committed to protecting your personal information and respecting your privacy rights. As a domestic building contractor, we collect and process personal data in accordance with UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Personal Data We Collect

We may collect and process the following types of personal information:

Contact & Identity Information

• Name, address, telephone numbers
• Email addresses
• Property ownership details
• Emergency contact information

Project & Business Information

• Building project requirements and specifications
• Property photographs and site measurements
• Financial information for quotes and invoicing
• Communication records (emails, phone calls, site meetings)
• Contractor and supplier contact details

Legal & Compliance Data

• Insurance and warranty information
• Health and safety records
• Planning permission and building regulation documents

3. How We Use Your Personal Data

We process your personal data for the following purposes:

Contract Performance (Legal Basis: Contract)

• Providing building and construction services
• Project planning and management
• Coordinating with suppliers and subcontractors
• Invoicing and payment processing

Legal Obligations (Legal Basis: Legal Obligation)

• Health and safety compliance
• Building regulations and planning requirements
• Insurance and warranty obligations
• Tax and accounting requirements

Legitimate Interests (Legal Basis: Legitimate Interest)

• Business development and marketing (with appropriate safeguards)
• Quality control and customer satisfaction
• Dispute resolution and legal protection

4. Who We Share Your Data With

We may share your personal data with:

• Subcontractors and suppliers: To complete your building project
• Professional advisors: Including solicitors, accountants, and insurers
• Regulatory bodies: Where required by law (Building Control, Planning Authorities)
• Emergency services: If required for health and safety purposes

5. How Long We Keep Your Data

We retain personal data for different periods depending on the purpose:

• Contract and project records: 6 years after completion (legal requirement)
• Health and safety records: 40 years (CDM Regulations requirement)
• Financial records: 6 years (HMRC requirement)
• Insurance and warranty records: Duration of warranty period plus 6 years
• Marketing communications: Until you withdraw consent

6. Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of Access

You can request a copy of the personal data we hold about you.

Right to Rectification

You can ask us to correct any inaccurate or incomplete personal data.

Right to Erasure (‘Right to be Forgotten’)

You can request deletion of your personal data, subject to legal requirements.

Right to Restrict Processing

You can ask us to limit how we use your personal data in certain circumstances.

Right to Data Portability

You can request your data in a portable format to transfer to another provider.

Right to Object

You can object to processing based on legitimate interests or for marketing purposes.

Rights Related to Automated Decision Making

We do not use automated decision-making or profiling systems.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes:

• Secure storage of physical documents
• Password protection and encryption for digital records
• Regular backup procedures
• Staff training on data protection
• Secure disposal of confidential waste

8. Cookies and Website Data

If you visit our website, we may use cookies to improve your browsing experience. Essential cookies are necessary for the website to function, while optional cookies help us understand how you use our site. You can control cookie settings through your browser preferences.

9. Marketing Communications

We may send you marketing communications about our services if:

• You have given explicit consent, or
• You are an existing customer and we have a legitimate interest (with easy opt-out options)

You can withdraw consent or opt-out at any time by contacting us or using the unsubscribe links in our communications.

10. Third Party Links

Our communications may contain links to third-party websites. We are not responsible for the privacy practices of other websites and encourage you to read their privacy policies.

11. Children’s Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children without appropriate parental consent.

12. International Transfers

We primarily process data within the UK. If we need to transfer data internationally, we will ensure appropriate safeguards are in place to protect your personal data.

13. Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. We will notify you of any significant changes and update the ‘last updated’ date below.

14. Contact Us & Make a Complaint

If you have any questions about this privacy policy, want to exercise your rights, or have concerns about how we handle your personal data, please contact us: