PRIVACY POLICY

1. Data Controller Identity & Contact Details

Enviro Building Company (“we”, “us”, or “our”) is committed to protecting and respecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Personal Data We Collect

We only collect personal data that is necessary to respond to your project enquiries, review architectural drawings or tender documents, and maintain the security of our website:

• Enquiry & Contact Information: Your full name, email address, telephone number, company or architectural practice name (where applicable), and site postcode or area.
• Project Briefs & Attachments: Project scope details, messages, and any architectural drawings, schedules, or documents you voluntarily upload through our enquiry form or send to us by email.
• Technical & Security Data: Standard HTTP request logs (such as IP address, browser user-agent, and timestamps) processed automatically to ensure network security, prevent abuse, and deliver the website reliably.

3. Lawful Basis for Processing

Under Article 6 of the UK GDPR, we process your personal data on the following bases:

• Consent — Art. 6(1)(a): Where you submit an enquiry via our website and confirm your agreement for us to store and process your details in order to respond.
• Pre-Contractual Steps & Contract Performance — Art. 6(1)(b): Where processing is necessary to take steps at your request prior to entering into a construction, refurbishment, landscaping, or fit-out contract (such as reviewing drawings, arranging site surveys, or preparing estimates).
• Legitimate Interests — Art. 6(1)(f): For ongoing business communications with clients, architects, surveyors, and commercial partners, as well as maintaining website security and record-keeping.
• Legal Obligation — Art. 6(1)(c): Where we are required to retain records for UK statutory, tax, accounting, or regulatory compliance.

4. Data Storage, Security & Trusted Processors

All data transmitted between your browser and our website is encrypted in transit using HTTPS / TLS 1.3 with Strict Transport Security (HSTS).

Enquiry records are stored securely in our access-controlled PostgreSQL database and dispatched via our transactional email processor (Resend) strictly for the purpose of notifying our team and sending you an acknowledgement of your enquiry. We never sell, rent, or trade your personal data to third parties for marketing purposes.

5. Data Retention & Confidentiality

We retain project enquiry records for up to 24 months from the date of our last correspondence unless the enquiry proceeds to a formal project contract, in which case project records are retained in accordance with standard UK construction contract and statutory limitation periods (typically 6 to 12 years).

All architectural drawings, tender packages, and private residence details submitted through our website are treated as strictly confidential.

6. Your UK Data Protection Rights

Under the UK GDPR, you have the right to:

• Request access to the personal data we hold about you (Subject Access Request).
• Request correction of any inaccurate or incomplete personal data.
• Request erasure of your personal data where there is no overriding lawful reason for us to continue processing it.
• Request restriction of processing or object to processing of your personal data.
• Withdraw your consent at any time by contacting us at the email address below.

To exercise any of these rights, please email info@envirobuilding.co.uk. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at https://ico.org.uk.