Privacy Policy

Last Updated: January 21, 2026

1. Introduction

Hancock & Sons Builders is committed to protecting your privacy and ensuring compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website (hancockandsonsbuilders.co.uk) or engage with our building, maintenance, and development services. By using our website or services, you acknowledge that you have read and understood this policy.

2. Data Controller

Hancock & Sons Builders is the data controller responsible for your personal data. Our contact details are:

• Address: Greenwood, Bickley Park Road, Bromley, Kent, BR1 2AT
• Email: info@hancockandsonsbuilders.co.uk
• Phone: 0208 295 1447

3. Types of Personal Data Collected

We collect the following personal data:

• Contact Information: Name, email address, phone number, postal address, and company name (if applicable), provided through contact forms, quote requests, or direct communications.
• Project/Service Information: Details about your building project, requirements, property address, preferences, or attachments (e.g., photos or plans) submitted for quotes or consultations.
• Website Usage Data: IP addresses, browser type, pages visited, and device information, collected via cookies or analytics tools (e.g., Google Analytics, if used).
• Feedback/Communication Data: Information from emails, calls, messages, or feedback about our services.

We do not collect special category data (e.g., health information) unless exceptionally relevant and with your explicit consent.

4. How We Collect Your Data

We collect data through:

• Website Forms: Contact, quote request, or inquiry forms on hancockandsonsbuilders.co.uk.
• Direct Communication: Emails, phone calls, or in-person meetings when requesting quotes, booking consultations, or discussing projects.
• Cookies and Analytics: Anonymized usage data if cookies are enabled (see our Cookie Policy for details).

5. Lawful Basis for Processing

We process personal data under the following UK GDPR lawful bases:

• Contract (Article 6(1)(b)): To provide quotes, manage project inquiries, and deliver building/maintenance services.
• Consent (Article 6(1)(a)): For optional activities, such as sending marketing updates (you can withdraw consent anytime).
• Legitimate Interests (Article 6(1)(f)): For improving services, analyzing website usage, or fraud prevention, where it does not override your rights.
• Legal Obligation (Article 6(1)(c)): To comply with laws, such as health & safety regulations, insurance requirements, or responding to legal requests.

6. Purposes of Data Processing

We use your data to:

• Provide quotes, consultations, and building/maintenance/development services.
• Manage appointments, site visits, and project communications.
• Respond to inquiries, feedback, or complaints.
• Improve our website and services through anonymized analysis.
• Comply with legal obligations (e.g., contracts, insurance, or regulatory reporting).
• Send occasional marketing (only with consent).

We do not use automated decision-making or profiling.

7. Data Sharing

Your data is kept confidential and only shared when necessary:

• With Consent: Shared with subcontractors, suppliers, or partners for project delivery if you agree.
• Service Providers: Trusted third parties (e.g., web hosting, email providers, accountants) under strict data processing agreements compliant with UK GDPR.
• Legal Obligations: If required by law (e.g., court orders, health & safety authorities, or insurance claims).
• Professional Advisors: Such as insurers or solicitors in relation to projects or disputes.

We do not sell your data.

8. Data Retention

We retain personal data only for as long as necessary:

• Quote/Inquiry Data (Non-Clients): Deleted within 12 months if no project proceeds.
• Client/Project Data: Retained for 6–7 years after project completion (for legal/contract/tax reasons), then deleted unless required longer.
• Website Analytics: Anonymized data retained for up to 2 years.
• Marketing Data: Retained until consent is withdrawn.

9. Data Subject Rights

Under UK GDPR, you have rights including:

• Access: Request a copy of your data.
• Rectification: Correct inaccurate data.
• Erasure: Request deletion (subject to legal retention obligations).
• Restriction: Limit processing in certain cases.
• Portability: Receive data in a machine-readable format.
• Object: Object to processing based on legitimate interests or marketing.
• Withdraw Consent: Where processing is based on consent.

To exercise these rights, email info@hancockandsonsbuilders.co.uk. We respond within one month (longer for complex requests). You can complain to the Information Commissioner's Office (ICO): https://ico.org.uk/make-a-complaint or +44 303 123 1113.

10. Data Security

We use appropriate measures:

• Physical security for any paper records.
• Encrypted, password-protected electronic systems.
• Secure third-party providers with UK GDPR-compliant agreements.
• Staff training on data protection.

11. International Data Transfers

Data is primarily stored in the UK or EEA. If transferred outside (e.g., to cloud services), we use safeguards like UK-approved mechanisms (e.g., International Data Transfer Agreements or adequacy decisions).

12. Cookies and Website Analytics

Our website may use cookies for functionality and analytics. Manage preferences via your browser or our consent tool. See our separate Cookie Policy for details.

13. Children's Privacy

Our services and website are not directed at children under 16. We do not knowingly collect data from children. If we become aware of such data, we will delete it.

14. Links to Other Websites

Our website may link to external sites. This policy applies only to our site; check third-party privacy policies.

15. Changes to This Policy

We may update this policy. Changes will be posted here, with significant updates notified via email (for clients) or website notice.