Privacy policy

1. Who we are

The data controller is XDL CONSTRUCTION LTD (company no. 13609983), registered in England and Wales. Registered office: 35 Lintons Garden, Linton Gardens, London, E6 5SQ, England, United Kingdom.

You can contact us about privacy at: xdlconstruction@gmail.com.

2. What this policy covers

This policy describes how we process personal data when you visit https://www.xdlconstruction.co.uk or submit our contact form. It is intended to meet the transparency requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

3. Data we collect

• Contact form: name, email address, telephone number (if you provide it), project type selection, and your message.
• Website use: technical data processed by our hosting provider (for example IP address, browser type, and timestamps) as needed to deliver the site and ensure security.

4. Why we use your data and lawful bases

• To respond to enquiries — when you contact us, we process your details under legitimate interests (Article 6(1)(f) UK GDPR): running our business and replying to potential customers. You are not required to use the form; if you do not wish us to process your data for this purpose, do not submit it.
• To comply with law — for example company, tax, or accounting obligations, where applicable (legal obligation, Article 6(1)(c)).

5. Who we share data with

We use service providers where necessary to operate the website and communicate with you (for example hosting, email, or IT). They process data only on our instructions and under appropriate safeguards. If we introduce new processors, we will update this policy when the change is material.

Data you send by email may be processed by your email provider and ours (for example if you use Gmail or we use a commercial inbox). Some providers may process data outside the UK; where that happens, we rely on mechanisms recognised under UK data protection law (such as the UK extension to the EU-US Data Privacy Framework or standard contractual clauses), as applicable.

We do not sell your personal data.

6. How long we keep data

We keep enquiry information for as long as needed to deal with your request, manage follow-up, and meet any legal, tax, accounting, or insurance requirements. Routine enquiries are typically deleted or anonymised after a limited period unless we have an ongoing relationship with you or the law requires longer retention (for example business records — follow your accountant's guidance for contract and invoice retention).

7. Cookies and similar technologies

This site is designed to work without non-essential tracking cookies. Essential cookies or similar technologies may be used by our hosting or security stack where strictly necessary to provide the service. If we add analytics or marketing cookies later, we will update this policy and, where required, obtain your consent before non-essential cookies are set (Privacy and Electronic Communications Regulations 2003 (PECR), as amended).

8. Your rights

Under UK data protection law you may have the right to:

• access your personal data;
• rectify inaccurate data;
• erase data in certain circumstances;
• restrict processing in certain circumstances;
• object to processing based on legitimate interests;
• data portability, where applicable;
• withdraw consent, where we rely on consent (we do not rely on consent for the core contact form as described above).

To exercise these rights, email us at the address above. You may also complain to the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint.

9. Security

We take reasonable technical and organisational measures to protect personal data. No transmission over the internet is completely secure; please do not send highly sensitive information unless we have agreed a secure channel.

10. Changes

We may update this policy from time to time. The "Last updated" date at the top will change when we do. Material changes may also be signposted on the website.