1) Who is the data controller?

The data controller is A1 BUILDING & ROOFING.

2) What personal data we collect

• Contact & enquiry data: name, email address, phone number, service interest, and message content submitted via forms, email, or phone.
• Transactional data (customers): service details, quotes, invoices, payments, and related correspondence.
• Technical data: IP address, device and browser information, pages visited, and referral sources. This may be collected via cookies and similar technologies (see Cookies).
• Media and testimonials (optional): photos, reviews, or feedback you choose to provide for publication.

 

3) Lawful bases for processing

• Contract: to provide quotes, perform services, and manage your account.
• Legitimate interests: to respond to enquiries, improve our website and services, and prevent fraud or abuse.
• Consent: for optional activities (e.g., certain marketing communications or non-essential cookies). You can withdraw consent at any time.
• Legal obligation: to meet tax, accounting, and regulatory requirements.

 

4) How we use your information

• To respond to enquiries and provide quotes and customer service.
• To deliver and manage contracted works, warranties, and aftercare.
• To send service-related communications (e.g., appointment confirmations, updates).
• To maintain records for accounting, taxation, and compliance.
• To operate, secure, and improve our website and digital services.
• With your consent, to publish testimonials or project images.

 

5) Sharing your information

We do not sell your data. We may share personal data with trusted service providers who assist us in operating our business (e.g., website hosting, email service, IT support, payment processing, subcontractors engaged to deliver work). These parties act under contracts that require them to protect your data and only use it for our specified purposes. We may also share data where required by law or to establish, exercise, or defend legal claims.

6) International transfers

Where our service providers are located outside the UK, we ensure appropriate safeguards are in place (for example, UK International Data Transfer Agreement/Clauses or an adequacy decision) as required by UK GDPR.

7) Data retention

• Enquiry records: typically retained for up to 24 months from last contact.
• Customer, project & invoice records: typically retained for 6–7 years to meet tax and accounting obligations.
• Website logs/analytics: retained for the minimum period necessary for security and performance, generally up to 14 months where analytics are used.

We may retain information longer where necessary for legal claims or compliance.

8) Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. No method of transmission or storage is 100% secure; we continuously review and improve our safeguards.

9) Your rights (UK GDPR)

Under UK GDPR you have the right to:

• Access your personal data and receive a copy.
• Rectify inaccurate or incomplete data.
• Erase your data in certain circumstances.
• Restrict or object to processing in certain circumstances.
• Data portability for information you provided to us with consent or under contract.
• Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us at info@a1buildingandroofing.co.uk. We may need to verify your identity before fulfilling your request.

If you have concerns about our data practices, you can complain to the UK Information Commissioner’s Office (ICO): ico.org.uk or call 0303 123 1113. We would appreciate the chance to address your concerns first.

10) Cookies and similar technologies

Our website may use cookies and similar technologies to operate the site, remember preferences, and understand how visitors use our pages. Where required by law, we display a cookie banner to obtain consent for non-essential cookies.

You can control cookies via your browser settings and, where implemented, our cookie banner preferences tool. Blocking some cookies may affect site functionality.

If you deploy specific tools (e.g., Google Analytics or reCAPTCHA), ensure your cookie banner and this policy reflect them accurately and link to the relevant third-party notices.

11) Marketing

We may send you service updates or marketing communications where permitted by law. You can opt out at any time by following the unsubscribe instructions in our emails or contacting us at info@a1buildingandroofing.co.uk.

12) Third-party links and services

Our website may contain links to third-party websites, plug-ins, or services. We are not responsible for their privacy practices. We encourage you to read the privacy policies of any third-party sites you visit.

13) Children’s privacy

Our services are not directed to children and we do not knowingly collect personal data relating to children.

14) Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top will show when changes were made. Significant changes may also be announced on our website.

15) How to contact us

Questions about this policy or your personal data can be sent to info@a1buildingandroofing.co.uk or by post to the address above.