PRIVACY POLICY

Last updated: 2 October 2025

1. Introduction

JRDD CONSTRUCTION LIMITED (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We may collect the following types of personal information:

Personal Data You Provide:

• Name and contact details (email address, phone number, postal address)
• Property details relevant to requested services
• Project requirements and preferences
• Payment and billing information
• Communications you send to us

Automatically Collected Data:

• IP address and browser information
• Device type and operating system
• Pages visited and time spent on our website
• Referring website addresses
• Location data (with your consent)

3. How We Use Your Information

We use your personal information for the following purposes:

• To provide and manage our construction and property services
• To process quotations and manage projects
• To communicate with you about your enquiries and projects
• To send service updates and important notices
• To process payments and maintain records
• To improve our website and services
• To comply with legal obligations
• To protect our legal rights and prevent fraud

4. Legal Basis for Processing

We process your personal data based on:

• Contract: Processing necessary for the performance of our services
• Legitimate Interests: For business operations and improving our services
• Consent: Where you have given explicit consent for specific purposes
• Legal Obligation: To comply with applicable laws and regulations

5. Data Sharing and Disclosure

We may share your information with:

• Subcontractors and suppliers involved in your project
• Professional advisers (accountants, lawyers, insurers)
• Government bodies and law enforcement agencies when required
• Credit reference agencies for credit checks (with your consent)

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Secure storage of physical documents in locked facilities
• Encryption of sensitive data
• Regular security assessments
• Staff training on data protection
• Access controls and authentication procedures

7. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law. Typically:

• Project records: 6 years after completion (for warranty and legal purposes)
• Financial records: 7 years (as required by HMRC)
• Marketing communications: Until you unsubscribe
• Website analytics: 26 months

8. Your Rights

Under UK GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data (subject to legal obligations)
• Restriction: Request limited processing of your data
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Where processing is based on consent

9. Cookies

Our website uses cookies to enhance your browsing experience. For detailed information about the cookies we use and your choices regarding cookies, please see our Cookie Policy.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any personal information.

11. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it.

12. International Transfers

We primarily process your data within the UK. If we transfer data outside the UK, we ensure appropriate safeguards are in place to protect your information in accordance with UK GDPR requirements.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on our website with an updated revision date.

14. Contact Information

For questions about this Privacy Policy or to exercise your rights, please contact us:

15. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):