Privacy Policy

This website is operated by:

Steve Toms Construction Ltd acts as data controller for personal data collected through this website and in the course of its business operations.

When you contact us, submit an enquiry, or request a quotation, we may collect:

• Name
• Email address
• Telephone number
• Property address (for site visits and quotations)
• Details of your project or enquiry

Technical information collected automatically by our hosting provider may include:

• IP address
• Browser type and version
• Server access logs

We do not use advertising, behavioural tracking, or third-party analytics cookies on this website.

We process personal data under the following lawful bases:

• Article 6(1)(b) UK GDPR — Performance of a contract or steps taken prior to entering a contract (e.g. responding to your quotation request or arranging a site visit)
• Article 6(1)(f) UK GDPR — Legitimate interests in operating and securing our business
• Article 6(1)(c) UK GDPR — Compliance with legal obligations, including tax and accounting requirements

We use personal data solely to:

• Respond to your enquiries and quotation requests
• Arrange site visits and surveys
• Provide our building, landscaping and outdoor transformation services
• Manage client relationships and project records
• Maintain accounting, tax and insurance records
• Comply with legal, regulatory and insurance obligations

We do not sell personal data. We do not carry out automated decision-making or profiling.

We use reputable third-party service providers to support our operations. These may include providers of:

• Cloud website hosting
• Email services
• Payment processing
• Accounting software

All processors operate under contractual safeguards consistent with UK data protection law.

Some service providers may operate outside the United Kingdom. Where personal data is transferred internationally, we rely on UK International Data Transfer Agreements, Standard Contractual Clauses, adequacy regulations, or other recognised lawful safeguards.

• Enquiry data — retained for up to two years from the date of enquiry
• Client project records — retained for six years from project completion, in line with HMRC requirements and standard limitation periods

We may retain limited records for longer where required for legal, insurance, accounting, or regulatory purposes.

Please see our Cookie Policy for full details. We currently use only strictly necessary local storage to manage your consent preference.

We implement technical and organisational measures appropriate to the nature and risk of the data we hold. These include encrypted HTTPS connections and controlled access to records.

No system can guarantee absolute security. If you have concerns about the security of data you have shared with us, please contact us immediately.

Under UK GDPR, you have the right to:

• Access your personal data
• Request rectification of inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Request data portability

To exercise any of these rights, please contact us at stclimited@hotmail.com.

You may also lodge a complaint with the Information Commissioner's Office at ico.org.uk or by telephone on 0303 123 1113.

We may update this Privacy Policy from time to time. The current version will always be published on this page. We recommend checking this page periodically.