Howwecollect,useandprotectyourdata.

This Privacy Notice explains how Builderr Limited ("Builderr", "we", "us") collects, uses, stores and shares your personal data when you interact with our website, request a quote, engage us as a contractor, or otherwise communicate with us.

We are the data controller for the personal data we collect about you. We are registered with the UK Information Commissioner's Office (ICO) under registration ZA000000. Our registered office is 1 Build Lane, London SW1A 1AA. You can contact our data protection lead at privacy@builderr.co.uk.

When you submit a quote request or contact form on our website we collect: your name, email address, phone number, project address or postcode, project type, budget range, message contents, and any attachments you upload (drawings, photos, planning documents).

When you engage us as a contractor we additionally collect: full property address, identification documents required for AML compliance, payment details for invoicing, party wall surveyor contact details, neighbour contact details (with their consent, for party wall notice service), and project correspondence.

When you visit our website we automatically collect: IP address, browser type, operating system, pages visited, time spent on pages, referring URL, and approximate location based on IP. We use Google Analytics 4 for this purpose; you can opt out via your browser's Do Not Track setting or by declining the cookie banner.

We use your personal data to: respond to your quote request, provide construction services under contract, communicate about your project, send weekly progress updates, comply with our legal obligations (AML, tax, building regulations, party wall notices), prevent fraud, and improve our website.

We will only contact you for marketing purposes if you have explicitly opted in (separate marketing checkbox at quote submission). You can opt out at any time by clicking the unsubscribe link in any marketing email or emailing privacy@builderr.co.uk.

Under UK GDPR we rely on the following legal bases for processing your personal data:

(a) Performance of a contract — where we are negotiating or performing services you have requested.

(b) Legitimate interests — where we follow up on enquiries within a reasonable window (typically 90 days) or store project records for our defects liability period and warranty period.

(c) Legal obligation — where we must retain records to comply with tax law (6 years), AML law (5 years from end of relationship), building regulations (lifetime of the building) or party wall law (12 years).

(d) Consent — where you have explicitly opted in to marketing communications.

We share your data with: our directly-employed staff working on your project; structural engineers, party wall surveyors, planning consultants and architects we engage on your project; suppliers (kitchens, glazing, joinery) who require delivery address and contact details; building control bodies (local authority or approved inspector); HMRC and other regulators where legally required.

We never sell your data to third parties. We do not share your data with marketing companies, lead generation firms, or other contractors.

Our primary data infrastructure is hosted in the UK and EU. Some of our software vendors (project management, accounting, email) are based in the US and operate under the EU-US Data Privacy Framework or UK International Data Transfer Agreement, which provide adequate safeguards for your data under UK GDPR.

Quote enquiries that don't proceed to contract: 24 months from last contact, then deleted.

Active project data: lifetime of the project plus the 12-month defects liability period.

Completed project records: 12 years from practical completion (matching limitation period for construction claims) plus the 10-year structural warranty period.

Marketing consent records: until you withdraw consent.

Accounting records: 6 years from end of relevant tax year.

Under UK GDPR you have the right to: access the personal data we hold about you; ask us to correct inaccurate data; ask us to delete your data (subject to our legal retention obligations); restrict processing of your data; receive your data in portable format; object to processing based on legitimate interests; withdraw consent where you previously provided it.

To exercise any of these rights, email privacy@builderr.co.uk. We will respond within one month. There is no charge for reasonable requests.

If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113.

Our website uses essential cookies for session management and functionality. We also use Google Analytics 4 for anonymised usage statistics. The cookie banner on first visit lets you accept or decline analytics cookies; essential cookies cannot be declined as the site won't function without them.

Essential cookies: session ID, CSRF token, cookie consent state.

Analytics cookies (optional): Google Analytics 4 (_ga, _ga_*), no advertising cookies are set.

We protect your data with: TLS encryption in transit, AES-256 encryption at rest, multi-factor authentication on all staff accounts, principle-of-least-privilege access control, quarterly access reviews, and annual third-party security audits. Backups are encrypted and geographically separated. We have a documented incident response plan and would notify affected individuals and the ICO within 72 hours of any material breach as required by law.

We may update this Privacy Notice from time to time. The latest version is always available at builderr.co.uk/privacy. We will notify active clients of material changes by email. Continued use of our services after a change indicates acceptance.

For any privacy question: privacy@builderr.co.uk or write to Data Protection Lead, Builderr Limited, 1 Build Lane, London SW1A 1AA.