Privacy Policy

1. Introduction

Hampshire Build (registered company number 16074499) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Information You Provide

When you contact us or use our services, we may collect:

We record how you found us, including advertising click IDs and campaign tags where available, alongside your enquiry.

• Contact Information: Name, email address, phone number, postal address
• Project Information: Property details, extension requirements, budget, timeline preferences
• Communication Records: Emails, phone calls, meeting notes, consultation records
• Payment Information: Billing address and payment method details (handled securely by our payment provider)

2.2 Information Automatically Collected

• Technical Data: IP address, browser type, device information
• Usage Data: Pages visited, time spent, referring website
• Cookie Data: Information collected through cookies (see Section 8)
• Analytics Data: Google Analytics data for website improvement

2.3 Information from Third Parties

• Planning portals and local authority websites (public planning records)
• Google Ads conversion tracking (when you click our advertisements)
• Social media platforms (when you interact with our pages)

3. How We Use Your Information

4. Legal Basis for Processing

• Contract Performance: Processing necessary to deliver our services
• Consent: Where you have explicitly agreed to marketing
• Legitimate Interest: For responding to enquiries, relevant project guidance where the PECR soft opt-in applies, business operations and website improvement. You can opt out at collection or unsubscribe from every follow-up.
• Legal Obligation: To comply with accounting and professional requirements

5. Data Sharing

We may share your data with:

Services we use. We share personal data only with the service providers we use to run our business: Stripe (card payments), SendGrid (sending emails), Calendly (booking calls), Google Analytics and Google Ads (website and advertising measurement) and Replit (website hosting). Each processes your data on our behalf under their own data protection terms.

Important: We never sell your personal data to third parties for marketing purposes.

6. Data Retention

• Active Clients: Duration of project plus 6 years
• Enquiries: 2 years after last contact
• Marketing preferences: We retain opt-out choices as needed to ensure they are honoured
• Financial Records: 7 years (HMRC requirement)

7. Your Rights

Under UK GDPR, you have the right to:

8. Cookies

Our website uses Google Ads and Google Analytics to measure site visits and advertising. We use Google Consent Mode v2 to apply your cookie choices to Google tags. When you refuse optional cookies, Google may still receive limited cookieless page-view and conversion signals for modelled measurement. These signals are sent without cookie identifiers or the contact details you submit; Google may still receive your IP address and technical information with a request.

• Essential: Required for website functionality (cannot be disabled)
• Analytics: Google Analytics measurement, subject to your consent choices
• Marketing: Google Ads conversion measurement, subject to your consent choices

If you accept, we may use the email address you submit and, if provided, your phone number for enhanced conversions. The Google tag normalizes and hashes these details before sending them to Google to help match ad conversions. We do not send these contact details for enhanced conversions if you reject. You can change your choice later using Cookie settings in the site footer.

9. Data Security

We implement robust security measures:

• SSL/TLS encryption for data transmission
• Encrypted database storage with access controls
• Regular security monitoring and backups

10. International Transfers

Your data is primarily stored within the UK/EEA. Where we use providers outside these regions (e.g., Google), we ensure appropriate safeguards through UK GDPR-approved Standard Contractual Clauses.

11. Complaints

If you're not satisfied with our response, you can lodge a complaint with the ICO:

12. Contact Us