Template only — not legal advice. This is a starting structure covering the points UK GDPR and PECR generally require. Have it reviewed before launch, and complete every highlighted field. Publishing an inaccurate policy is worse than publishing none.

Who we are

Forma Surface Design provides microcement installation services from a base in Worthing, West Sussex. For the purposes of UK data protection law we are the data controller for the information described below. You can contact us at info@formasurfacedesign.co.uk.

What we collect

  • Information you give us through the enquiry form: your name, email address, telephone number, postcode and the details of your project.
  • Correspondence: emails, messages and notes from calls or site visits relating to your enquiry or project.
  • If you add analytics, describe what it collects here.

Why we use it, and our lawful basis

  • To respond to your enquiry and provide a quotation — on the basis of steps taken at your request prior to entering a contract.
  • To carry out work you have engaged us for — on the basis of performance of a contract.
  • To keep records of completed work, quotations and guarantees — on the basis of our legitimate interests in running the business and our legal obligations.
  • To photograph completed work — only with your consent, which you may withdraw at any time.

Photography of your property

We may ask to photograph completed work for our portfolio, website and social media. This is always optional, we will ask you separately, and we will not identify your address. You can withdraw consent at any time and we will remove the images from material we control.

Who we share it with

We do not sell your data. We may share limited information with: our email and website hosting providers; our accountant; and, where a project requires it, the product manufacturer or other trades working on your project. List your actual providers here.

How long we keep it

Enquiries that do not proceed are kept for 24 months, then deleted. Records relating to completed work — quotations, invoices, photographs and guarantee documentation — are kept for the duration of any guarantee and for at least six years afterwards, to meet HMRC and consumer protection record-keeping obligations.

Your rights

You have the right to access the personal data we hold about you, to have inaccurate data corrected, to request erasure, to restrict or object to processing, and to data portability. To exercise any of these, contact us using the details above.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk.

Changes

We may update this policy from time to time. The date at the top shows when it was last revised.