Privacy policy

The data controller responsible for your personal data is Monument Castle Construction .

This privacy notice applies to information we process in connection with our public website and routine business enquiries. It is designed to meet UK data protection law, including the UK GDPR and the Data Protection Act 2018.

This page is for general information. It is not legal advice. If you need certainty for a specific situation, you should take independent advice.

Depending on how you contact us, we may process:

• Identity and contact details — such as your name, email address, telephone number, and the project location or area you tell us about.
• Enquiry content — the details you provide about your project, timings, budget indications, or other context needed to respond.
• Technical data when you use the website — such as IP address, browser type, approximate location derived from the IP, and timestamps. This is collected through normal hosting and security systems.
• Spam-prevention signals — when you use the contact form, an automated check may process technical data to confirm the submission is genuine.

We do not ask for special categories of data (such as health information) through the website. Please do not send us sensitive personal data unless we specifically request it for a legitimate reason related to your project.

We use personal data to:

• Respond to enquiries and provide quotes or information you have asked for.
• Prepare for and perform building or related services if you become a client, including administration, site communication, and invoicing.
• Operate and protect the website (security, troubleshooting, abuse prevention).
• Meet legal, regulatory, or professional obligations (such as tax, insurance, or dispute resolution).

Our lawful bases under UK GDPR typically include:

• Legitimate interests — running our business, responding to prospective clients, securing our site and inbox, and understanding basic use of our online presence. We balance these interests against your rights and minimise data where we can.
• Contract — where processing is necessary to enter into or perform an agreement with you.
• Legal obligation — where the law requires us to keep certain records or disclose information.
• Consent — where we rely on consent (for example, if we explicitly ask to send optional marketing), you may withdraw it at any time without affecting the lawfulness of earlier processing.

We do not sell your personal data. We may use your contact details to follow up on a genuine enquiry or quote. If we ever want to send broader promotional messages, we will only do so where the law allows and, where required, with your clear consent. You can opt out of non-essential contact at any time by telling us or using unsubscribe instructions in any message.

Our site is designed to use a small number of technical cookies or similar technologies needed for security, form delivery, and basic operation. We do not use advertising cookies on this site.

The contact form’s spam protection may use cookies or device signals as part of verifying that a human is submitting the form. That processing is subject to the provider’s own terms and privacy documentation.

You can control cookies through your browser settings; blocking some cookies may affect form submission or site features.

We share personal data only where necessary, with:

• Service providers who host the website, deliver form messages securely, provide business email, or help us prevent spam and abuse—acting on our instructions.
• Professional advisers (for example accountants or insurers) where required for legitimate business or legal reasons.
• Authorities if we are required by law or to protect rights, safety, or security.

If you contact us using a third-party app (such as a messaging service), your use of that app is also governed by the app operator’s privacy notice.

Some service providers may process data outside the UK. Where that happens, we use appropriate safeguards recognised under UK law (such as standard contractual clauses or adequacy decisions), where required.

We keep enquiry and client records for as long as needed to respond, to manage any project, and to meet legal, tax, warranty, or dispute requirements. Typical periods range from a short retention for enquiries that do not proceed, to several years for contracts and financial records. Server logs and security data are retained for shorter technical periods unless needed for investigation.

We use reasonable administrative and technical measures to protect personal data from loss, misuse, and unauthorised access. No online transmission is completely risk-free; if you have concerns about a particular communication, contact us and we can suggest alternatives.

Under UK data protection law you may have rights to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete data in certain circumstances.
• Restrict or object to some processing.
• Data portability, where applicable.
• Withdraw consent where we rely on consent.

To exercise these rights, contact us using the details below. We may need to verify your identity before responding.

If you are unhappy with how we handle personal data, please contact us first so we can try to resolve the issue. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection: ico.org.uk .

Our website and services are aimed at adults making property decisions. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us so we can delete it.

We may update this notice when our practices or legal requirements change. The “last updated” date at the top will change when we publish a revision. For significant changes, we may also draw attention to them on the website or when we next contact you.

Questions about this privacy notice or our use of personal data: info@monumentcastle.co.uk or +44 7930 151359.

You can also reach us via the contact page.

Website terms: Terms of use.