We protect your personal data when submitted through this website.
1. Important Information and Who We Are
1.1 Purpose of this Policy
Spekbilt Limited (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This privacy policy informs you how we look after your personal data when you visit our website (regardless of where you visit it from), interact with us commercially, or submit enquiries/applications to us, and tells you about your privacy rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1.2 Data Controller
Spekbilt Limited is the data controller and responsible for your personal data.
Full Company Name: Spekbilt Limited
Company Registration Number: 17290650
Registered Address: 30 Yeovil Close, Orpington BR6 8BT
Email Contact: info@spekbilt.co.uk
ICO Registration Number: ["Pending"]
1.3 Scope of this Policy
This policy applies to personal data collected through our website, digital communication channels, and pre-construction enquiries. Contractual agreement with contractor, supplier, developer, trade partner, and client entity governs data processing during active construction projects.
2. The Data We Collect About You
Personal data means any information about an individual from which that person can be identified. We may collect, use, store, and transfer different kinds of personal data about you, categorised as follows:
Identity Data: First name, last name, title, job title, and company name.
Contact Data: Business email address, telephone number, work address, and site delivery address.
Technical Data: Technical Data: Browser type and version, time zone setting, operating system, and platform used to access this website. (Note: Our website enquiry forms do not log or store visitors' IP addresses)
Usage Data: Information about how you use our website, pages viewed, response times, and navigation paths.
Commercial & Tender Data: Technical drawings, project specifications, and commercial correspondence provided when requesting pre-construction estimates or quotes.
Recruitment Data: CVs, cover letters, work history, and right-to-work documentation submitted via our Jobs page or direct outreach.
3. How We Collect Your Personal Data
We use different methods to collect data from and about you, including:
Direct Interactions: You may give us your identity, contact, and commercial data by filling in web forms, requesting quotes, submitting project information and technical drawings, applying for roles, or corresponding with us by email, phone, or post.
Automated Technologies: As you interact with our website, we may automatically collect Technical and Usage Data via cookies and server logs. Please refer to our Cookie Policy for further details.
Third Parties or Public Sources: We may receive personal data from third parties, including public registries, professional networking platforms, business directories, and recruitment portals.
4. How We Use Your Personal Data & Lawful Bases
We will only use your personal data when the law allows us to. Most commonly, we rely on the following lawful bases under UK GDPR:
Contract: To process project details, review technical drawings, issue transparent costings, and enter into agreements.
Legitimate Interests: Necessary for our legitimate commercial interests to manage client and architect relationships, conduct business development, improve our digital services, assess recruitment applications, and maintain network security, provided your fundamental rights do not override those interests.
Legal Obligation: To comply with statutory requirements, HMRC accounting standards, health and safety obligations (CDM 2015), and legal regulations.
Consent: Where you explicitly opt in to receive specific updates, job alerts, or communications. You can withdraw consent at any time.
5. Disclosures of Your Personal Data
We may share your personal data with internal staff, senior management, and trusted third-party service providers acting on our behalf, including:
IT, Cloud & Hosting Providers: All web enquiry form submissions are processed and stored securely on UK-based cloud infrastructure managed by our trusted IT, hosting, and email service providers.
Professional Alliance Partners & Subcontractors: Accredited trade contractors, Quantity Surveyors, or structural consultants involved directly in assessing or executing your package (under strict confidentiality and data protection obligations).
Professional Advisers: Auditors, legal advisers, insurers, and banking partners.
Regulators & Law Enforcement: HMRC, the Information Commissioner’s Office (ICO), or statutory authorities where required by UK law.
We do not sell, rent, or trade personal data to any third party for commercial marketing purposes.
6. International Data Transfers
Where our cloud infrastructure or software providers store or process data outside the United Kingdom, we ensure a similar degree of protection is afforded to it by verifying at least one of the following safeguards:
Adequate Protection: The transfer is to a country approved by the UK Government as providing an adequate level of data protection.
Approved Safeguards: We utilise specific UK International Data Transfer Agreements (IDTAs) or standard contractual clauses approved for use in the UK.
7. Data Security & Retention
7.1 Data Security
We have put in place appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed. Access to personal data is restricted to authorised personnel and partners who have a business need to know.
7.2 Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, tax, or statutory reporting requirements.
Enquiries and Commercial Proposals: Web enquiry form data and pre-construction communications are securely stored for a maximum of 12 months from submission, after which all form submission logs and associated database records are automatically and permanently deleted.
Recruitment Data: Unsuccessful candidate applications are securely retained for up to 12 months before deletion, unless you consent to us keeping your CV on file for future roles.
8. Your Legal Rights Under UK GDPR
Under certain circumstances, you have the following statutory rights regarding your personal data:
Right to Access (Subject Access Request): Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of incomplete or inaccurate data.
Right to Erasure ('Right to be Forgotten'): Request deletion of your personal data where there is no lawful justification for us to continue processing it.
Right to Restrict Processing: Request the suspension of processing your personal data in specific scenarios.
Right to Data Portability: Request the transfer of your personal data to you or a third party in a structured, machine-readable format.
Right to Object: Object to data processing where we rely on legitimate interests or direct marketing.
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please email us at info@spekbilt.co.uk. We respond to all valid requests within one month as required by UK GDPR.
If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk. We would, however, appreciate the opportunity to address your concerns first.
