Legal
Privacy Policy
Last updated:
Privacy Policy
1. Privacy Policy
STL Lofts and Extensions Ltd ("STL Lofts and Extensions", "we", "us" or "our") respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and protect personal information when you contact us, request a quotation, instruct us to carry out building work, communicate with us about a project, use our website or otherwise interact with our business.
We primarily provide loft conversions, extensions and other building services to domestic customers, with occasional commercial projects.
2. Who we are
The organisation responsible for your personal information is STL Lofts and Extensions Ltd. STL Lofts and Extensions Ltd is the data controller for the personal information we process about our customers, prospective customers and other individuals we deal with including subcontractors.
If you have any questions about this Privacy Policy or how we use your personal information, please contact us using the details below.
3. What personal information we collect
Customers: We may collect your name; telephone number; email address; home or correspondence address; the address of the property where work is proposed or being carried out; details about your building project and requirements; plans, drawings, specifications and other project documents; photographs or videos of a property or project that you provide to us; information supplied when requesting a quotation; quotations, contracts, payment schedules and invoices; payment and accounting information; correspondence and communications between you and our employees, project managers & subcontractors; information contained in emails and WhatsApp Business communications; information provided by architects, surveyors, structural engineers, designers, contractors or other professionals involved in your project; information relating to complaints, disputes or other matters concerning our services; and information required to comply with legal, accounting, tax and regulatory obligations.
Subcontractors: Where you work with us as a subcontractor, we may collect personal information such as your name, contact details, company details, payment and bank details, relevant qualifications or certifications, and other information necessary to manage our working relationship, arrange work and process payments.
We aim to collect and use only information that is reasonably necessary for the relevant purpose.
4. How we collect your information
We may collect personal information directly from you when you contact us by telephone or email, complete a form on our website, complete a form via a trade website such as FMB or Trust a Trader, contact us via WhatsApp Business, request a quotation, provide information during a site visit, enter into a contract with us, communicate with our project managers or other members of our team, make payments to us, or contact us regarding an existing or completed project.
We may also receive relevant information from other people or organisations involved in your project, such as architects, designers, surveyors, structural engineers, contractors or other professional advisers.
5. What we use your information for
We use personal information to respond to enquiries; understand building requirements; arrange site visits; prepare and provide quotations; communicate about proposed or ongoing projects; plan, manage and carry out building work; prepare contracts, quotations, payment schedules and invoices; process and record payments; manage our relationship with you; communicate with project managers, employees, subcontractors and relevant professionals where necessary; order materials and arrange services; deal with questions, complaints and disputes; maintain business and financial records; comply with legal, accounting, tax and regulatory requirements; protect our business, customers and legal rights; and send marketing communications where we have a lawful basis to do so.
We will not use your personal information for unrelated purposes unless permitted by law or, where necessary, we have obtained your consent.
6. Our lawful bases for processing your information
Contract and steps before entering into a contract: Where you ask us to provide a quotation or take other steps at your request before entering into a contract, we may process the information necessary to deal with your request. Once you instruct us to carry out work, we process personal information where necessary to perform the contract and provide our services.
Legal obligation: We may process personal information where necessary to comply with a legal obligation, including accounting, tax, financial record-keeping and other legal requirements.
Legitimate interests: We may process personal information where it is necessary for our legitimate business interests and those interests are not overridden by your rights and interests. These interests may include managing and administering our business, customer relationships and records, communicating with customers, protecting our business, preventing fraud, establishing or defending legal claims, and improving our services and processes.
Consent: Where consent is the appropriate lawful basis, we will ask for your consent separately and clearly. For example, we may ask for consent to receive certain marketing communications where consent is required. You can withdraw consent at any time.
7. Website enquiries and quotation forms
When you submit an enquiry or request a quotation through our website or trade website such as FMB or Trust a Trader, we use the information you provide to respond to your enquiry, arrange contact or a site visit, understand your requirements and prepare or provide a quotation.
We do not generally rely on consent as the lawful basis for processing information that is necessary to respond to your enquiry or prepare your quotation.
A link to this Privacy Policy will be provided on our website forms. Any optional marketing consent will be presented separately from the submission of an enquiry or quotation request.
8. Who we may share your information with
We may share relevant personal information where necessary and lawful with our employees and project managers; subcontractors and tradespeople; architects and structural engineers; surveyors and designers; other professional advisers; suppliers; accountants and bookkeepers; legal advisers and insurers; payment providers and financial institutions; IT, cloud-storage, software and communications providers; and government bodies, regulators, law enforcement agencies or other authorities where legally required.
We will only share information that is reasonably necessary for the relevant purpose.
9. Software and services we use
Google Workspace: We use Gmail for business email, Google Drive for document and file storage, Google Docs for quotations and other documents, and Google Sheets for customer relationship management and other records. Customer and project information may therefore be stored within our Google Workspace environment.
QuickBooks: We use QuickBooks for accounting and financial administration, including customer details, quotations and invoices, payment records and accounting information.
WhatsApp Business: We may use WhatsApp Business to communicate with customers and manage project-related communications between customers and project managers. Communications may contain personal information relating to you, your property or your building project. We ask customers not to send highly sensitive personal information through WhatsApp unless we specifically request it.
AWS: Your personal information may be securely stored and processed on servers provided by Amazon Web Services (AWS), which we use to host and operate our website. We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration.
Other systems and service providers: We may introduce or use additional software, cloud services or professional service providers where reasonably necessary to operate our business.
10. International processing
Some third-party service providers we use may process or store personal information outside the United Kingdom. Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful under applicable UK data protection legislation and that appropriate safeguards are in place where required.
11. How we protect your information
We take reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, destruction, misuse or disclosure.
Our customer and business information is primarily stored electronically using password-protected business systems and cloud services. Access is limited to people who need it for legitimate business purposes.
Depending on the system, security measures may include password protection, access controls, appropriate user permissions, business accounts, secure cloud-based systems, device security, access management and regular review of access to business information.
No electronic storage or transmission system can be guaranteed to be completely secure. However, we take reasonable steps to protect the information we hold.
12. How long we keep your information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, unless required or permitted by law to keep it for longer.
Enquiries and quotations: If you make an enquiry or request a quotation but do not proceed with us, we may retain relevant information for up to 3 years after our last meaningful contact.
Customers and completed projects: When you become a customer, we may retain information relating to your project for up to 7 years after completion or the end of our relationship, or longer where reasonably necessary for warranty, insurance, legal, contractual or dispute-related purposes.
Financial and accounting records: Financial and accounting information will be retained for the periods required by applicable tax and accounting legislation.
Marketing information: Where you have consented to receive marketing communications, we will retain the relevant information for as long as necessary to manage your marketing preferences. If you withdraw consent, we may retain limited information on a suppression or do-not-contact list so that we can respect your request.
WhatsApp communications: Project-related WhatsApp communications may be retained for as long as reasonably necessary for project management, customer relationship, legal obligations, dispute resolution or legitimate business purposes. We may transfer relevant information from WhatsApp into our main business records where necessary to maintain an appropriate project record.
We periodically review the information we hold and securely delete or anonymise information when it is no longer required.
13. Your data protection rights
Depending on the circumstances and subject to applicable legal exemptions, you may have the right to be informed about how we use your personal information; access the personal information we hold; request rectification; request erasure in certain circumstances; request restriction of processing; object to certain processing; request data portability in certain circumstances; and withdraw consent where we rely on consent.
These rights do not apply in every circumstance and may be subject to legal exemptions.
14. Making a request
If you ask us for access to your personal information or wish to exercise another data protection right, we may need to verify your identity before providing information.
We will deal with requests in accordance with applicable data protection law.
Email: info@stlbuild.co.uk | Telephone: 020 8401 7291
15. Marketing
We may contact customers and prospective customers about our services where permitted by applicable data protection and electronic marketing laws.
Where consent is required, we will obtain it separately and will not use a pre-ticked box or rely on silence or inactivity as consent.
Where applicable, we may rely on the rules allowing marketing to existing customers about similar services, provided the relevant legal requirements are met and an appropriate opportunity to opt out is provided.
You can ask us to stop sending marketing communications at any time. Every electronic marketing communication will provide an appropriate way to opt out where required.
Marketing communications are separate from communications necessary to deal with an enquiry, quotation, contract or ongoing building project.
16. Cookies and our website
Our website may use cookies and similar technologies. Some cookies may be necessary for the website to function. Other cookies may be used for analytics, performance or marketing. Where required, we will ask for consent before using non-essential cookies. Further information about cookies used on our website can be provided in our Cookie Policy.
17. Information relating to other people
If you provide us with personal information about another person, such as a joint property owner, tenant, architect or other individual involved in your project, you should ensure that you are authorised to provide that information to us.
Where appropriate, you should also ensure that the person concerned knows that their information has been provided to us.
18. Photos and project information
We may receive photographs, drawings, plans and other information relating to your property or building project. We may use this information to assess, quote for, plan, manage and document your project.
With your consent, we may use photographs taken during our work or projects for marketing and promotional purposes, including on our website, trade websites, social media platforms and other marketing materials.
Where appropriate, we will avoid identifying individuals and properties unless specific consent has been provided.
19. Data breaches
We maintain procedures for dealing with suspected personal data breaches. If we become aware of a personal data breach, we will assess the incident and take appropriate steps to contain and investigate it.
Where required by law, we will notify the Information Commissioner's Office and/or affected individuals.
20. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, the services we use or applicable data protection requirements.
The latest version will be published on our website and will show the date it was last updated.
Where required, we will provide additional privacy information before introducing a new use of personal information that materially affects how it is processed.
21. Complaints
If you have concerns about how we have handled your personal information, please contact us first so that we have the opportunity to investigate and resolve your concerns.
You also have the right to complain to the UK's data protection regulator: Information Commissioner's Office (ICO), https://ico.org.uk/. ICO registration number for STL Lofts and Extensions Ltd: ZC080917.
22. Contact details
STL Lofts and Extensions Ltd
Peregrine Rd
Sunbury-on-Thames
TW16 6JH
Email: info@stlbuild.co.uk
Telephone: 020 8401 7291
Company number: 15557033
ICO registration number: ZC080917
Cookie Policy
This Cookie Policy explains how STL Lofts & Extensions Ltd ("STL Build", "we", "us" or "our") uses cookies and similar technologies when you visit our website at https://stlbuild.co.uk/ (the "Website").
We use cookies to help ensure that our Website works properly, to improve your experience and, where applicable, to understand how visitors use our Website.
1. What are cookies?
Cookies are small text files that are placed on your computer, smartphone, tablet or other device when you visit a website.
Cookies allow a website to recognise your device and can be used for a number of purposes, including remembering preferences, maintaining website functionality, improving performance and understanding how a website is used.
Some technologies that perform similar functions to cookies, such as pixels, tags, local storage and other tracking technologies, may also be covered by this policy.
2. How we use cookies
We may use cookies and similar technologies for the following purposes:
Strictly necessary cookies
These cookies are required for the Website to operate correctly and securely.
They may be used to:
enable core website functionality;
maintain website security;
prevent fraudulent or malicious activity;
ensure that pages and features function correctly;
remember choices that are necessary for the operation of the Website; and
support the delivery of the Website through our hosting and technical service providers.
These cookies are generally exempt from consent where they are strictly necessary to provide a service that you have requested.
Analytics and performance technologies
Where analytics tools are used, they may help us understand how visitors interact with our Website, for example:
which pages are visited;
how visitors arrive at our Website;
how the Website performs;
which areas of the Website are most useful; and
whether improvements to the Website are working.
Where an analytics technology uses cookies or similar technologies that require consent under applicable law, we will ask for your consent before using it.
Where analytics are provided without the use of cookies or persistent identifiers, they may operate without cookie consent where permitted by applicable law.
Marketing and advertising cookies
We do not intend to use cookies for targeted advertising or behavioural advertising unless this is clearly explained to you and, where required by law, you have provided your consent.
If we introduce marketing or advertising cookies in the future, we will update this Cookie Policy and provide an appropriate consent mechanism.
3. What cookies do we currently use?
Our Website is designed to minimise the use of cookies and similar tracking technologies.
At the time this policy was prepared, we have not intentionally configured the Website to use non-essential advertising or behavioural tracking cookies.
The exact cookies and technologies used by the Website may change from time to time as we update our Website, hosting arrangements, analytics or third-party services.
Where non-essential cookies are used, we will provide appropriate information about them, including their purpose and, where applicable, their duration and provider.
4. Third-party services
Some elements of our Website may be provided by third-party service providers. These providers may use cookies or similar technologies as part of the services they provide.
Third-party services may include, for example:
website hosting and infrastructure services;
analytics services;
embedded content;
security and anti-spam services; and
social media or other external services.
Where a third party uses non-essential cookies or similar technologies on our Website, we will obtain your consent where required by applicable law.
Third parties may process information in accordance with their own privacy policies and terms. We recommend reviewing those policies where appropriate.
5. Your cookie choices
Where cookies require consent, you can choose whether to accept or reject them.
You should be given the ability to:
accept non-essential cookies;
reject non-essential cookies; and
change or withdraw your cookie preferences where this functionality is available.
You can also control or delete cookies through your browser settings. Most browsers allow you to block or delete cookies, although doing so may affect how some websites function.
Please note that blocking strictly necessary cookies may prevent parts of our Website from operating correctly.
6. How we obtain consent
Where consent is required, we will ask for it before placing non-essential cookies or using similar technologies on your device.
Consent must be given through a clear affirmative action. Simply continuing to browse or use the Website does not constitute consent to non-essential cookies.
You can withdraw or change your consent where a cookie preference mechanism is provided.
7. How long cookies remain on your device
Cookies may be either:
Session cookies, which are deleted when you close your browser; or
Persistent cookies, which remain on your device for a defined period or until you delete them.
The length of time a particular cookie remains on your device depends on its purpose and configuration.
Where we use cookies that require consent, we will provide information about their duration as part of our cookie information.
8. Changes to this Cookie Policy
We may update this Cookie Policy from time to time to reflect changes to our Website, the cookies and technologies we use, or changes in legal or regulatory requirements.
When we make changes, we will update the "Last updated" date at the top of this policy.
We recommend checking this page periodically to make sure you are aware of any changes.
9. Contact us
If you have any questions about this Cookie Policy or how we use cookies, you can contact us using the details below:
STL Lofts and Extensions Ltd
Peregrine Rd
Sunbury-on-Thames
TW16 6JH
Email: info@stlbuild.co.uk
Telephone: 020 8401 7291
Company number: 15557033
ICO registration number: ZC080917
10. Related privacy information
For information about how we collect, use and protect personal information submitted through our Website, please refer to our Privacy Policy.