DIY Dray Constructions Ltd (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website, contact us, or use our services.

1. Who We Are

DIY Dray Constructions Ltd
Company Number: 13232777
Email: services@diydray.com
Phone: 07801 452 188

We are the data controller for the personal information we process.

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

Customers & Enquiries

• Name
• Phone number
• Email address
• Address, postcode, or project location
• Details about your project or enquiry
• Photos or videos of your property or project (for quoting, project management, and—where you have given consent—marketing purposes)
• Communications and enquiry history

Subcontractors & Suppliers

• Name and contact details
• UTR number (for CIS)
• Insurance documents
• Bank details for payments
• Work history and performance notes

Website Visitors

• IP address
• Device and browser information
• Cookies and analytics data (see Section 10)

Payments

We do not store card details. Payments are processed securely by third‑party providers.

3. How We Collect Your Data

We collect data when:

• You contact us by phone, email, social media, or website forms
• You request a quote or book a service
• You provide documents as a subcontractor
• You interact with our website (cookies, analytics)
• You engage with our advertising (e.g., Meta, Google)

4. How We Use Your Data

We use your personal data to:

• Respond to enquiries
• Provide quotes and manage projects
• Arrange visits or consultations
• Deliver construction and maintenance services
• Manage subcontractors and CIS compliance
• Process payments and maintain accounting records
• Improve our website and customer service
• Run advertising and measure performance
• Use project photos (with your consent) for our portfolio, website, and marketing materials
• Comply with legal and regulatory obligations

We will never publish photos that identify your address, faces, or vehicle registration without your explicit consent.

5. Lawful Bases for Processing

We process your data under the following lawful bases:

• Contractual necessity – to review your property, prepare quotes, and deliver services
• Legitimate interests – to operate and improve our business, respond to enquiries, and manage projects
• Legal obligation – CIS requirements, tax records, accounting, insurance
• Consent – for marketing communications and for using identifiable project photos in our marketing

You can withdraw consent at any time.

6. Sharing Your Data

We do not sell your personal data.

We may share your information with:

• Subcontractors involved in delivering your project
• Service providers such as email platforms, cloud storage, and advertising platforms (e.g., Meta, Google)
• Accountants and financial service providers
• HMRC, for CIS and tax compliance
• Legal or regulatory authorities, if required

All third parties are required to keep your data secure.

7. International Data Transfers

Some of our service providers (e.g., Meta, Google, cloud platforms) may store or process data outside the UK.

Where this occurs, we ensure appropriate safeguards are in place, such as:

• UK International Data Transfer Agreements (IDTA)
• Standard Contractual Clauses (SCCs)
• Adequacy decisions

8. Data Retention

We keep your data only as long as necessary for the purposes described.

Typical retention periods:

• Customer project records: 6 years (legal requirement)
• CIS subcontractor records: minimum 3 years
• Enquiry forms: 12–24 months
• Website analytics: up to 26 months

After this, data is securely deleted or anonymised.

9. Your Rights Under UK GDPR

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion (where legally permitted)
• Object to processing
• Restrict processing
• Data portability
• Withdraw consent (for marketing and photo use)

To exercise your rights, email services@diydray.com.

Right to Complain

You can also complain to the UK Information Commissioner’s Office (ICO):

ICO Website: www.ico.org.uk Phone: 0303 123 1113

10. Cookies & Website Tracking

Our website may use cookies and tracking technologies to:

• Improve website performance
• Analyse traffic and user behaviour
• Measure advertising effectiveness (e.g., Meta Pixel, Google Analytics)

You can manage or disable cookies through your browser settings.

11. Security Measures

We use appropriate technical and organisational measures to protect your data, including:

• Secure cloud storage
• Access controls and authentication
• Encrypted communication
• Regular security reviews

12. Links to Other Websites

Our website may contain links to third‑party sites. We are not responsible for their privacy practices.

13. Updates to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

14. Contact Us

For any questions about this Privacy Policy or your data rights:

DIY Dray Constructions Ltd
Email: services@diydray.com
Phone: 07801 452 188