Privacy Policy
How we collect, use and look after personal data — written in plain English, under the UK GDPR and the Data Protection Act 2018.
This is a portfolio demonstration site. The policies below are written to real UK conventions and are structurally complete, but they describe a fictional company and are not legal advice.
1. Who we are
Ironwood Contracting Ltd (“Ironwood”, “we”, “us”) is the data controller for the personal data described in this policy. We are registered in England and Wales under company number 6104219, with our registered office at Unit 4, 218 Drummond Road, Bermondsey, London SE16 4DH.
We are registered with the Information Commissioner’s Office under registration number ZA318860. If you would like to talk to a person about anything in this policy, email build@ironwood.co.uk or call 020 7946 0142.
2. What we collect
Information you give us. When you complete a form on ironwood.co.uk we collect the details you type into it — typically your name, email address, phone number if you choose to give one, and whatever you write in the message field. If you enquire about a project we also collect the details you share about it, such as location, timescale and budget range.
Information we collect automatically. Our servers keep standard access logs: IP address, browser and device type, the pages you visited, referring page, and the date and time. These logs are used for security and troubleshooting and are deleted on a rolling basis.
Payment details. We do not see or store full card numbers. Where a payment is taken it is handled by our bank or payment provider directly.
Special category data. We do not ask for it, and you should not send it to us through a web form.
3. Why we use it, and our lawful basis
To answer you. When you contact us we use your details to reply and to keep a record of the conversation. Lawful basis: legitimate interests — running a business and responding to the people who get in touch with it.
To deliver work you have engaged us for. We use your details to quote, schedule, invoice and carry out the work. Lawful basis: performance of a contract.
To send you things you asked for. If you opt in to our mailing list we use your email address to send it. Lawful basis: consent. Every message has an unsubscribe link, and unsubscribing takes effect immediately.
To keep the site working and secure. Lawful basis: legitimate interests — keeping ironwood.co.uk available and defending it against abuse.
To meet legal obligations. Accounting and tax records are kept because the law requires it. Lawful basis: legal obligation.
4. Who we share it with
We do not sell personal data, and we do not share it for anyone else’s marketing. We do use a small number of suppliers who process data on our behalf under written contracts: a website host, an email provider, an accountant, and an analytics provider. Each is limited to what they need and may not use it for their own purposes.
We will disclose personal data where we are legally required to — for example to HMRC, a regulator or a court — and we will tell you if we are permitted to.
Some suppliers are based outside the UK. Where that is the case we rely on UK adequacy regulations or on the ICO’s International Data Transfer Addendum to the EU Standard Contractual Clauses, together with a transfer risk assessment.
5. How long we keep it
Enquiries that do not become work are deleted after 24 months. Project records are kept for the life of the building plus twelve years, because that is the period during which a claim could be brought under a deed. Mailing list subscriptions are kept until you unsubscribe, plus a suppression record so we do not accidentally add you back.
Server logs are kept for 90 days.
6. Your rights
Under the UK GDPR you have the right to be told what we hold about you and to get a copy of it; to have inaccurate data corrected; to have data erased where we no longer have a good reason to keep it; to restrict or object to how we use it; to receive it in a portable format; and to withdraw consent at any time where consent is the basis we rely on.
To exercise any of these, email build@ironwood.co.uk. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.
If you are not happy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint, by calling 0303 123 1113, or by writing to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. We would rather you came to us first so we can put it right.
7. Automated decision-making
We do not make decisions about you by automated means, and we do not profile you.
8. Children
ironwood.co.uk is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, email us and we will delete it.
9. Changes to this policy
We update this policy when what we do changes. The date at the top of the page tells you when it was last revised, and material changes are announced on the site for 30 days.