Privacy Policy

Who we are

Mendip & Somerset Construction Ltd (company no. 15820690, VAT no. 471996344) of Unit 26 Enterprise Business Park, Midsomer Norton, Bath, Somerset BA3 2BB is the data controller for the personal data described in this notice. You can contact us on 01761 419060.

What we collect

• Your name, email address, telephone number and project address.
• Details of the work you enquire about, including drawings and specifications you send us.
• Correspondence, quotations, invoices and payment records.
• Basic technical data from our website, such as pages visited and approximate location.

Why we use it and our lawful basis

• To respond to enquiries and prepare quotations — legitimate interests.
• To perform a building contract with you — performance of a contract.
• To meet accounting, tax, health and safety and building control duties — legal obligation.
• To send occasional updates where you have asked us to — consent, withdrawable at any time.

Sharing

We share data only where needed to deliver your project or run our business: subcontractors and suppliers, architects and structural engineers, building control and local authorities, our accountant, and our IT and hosting providers. We never sell your data.

Retention

Enquiry records are kept for up to two years. Contract, warranty and financial records are kept for a minimum of six years to meet legal and insurance requirements, and longer for structural work where a longer liability period applies.

Your rights

You have the right to access, correct or erase your data, to restrict or object to processing, to data portability, and to withdraw consent. Contact us to exercise any of these rights. You may also complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

Our website uses only cookies and local storage needed to display the site and its map. We do not use advertising cookies. Map tiles are served by OpenStreetMap, which may log your IP address as part of delivering those tiles.

Security

We use appropriate technical and organisational measures to protect your data, including encrypted connections and access controls on our systems.