Privacy Policy

Effective date: 1 July 2025

1. Who we are (Data Controller)

Paul Hetherington Groundworks (“we”, “us”, “our”) is the data controller of personal information collected via this website.

2. The personal information we collect

We only collect information that’s necessary to provide our services, respond to enquiries, and operate this website.

  • Contact/enquiry details (via forms or email): name, email, phone, message content.

  • Business details you share when asking for a quote.

  • Technical data: IP address, browser type, pages visited, and timestamps (server logs).

  • Cookies and similar technologies (see Cookie Policy).

  • Job applications (if applicable): CV/resume details you choose to send.

3. How we collect your information

  • Directly from you: when you submit a contact form, email or call us.

  • Automatically: through cookies and server logs when you browse the site.

  • Third parties (if applicable): for example, spam-filtering or security tools integrated with our contact forms. See “WPForms” below.

4. Why we use your information (lawful bases)

We process personal data under UK GDPR on the following bases:

  • Contract: to provide quotes, carry out groundworks services, and fulfil any agreement with you.

  • Legitimate Interests: to respond to enquiries, maintain site security, keep accurate records, and improve our services.

  • Consent: for non-essential cookies/analytics and optional marketing (only if you opt in).

  • Legal Obligation: to meet tax, accounting or regulatory requirements.

5. How we use your information

  • Respond to enquiries and provide quotations.

  • Deliver and manage our services.

  • Maintain safety and security of our website (including spam/abuse prevention).

  • Keep records for our business operations and legal obligations.

  • With your consent, use analytics to understand site performance (see Cookie Policy).

6. WPForms (our contact form tool)

We use WPForms to power our contact/enquiry forms.

  • What is collected: the information you enter in the form (e.g., name, email, phone, message) and technical data such as IP address and timestamp for security and spam prevention.

  • Where data is stored: submissions are stored in our website database and/or forwarded to our business email so we can respond.

  • Spam protection: we may use built-in anti-spam features (e.g., honeypot). If we enable third-party protection such as Google reCAPTCHA or hCaptcha in future, those services may set cookies and process your IP/device info according to their privacy policies. We’ll reflect this in our Cookie Policy and consent banner if used.

  • Retention: see Section 8.

We do not sell your data, and we don’t use WPForms to conduct automated decision-making.

7. Who we share information with

We only share personal data when necessary:

  • Service providers (processors), such as website hosting/maintenance, email service, security/spam-filtering tools, and data backup providers—only to the extent required, under contracts that protect your data.

  • Professional advisers (accountants, legal).

  • Authorities if required by law or to protect our rights.

We do not share your data for third-party marketing.

8. Data retention

We keep personal data only as long as necessary:

  • Enquiry records: up to 24 months after last contact, unless they relate to a service we provide (then retained with the job record).

  • Job/contract records: typically 6 years to meet tax and accounting obligations.

  • Server logs/security data: typically 12 months unless needed longer for security or investigations.

  • Cookie data: see Cookie Policy for specific durations.

We securely delete or anonymise data when it is no longer required.

9. International transfers

Our primary systems are intended to be hosted in the UK/EEA. If we use service providers outside the UK/EEA, we will ensure appropriate safeguards (e.g., UK Addendum to SCCs, adequacy regulations) are in place.

10. Your rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Erase data (where applicable)

  • Restrict or object to processing (including where based on legitimate interests)

  • Data portability (where applicable)

  • Withdraw consent at any time (for processing based on consent)

  • Lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk

To exercise your rights, get in touch.

11. Children’s privacy

Our services are not directed to children under 13, and we do not knowingly collect their data.

12. Security

We take appropriate technical and organisational measures to protect personal data, including secure hosting, access controls, and staff awareness. No method is 100% secure, but we work to prevent unauthorised access, disclosure, alteration or loss.

13. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with a new effective date.

14. Contact us

Questions about this policy or your data?
Email: Click here
Phone: 07786 357353
Post: Park Lane Poultry Farm, Forton, Preston, Lancashire