Privacy policy

This privacy policy explains how Surrey Build Group collects, uses and protects your personal data when you use www.surreybuildgroup.co.uk, contact us or become a customer. We are the data controller for the personal data described here. We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

Who we are

Surrey Build Group. Registered address: Happy Acres, Russ Hill, Charlwood, Horley, Surrey, RH6 0EL. Office: The Bakehouse, Station Road, Shalford, GU4 8HD. You can contact us about anything in this policy by email at hello@surreybuild.co.uk or by phone on 0203 603 9777.

The personal data we collect

When you send an enquiry through our website we collect your name, email address, phone number, postcode, the service you are interested in, any project details you choose to share, and, where the form asks for them, your address and how you heard about us, the page you sent the form from and the date and time of your enquiry. We also record that you agreed to this policy when you submitted the form.

To protect our forms from spam and abuse we store a one way encrypted version of your IP address, which cannot be turned back into the original address, together with your browser type.

When you make a cookie choice we keep a record of that choice, the date and time it was made and the version of our cookie banner you saw, so we can prove your consent. This record uses a random identifier and a one way encrypted version of your IP address.

If you become a customer we will also hold the information needed to design, price, build and invoice your project, such as your address, drawings, correspondence and payment records.

How we use your data and our lawful basis

• Responding to your enquiry and arranging a visit. Our lawful basis is taking steps at your request before entering into a contract, and our legitimate interest in replying to people who contact us.
• Designing and building your project. Our lawful basis is performing our contract with you.
• Keeping records for tax, accounting and building regulations. Our lawful basis is compliance with our legal obligations.
• Protecting our website from spam and misuse. Our lawful basis is our legitimate interest in keeping our website secure.
• Analytics and marketing cookies. Our lawful basis is your consent, which you can withdraw at any time using the Cookie settings link at the bottom of every page.

We do not use your data for automated decision making or profiling, and we never sell your personal data.

Who we share your data with

We only share your data with organisations that help us run our business, and only as much as they need. These include our website hosting provider, our email provider, our customer relationship management system (HubSpot), which provides the enquiry form on our contact page and receives website enquiries, our accountants and, for customers, the professionals and suppliers involved in your project such as building control and party wall surveyors. Every provider acting on our behalf is bound by a contract that requires them to keep your data secure and use it only on our instructions.

Some of these providers may store data outside the UK. Where they do, we make sure your data is protected by appropriate safeguards, such as a UK adequacy decision, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

We will share data with the police, regulators or other authorities if the law requires it.

How long we keep your data

• Enquiries that do not lead to a project are kept for 24 months from the date of your enquiry, then deleted.
• Customer and project records are kept for six years after the project ends, to meet our legal and tax obligations and to support any guarantee or warranty claims.
• Cookie consent records are kept for 24 months.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you (the right of access)
• ask us to correct data that is inaccurate or incomplete
• ask us to delete your data (the right to erasure)
• ask us to restrict how we use your data
• object to us using your data on the basis of legitimate interests
• ask for your data in a portable format
• withdraw your consent at any time, where we rely on consent

To use any of these rights, email hello@surreybuild.co.uk. We will respond within one month and there is normally no charge.

Keeping your data secure

Our website is served over an encrypted connection, enquiries are stored in a protected database that only authorised staff can access, and our forms are protected against spam and malicious submissions.

Complaints

If you are unhappy with how we have handled your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page. This policy was last updated on 10 October 2026.