Privacy Policy
Last updated: 5 October 2026
This policy explains how Sutton Building & Developments Ltd ("we", "us", "our") collects, uses and protects your personal information when you use our website, contact us or work with us, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Sutton Building & Developments Ltd is the controller of your personal information. We are a company registered in England and Wales, company number 10578365, with our registered office at 7 Rockfield Business Park, Old Station Drive, Leckhampton, Cheltenham, GL53 0AN.
- Trading address: 28 Park Ave, Longlevens, Gloucester. GL2 0EA
- Email: info@suttonltd.co.uk
- Phone: +44 (0)7966 470778
2. The information we collect
Information you give us
- Enquiries and quote requests: your name, email address, phone number and the details of your project that you send through our contact and quote forms, by email or by phone.
- Chat messages: anything you type into the chat assistant on our website.
- Clients: if we carry out work for you, the information needed to deliver it, such as the site address, contact details, project correspondence and billing details.
- Reviews: feedback you give us, which we may publish with your permission.
Information collected automatically
- Technical information: your IP address, browser and device type, and the pages you visit, recorded in our web server logs and by the third-party services described below.
- Cookies and similar technologies: see section 7.
3. How we use your information and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry, arranging a site visit and preparing a quote | Taking steps at your request before entering into a contract, and our legitimate interest in responding to enquiries |
| Carrying out and managing work we have agreed with you, including invoicing | Performance of a contract |
| Keeping accounting, tax and business records | Legal obligation |
| Protecting our forms from spam and abuse, and keeping our website secure | Our legitimate interest in running a secure website |
| Measuring the effectiveness of our online advertising | Consent, given through our cookie banner |
| Publishing reviews and case studies that identify you | Consent |
We do not sell your personal information, and we do not use it for automated decision-making.
4. Who we share your information with
We only share your information where necessary, with:
- Our website host and email provider, who store our website data and deliver our email.
- Google, which provides reCAPTCHA spam protection on our forms, advertising measurement (Google Ads), the fonts used on our website and the map on our contact page.
- Asteria Engine, which provides the chat assistant on our website.
- Trustpilot, which provides the review widget on our website.
- Subcontractors and suppliers working on your project, where they need your details to do so.
- Professional advisers, such as our accountants, insurers and lawyers.
- Authorities, such as HMRC, the police or regulators, where the law requires it.
5. International transfers
Some of our service providers, including Google, may process information outside the UK. Where they do, we rely on UK adequacy regulations or approved safeguards such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
6. How long we keep your information
- Enquiries that do not lead to work: up to 2 years from our last contact with you.
- Clients: for the duration of the project and for 6 years afterwards, to meet our legal, accounting and insurance obligations and to deal with any warranty or guarantee claims.
- Web server logs: for a short period for security and troubleshooting.
7. Cookies and similar technologies
Cookies are small files stored on your device. Our website uses:
| Name / provider | Purpose | Type |
|---|---|---|
| csrftoken | Protects our forms against cross-site request forgery | Strictly necessary |
| sessionid | Keeps authorised staff signed in to the website admin | Strictly necessary |
| Google reCAPTCHA | Tells people apart from automated spam on our contact and quote forms | Strictly necessary |
| Asteria Engine chat (browser storage) | Remembers your chat conversation between pages | Functional |
| Trustpilot | Displays our review widget | Functional |
| Google Ads (for example _gcl_au) | Measures how visitors reach us from our adverts | Advertising |
We only set Google Ads cookies if you accept them in our cookie banner. You can change your choice at any time using the Cookie Settings link at the bottom of every page.
You can also block or delete cookies through your browser settings, and manage how Google uses advertising data at adssettings.google.com. Blocking strictly necessary cookies may stop our forms from working.
8. Your rights
Under UK data protection law you have the right to:
- access the personal information we hold about you;
- have inaccurate information corrected;
- have your information deleted, where we have no lawful reason to keep it;
- restrict or object to how we use your information;
- receive your information in a portable format;
- withdraw your consent at any time, where we rely on consent.
To exercise any of these rights, email info@suttonltd.co.uk. We will respond within one month. There is normally no charge.
9. Complaints
If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
10. Keeping your information secure
We use appropriate technical and organisational measures to protect your information, including encrypted connections to our website and access controls on our systems.
11. Children
Our website and services are not aimed at children, and we do not knowingly collect information about children.
12. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.