Chartwell Design and Build Limited

Privacy Policy

 

Last updated: 21 August 2026

  1. Introduction

Chartwell Design and Build (“we”, “us”, “our”) operates the website www.chartwelldesignandbuild.co.uk  (the “Website”).

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit or use our website. It is designed to comply with the EU General Data Protection Regulation (GDPR) and applicable national laws. We are committed to protecting your privacy and handling your data transparently.

By using our website, you agree to the practices described here. If you do not agree, please do not use the website.

Controller: Chartwell Design and Build, a limited company registered in United Kingdom, with registered office at Chamber House 49 Gildredge Road Eastbourne East Sussex BN21 4RY. Contact details: Email: hello@chartwelldesignandbuild.co.uk | Tel: 01323 409990

  1. What Personal Data Do We Collect?

We may collect:

  • Identification & contact data: Name, email address, phone number, postal address.
  • Account/profile data: Username, password (hashed), preferences.
  • Technical & usage data: IP address, browser type, device information, pages visited, time spent, referring URL (via cookies, analytics, server logs).
  • Communication data: Content of messages sent via contact forms, support tickets, or newsletters.
  • Marketing data: Preferences for receiving offers.

We do not collect special category/sensitive data (e.g., health, race, religion) unless [specify and justify, e.g., “you voluntarily provide it and we have explicit consent”. We do not knowingly collect data from children under 16 without verifiable parental consent.

  1. How Do We Collect Your Data?
  • Directly from you: When you register, fill forms, subscribe, contact us, or make a purchase.
  • Automatically: Via cookies, pixels, analytics tools (e.g., Google Analytics), server logs when you browse.
  • From third parties: [Specify, e.g., payment processors, social login providers, advertising partners].
  1. Purposes & Lawful Bases for Processing (Art. 6 GDPR)

We process your data only where we have a valid lawful basis. Examples:

Purpose

Lawful Basis

Details

Provide & improve the Website, process orders/accounts

Contract (Art. 6(1)(b)) or Legitimate Interests

Necessary to fulfil our service agreement with you.

Send transactional emails (order confirmations)

Contract or Legitimate Interests

—

Marketing/newsletters

Consent (Art. 6(1)(a)) or Legitimate Interests (where soft opt-in applies)

You can withdraw consent/opt-out anytime.

Analytics & personalisation

Legitimate Interests (or Consent for non-essential cookies)

Improving user experience; we conduct a Legitimate Interests Assessment.

Prevent fraud, comply with law, defend legal claims

Legal Obligation (Art. 6(1)(c)) or Legitimate Interests

—
[Add any other purposes with their specific basis]

—

—

Legitimate Interests (where used): Our interest in operating a secure, efficient website and understanding user behaviour to improve our services, balanced against your rights”].

  1. Who Do We Share Your Data With?

We share only where necessary:

  • Service providers/processors (e.g., hosting, email, analytics, payment gateways) under data processing agreements.
  • Google (Analytics/Ads).
  • Legal authorities or in mergers/acquisitions.

We do not sell your personal data.

  1. International Transfers

Some processors are based outside the EEA/UK. We ensure appropriate safeguards: Standard Contractual Clauses (SCCs), adequacy decisions, or other measures under Chapter V GDPR. A copy of safeguards is available on request.

  1. How Long Do We Keep Your Data?

We retain data only as long as necessary for the purposes above or as required by law.

  • Account data: While account active + [X] years after closure.
  • Marketing consent: Until withdrawal.
  • Analytics cookies/logs: Up to [e.g., 26 months] or as per tool settings.

Criteria: After retention, we securely delete or anonymise.

  1. Data Security

We implement appropriate technical and organisational measures (encryption, access controls, regular audits) to protect your data. However, no system is 100% secure.

  1. Your GDPR Rights (Arts. 15–22)

You have the right to:

  • Access a copy of your data.
  • Rectification of inaccurate/incomplete data.
  • Erasure (“right to be forgotten”) in certain cases.
  • Restriction of processing.
  • Objection to processing (especially marketing or legitimate interests).
  • Portability (receive data in structured format and transmit to another controller).
  • Withdraw consent at any time (does not affect prior processing).
  • Not be subject to solely automated decisions with legal/significant effect [if applicable, describe logic/consequences and any opt-out].

To exercise rights: Contact us at [privacy@email]. We respond within one month (extendable in complex cases). We may verify identity. You also have the right to lodge a complaint with your local supervisory authority (e.g., in the UK: ICO at ico.org.uk; in your EU country: [list relevant DPA]).

  1. Cookies & Tracking Technologies

We use cookies and similar technologies. See our separate [Cookie Policy / Settings] (link) for details, including types (essential, analytics, marketing), purposes, and how to manage consent/withdraw via our cookie banner or browser settings.

  1. Links to Other Websites

Our Website may link to third-party sites. We are not responsible for their privacy practices—please review their policies.

  1. Children’s Privacy

Our Website is not intended for children under 16. We do not knowingly collect their data without verifiable parental consent.

  1. Changes to This Privacy Policy

We review and may update this policy. Changes are posted here with the new “Last updated” date. Material changes will be notified via the Website or email where appropriate. Please check regularly.

  1. How to Contact Us

For questions, requests, or complaints: Email: hello@chartwelldesignandbuild.co.uk Post: Chamber House 49 Gildredge Road Eastbourne East Sussex BN21 4RY

Supervisory Authority: You may contact the ICO ico.org.uk/make-a-complaint.