GDPR Data Processing Notice
A summary of how we process personal data under the UK GDPR. This notice complements our full Privacy Policy.
Last updated:
Data controller
Nicolla Contractors Ltd. Data protection contact: privacy@nicollacontractors.co.uk.
What we process and why
- Enquiry & quote handling — name, contact details and project information, to respond to you and prepare a quote. Lawful bases: steps prior to a contract and legitimate interests.
- Service delivery — to perform our building and renovation contracts. Lawful basis: performance of a contract.
- Legal & financial records — to meet accounting, tax and regulatory duties. Lawful basis: legal obligation.
- Website analytics & marketing — only where you consent. Lawful basis: consent (withdrawable at any time).
Recipients
We share data only as needed with processors (IT, hosting, email/form and analytics providers), professional advisers (accountants, insurers), vetted sub-contractors, and authorities where legally required. All processors act under written agreements. We do not sell personal data.
International transfers
Where data is processed outside the UK, we rely on UK adequacy regulations or the International Data Transfer Agreement/Addendum to ensure an equivalent level of protection.
Retention
We keep enquiry data for up to 12 months, customer/contract records for up to 6 years after completion, and analytics data for the provider's defined period.
Your rights
You have the right to access, rectify, erase, restrict, port and object to the processing of your personal data, and to withdraw consent. To exercise these rights, email privacy@nicollacontractors.co.uk. We respond within one month.
Complaints
You can complain to the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, helpline 0303 123 1113, ico.org.uk.
Full details
For complete information, please read our Privacy Policy and Cookie Policy.