Privacy Policy

This page is a placeholder draft awaiting owner-provided legal text and has not been reviewed by a lawyer.

[Placeholder — needs owner input: legal entity name and registered address of the site operator.]

This page describes, in plain terms, what this website's own code actually does with personal data submitted through it. It is a draft awaiting review and sign-off by the site owner and, where needed, a lawyer - see the notice above.

What we collect: the quote form, contact form and newsletter sign-up on this site collect the fields you enter into them (for example name, email, and the details of your enquiry). Job applications collect the fields on that form plus any file you attach.

Leads and applications: enquiries submitted through the quote or contact form are stored with a retention date (a "retention_until" value) and are automatically deleted by a scheduled nightly job once that date passes. [Placeholder — needs owner input: the length of that retention period is not fixed anywhere in this codebase yet; it needs an owner decision before this page can state a number.]

Uploaded files: any file you attach to a form (a reference image, a portfolio file, an application document) is stored in a private storage bucket. It is not publicly reachable by its address - the only way to read it back is a short-lived, staff-only signed link.

Newsletter sign-up: subscribing is double opt-in. A new sign-up starts in a "pending" state and only becomes "confirmed" after you click the confirmation link sent to the address you gave; you can unsubscribe at any time via the link in that email.

Cookies: see the separate Cookie Policy for the exact list of cookies this site sets and how to change your choice at any time.

[Placeholder — needs owner input: who is the data controller for this processing; the legal basis relied on for each use of your data; whether any data is transferred outside your country and on what basis; whether any third-party processor (beyond hosting/analytics already disclosed) is used; how to exercise your access/deletion/portability rights and who to contact to do so; whether a Data Protection Officer exists and their contact details; which jurisdiction's law governs this policy; how we would notify you of a data breach.]