Privacy Policy

Spotlight Construction Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy.

This policy explains how we collect, use, and protect your personal data when you visit our website or contact us.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

 

Please see our Cookies Policy for information on how we use cookies.

 

How We Use Your Information

The primary reason we use your information is to provide construction, refurbishment, and related services to you, including:

  • Responding to enquiries and providing quotations

  • Delivering and managing projects

  • Maintaining and updating client records

  • Managing our business operations and improving our services

  • Complying with our legal and regulatory obligations

 

Legal Basis for Processing

We rely on the following lawful bases:

  • Consent – when you contact us or submit a form

  • Contract – to provide services you request

  • Legitimate interests – to operate and improve our business

  • Legal obligation – to comply with applicable laws

 

Data Controller

For the purposes of the UK GDPR and Data Protection Act 2018, Spotlight Construction Ltd is the data controller. We determine how and why your personal data is processed. You can contact us here:

Email: james@spotlightconstruction.com

 

Personal Data We Process

Personal data processed by us may include, but is not limited to:

  • personal details (name, contact information)

  • project and property details

  • business or company information

  • financial or payment details (where relevant)

  • correspondence and communications

Our use of your data is subject to your instructions, applicable data protection law, and our duty of confidentiality.

 

Data Protection Principles

We ensure that personal data is:

  • used lawfully, fairly, and transparently

  • accurate and kept up to date

  • relevant and limited to what is necessary

  • collected for specified, legitimate purposes only

  • retained only for as long as necessary

  • kept secure using appropriate technical and organisational measures

 

Data Sharing

We may share your information where necessary with:

  • subcontractors and specialist contractors

  • professional advisers (e.g. surveyors, engineers, accountants, legal advisers)

  • suppliers and service providers

  • regulatory authorities or insurers

We may also share data with third parties who provide services to us (such as IT support or administrative services).

All third parties are required to respect the security and confidentiality of your data. 

 

International Transfers

We do not normally transfer personal data outside the UK or European Economic Area. If this becomes necessary, we will ensure appropriate safeguards are in place.

 

Data Retention

Your personal data will be retained only for as long as necessary for the purposes outlined above, including to meet legal, contractual, tax, and regulatory requirements.

 

Your Rights

Under data protection law, you have the right to:

  • request access to your personal data

  • request correction of inaccurate data

  • request erasure of your data

  • restrict or object to processing

  • request data portability (where applicable)

  • lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk

 

Provision of data

Providing your personal data may be necessary for us to enter into and perform a contract with you. If you do not provide the required information, we may be unable to deliver our services or comply with our legal obligations.

 

Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page.

 

Updated: May 2026