Spotlight Construction Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy.

This policy explains how we collect, use, and protect your personal data when you visit our website or contact us.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please see our Cookies Policy for information about the cookies and similar technologies we use, including essential cookies, analytics cookies and, where applicable, advertising cookies.

How We Use Your Information

The primary reason we use your information is to provide construction, refurbishment, and related services to you, including:

• Responding to enquiries and providing quotations

• Delivering and managing projects

• Maintaining and updating client records

• Managing our business operations and improving our services

• Analysing how visitors use our website to improve its performance, user experience and content.

• Measuring the effectiveness of our online advertising and marketing campaigns.

• Complying with our legal and regulatory obligations

Legal Basis for Processing

We rely on the following lawful bases:

• Consent – when you contact us or submit a form

• Contract – to provide services you request

• Legitimate interests – to operate and improve our business

• Legal obligation – to comply with applicable laws

Data Controller

For the purposes of the UK GDPR and Data Protection Act 2018, Spotlight Construction Ltd is the data controller. We determine how and why your personal data is processed. You can contact us here:

Email: james@spotlightconstruction.com

Personal Data We Process

Personal data processed by us may include, but is not limited to:

• personal details (name, contact information)

• project and property details

• business or company information

• financial or payment details (where relevant)

• correspondence and communications

• technical information, including IP address, browser type, device information and website usage data collected through cookies where you have provided your consent.

Our use of your data is subject to your instructions, applicable data protection law, and our duty of confidentiality.

Data Protection Principles

We ensure that personal data is:

• used lawfully, fairly, and transparently

• accurate and kept up to date

• relevant and limited to what is necessary

• collected for specified, legitimate purposes only

• retained only for as long as necessary

• kept secure using appropriate technical and organisational measures

Data Sharing

We may share your information where necessary with:

• subcontractors and specialist contractors

• professional advisers (e.g. surveyors, engineers, accountants, legal advisers)

• suppliers and service providers

• regulatory authorities or insurers

We may also share data with third parties who provide services to us (such as IT support or administrative services).

Where applicable, we also use third-party providers such as Google Analytics and Google Ads to help us understand website usage and measure the effectiveness of our advertising. These providers process information in accordance with their own privacy policies.

All third parties are required to respect the security and confidentiality of your data. 

International Transfers

We do not normally transfer personal data outside the UK or European Economic Area. If this becomes necessary, we will take appropriate steps to ensure that any transfer is carried out in accordance with applicable data protection laws.

Data Retention

Your personal data will be retained only for as long as necessary for the purposes outlined above, including to meet legal, contractual, tax, and regulatory requirements.

Your Rights

Under data protection law, you have the right to:

• request access to your personal data

• request correction of inaccurate data

• request erasure of your data

• restrict or object to processing

• request data portability (where applicable)

• lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk

Provision of data

Providing your personal data may be necessary for us to enter into and perform a contract with you. If you do not provide the required information, we may be unable to deliver our services or comply with our legal obligations.

Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page.

Updated: June 2026