Privacy Policy

1. Who we are

This website is operated by:

Oxford and District Building Services Limited
Unit 7 Swannybrook Farm,
Kingston Bagpuize, Abingdon,
Oxfordshire, OX13 5NE

For the purposes of UK data protection law, Oxford and District Building Services Limited is the data controller responsible for your personal information.

 

2. Information we collect

We may collect personal information that you choose to provide when you contact us through our website contact form.

This may include:

– Your name
– Your email address
– Your telephone number, if provided
– Any other information you choose to include in your enquiry

We may also collect certain technical information when you visit our website, such as information about your device, browser and how you use the website. This may be collected using cookies and similar technologies, as described below.

 

3. How we use your information

We use information provided through our contact form to:

– Respond to your enquiry
– Communicate with you about your enquiry
– Provide information or assistance that you have requested
– Protect our website and contact form from spam and malicious submissions

We do not use information submitted through the contact form to send unsolicited marketing communications.

 

Lawful basis

Our lawful basis for processing information submitted through the contact form is legitimate interests under Article 6(1)(f) of the UK GDPR.

Our legitimate interest is being able to respond to enquiries made to us through our website and communicate with individuals who contact us. We consider this processing to be necessary and proportionate, and something that a person contacting us would reasonably expect.

We also have a legitimate interest in protecting our website and contact form from spam and malicious submissions.

We have considered the impact of this processing on individuals and consider that our legitimate interests are not overridden by their interests, rights or freedoms.

We maintain an internal record of our assessment of this lawful basis.

 

4. Contact form and spam protection

Our website uses Akismet to help identify and prevent spam submissions through our contact form.

When you submit an enquiry through our contact form, information associated with your submission may be processed by Akismet for the purpose of detecting spam.

Akismet is provided by Automattic. Information processed by Akismet may include information associated with the form submission and technical information relating to the submission, such as the submitter’s IP address, user agent and other information used to assess whether a submission is spam.

For further information about how Akismet processes information, please refer to the Akismet Privacy Policy.

 

5. Google Analytics

We use Google Analytics 4 (GA4) through Google Site Kit to help us understand how visitors use our website.

Google Analytics may collect information such as:

• Pages visited
• How visitors navigate and interact with the website
• Approximate geographical information
• Information about the device and browser being used
• How visitors arrived at the website
• Other information relating to website usage

We use this information to understand how our website is being used and to help us improve the website, its content and user experience.

Google Analytics is a non-essential analytics service. We will not activate Google Analytics or place non-essential analytics cookies or similar technologies on your device unless you have given the required consent.

Where you give consent to analytics, our lawful basis for the subsequent processing of personal information collected through Google Analytics is consent.

You can withdraw or change your analytics consent at any time through the cookie settings on our website.

Google may process information collected through Google Analytics in accordance with its own privacy policies and terms.

 

6. Cookies and similar technologies

Our website uses cookies and other technologies that store or access information on your device.

These technologies fall into different categories depending on their purpose.

 

Essential technologies

Some cookies and similar technologies are necessary for the website to function correctly, provide features you have requested, maintain security or remember choices you have made.

Where these technologies are exempt from the consent requirements under the Privacy and Electronic Communications Regulations (PECR), we may use them without obtaining prior consent.

We will still provide information about these technologies where required by applicable data protection law.

 

Analytics technologies

We use Google Analytics 4 through Google Site Kit to understand how visitors use our website.

Analytics technologies are not activated unless you give consent where consent is required.

Our cookie consent mechanism allows you to accept or reject analytics technologies. Rejecting analytics will not prevent you from using the website.

 

Your cookie choices

When you first visit our website, you will be given the opportunity to choose whether to allow non-essential analytics technologies.

You can:

• Accept analytics
• Reject analytics
• Manage your preferences

Your choice will be respected and recorded by our consent management mechanism.

You can withdraw or change your consent at any time by using the cookie settings available on our website.

We do not use “accepting continued use of the website” as consent. Consent must involve a clear and positive action.

We do not activate non-essential analytics technologies before the required consent has been obtained.

Our use of cookies and similar technologies is governed by the Privacy and Electronic Communications Regulations (PECR) and, where personal information is involved, applicable UK data protection legislation.

PECR requires organisations to provide clear information about storage and access technologies and, unless an applicable exception applies, obtain consent before using them. The ICO’s current guidance also requires users to be able to refuse non-essential technologies as easily as they can accept them and to be able to withdraw consent.

 

7. Third-party services

We use the following third-party services in connection with our website:

 

Google Analytics / Google Site Kit

Used to understand website usage and improve our website. Analytics technologies are subject to consent where required.

 

Akismet

Used to help identify and prevent spam submissions through our contact form.

These third parties may process information outside the UK. Where this occurs, appropriate safeguards will be used in accordance with applicable UK data protection law.

We do not sell or rent your personal information to third parties.

We may also disclose personal information where required by law or where necessary to protect our legal rights, website or users.

 

8. International transfers

Some of the service providers we use may process personal information outside the UK.

Where personal information is transferred outside the UK, we will ensure that appropriate safeguards are in place in accordance with applicable UK data protection law.

These safeguards may include an adequacy decision, appropriate contractual protections or another lawful transfer mechanism.

 

9. How long we keep your information

We only retain personal information for as long as it is reasonably necessary for the purposes for which it was collected.

Information submitted through our contact form will generally be retained for as long as necessary to deal with your enquiry and, where appropriate, to maintain relevant business records.

We will securely delete or otherwise dispose of personal information when it is no longer required, unless we have a legal or legitimate reason to retain it for longer.

Information processed by third-party services, such as Akismet and Google Analytics, may be retained in accordance with their own retention policies.

 

10. How we protect your information

We take reasonable technical and organisational measures to protect personal information against accidental loss, misuse, unauthorised access, alteration or disclosure.

However, no transmission of information over the internet can be guaranteed to be completely secure.

 

11. Your rights

Under UK data protection law, you have a number of rights in relation to your personal information.

Depending on the circumstances, these include the right to:

• Ask us for access to the personal information we hold about you
• Ask us to correct inaccurate or incomplete information
• Ask us to delete your personal information in certain circumstances
• Ask us to restrict how we use your personal information in certain circumstances
• Object to our processing of your personal information where we rely on legitimate interests
• Withdraw consent where we rely on consent to process your information

Where we process your personal information based on legitimate interests, you have the right to object to that processing. We will consider your objection in accordance with applicable data protection law.

Where we process your information based on consent, you can withdraw that consent at any time. This does not affect the lawfulness of processing carried out before you withdrew your consent.

To exercise your rights, please contact us using the details provided above.

 

12. Complaints

If you have any concerns about how we have used your personal information, please contact us in the first instance using the details above.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK’s independent regulator for data protection.

Further information about your rights and how to make a complaint is available from the ICO.

 

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, services, technology or legal obligations.

Any changes will be published on this page and the “Last updated” date will be amended accordingly.