Privacy Policy

1. Introduction

At Resin Injections, we understand that when you contact us about structural repairs to your property, you are sharing sensitive information about your home or business premises. We take our responsibility to protect your personal data seriously and are committed to maintaining the highest standards of data protection.

This privacy policy sets out how we collect, store, and use your personal information when you use our website, request a quote, or engage our services for resin injection repairs. We comply fully with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

Resin Injections is a specialist structural repair business operating throughout the United Kingdom. For the purposes of data protection legislation, we are the data controller responsible for your personal information.

Contact Information:

• Company Name: Resin Injections
• Email: info@resininjections.co.uk
• Postal Address: Shelton St, London
• Website: www.resininjections.co.uk

If you have any questions about how we handle your personal data, or if you wish to exercise any of your data protection rights, please contact us using the details above.

3. Information We Collect About You

When you interact with our business, we may collect and process several categories of personal information. The specific data we collect depends on the nature of your interaction with us.

3.1 Information You Provide Directly

When you request a quote, book a survey, or engage our services, you may provide us with:

• Contact details: Your name, postal address, email address, and telephone number.
• Property information: Details about your property including its location, age, construction type, and the nature of structural issues you are experiencing.
• Survey and assessment data: Information gathered during site visits, including photographs of structural damage, measurements, and technical assessments.
• Financial information: Payment details and billing information when you engage our services.
• Communication records: Correspondence between you and our team, including emails, phone call notes, and messages through our website contact forms.

3.2 Information We Collect Automatically

When you visit our website, we automatically collect certain technical information:

• Device and browser information: IP address, browser type and version, operating system, device type, and screen resolution.
• Usage data: Pages you visit, time spent on pages, links clicked, search terms used, and the website that referred you to us.
• Location data: General geographic location based on your IP address (we do not collect precise GPS coordinates).

3.3 Information from Third Parties

Occasionally, we may receive information about you from third parties such as:

• Building surveyors or structural engineers who recommend our services.
• Insurance companies when repairs are covered under a policy.
• Estate agents or property managers when work is commissioned on behalf of property owners.

4. How and Why We Use Your Personal Data

We process your personal information for specific purposes and only when we have a lawful basis to do so under UK GDPR.

4.1 Marketing Communications

We may send you information about our services, special offers, or industry news if you have:

• Requested information from us and have not opted out of marketing; or
• Previously used our services and have not opted out of marketing; or
• Explicitly consented to receive marketing communications.

You can opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email, or by contacting us directly.

5. Sharing Your Personal Data

We do not sell, rent, or trade your personal information to third parties. However, we may share your data with carefully selected partners and service providers in the following circumstances:

5.1 Service Providers and Contractors

• IT service providers who host our website, maintain our databases, and provide email services.
• Payment processors who handle secure payment transactions on our behalf.
• Specialist subcontractors who may assist with complex structural repair projects (only when necessary and with appropriate confidentiality agreements).

5.2 Professional Advisers

• Structural engineers and building surveyors when technical expertise is required for your project.
• Legal advisers, accountants, and insurers who provide professional services to our business.

5.3 Legal and Regulatory Authorities

• HMRC, Companies House, and other government bodies when required by law.
• Law enforcement agencies when we are legally obliged to disclose information.
• Courts and dispute resolution bodies if legal proceedings arise.

All third parties who process data on our behalf are required to maintain appropriate security measures and to process your information only as instructed by us.

6. International Data Transfers

Your personal data is stored and processed within the United Kingdom. We do not routinely transfer personal data outside the UK. In the rare event that an international transfer becomes necessary (for example, if we use a cloud service provider with servers outside the UK), we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

7. How We Protect Your Personal Data

We implement robust technical and organisational security measures to protect your personal information against unauthorised access, accidental loss, destruction, or damage. Our security measures include:

• Encryption: Sensitive data is encrypted both in transit and at rest.
• Access controls: Only authorised personnel can access personal data, and access is restricted on a need-to-know basis.
• Secure systems: Our IT systems are protected by firewalls, anti-virus software, and regular security updates.
• Staff training: All employees receive data protection training and are bound by confidentiality obligations.
• Physical security: Paper records containing personal data are stored in locked, secure locations.
• Incident response: We have procedures in place to detect, report, and respond to data breaches.

While we take all reasonable precautions to protect your data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but we continually review and enhance our security measures.

8. How Long We Keep Your Personal Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or to comply with legal, regulatory, or contractual requirements. Our standard retention periods are outlined in the table in section 4 above.

When determining retention periods, we consider:

• The nature and sensitivity of the personal data.
• The purposes for which we collected it.
• Legal and regulatory requirements (particularly the 6-year limitation period for contractual claims and building regulations requirements).
• Whether we have a legitimate business need to retain the information.

Once the retention period expires, we securely delete or anonymise your personal data so that it can no longer identify you.

9. Your Rights Under UK GDPR

You have important rights regarding your personal data. These rights are not absolute and may be subject to certain conditions or exemptions, but we will always respond to your requests in accordance with data protection law.

9.1 Right of Access

You have the right to request a copy of the personal data we hold about you. This is commonly known as a “subject access request.” We will provide this information free of charge within one month of receiving your request.

9.2 Right to Rectification

If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.

9.3 Right to Erasure

In certain circumstances, you have the right to request that we delete your personal data. This right applies when:

• The data is no longer necessary for the purposes for which it was collected.
• You withdraw consent (where consent was the lawful basis for processing).
• You object to processing and there are no overriding legitimate grounds.
• The data has been unlawfully processed.

However, we may not be able to delete your data if we need to retain it to comply with legal obligations or to establish, exercise, or defend legal claims.

9.4 Right to Restrict Processing

You have the right to request that we restrict how we use your personal data in certain situations, such as when you contest the accuracy of the data or object to our processing.

9.5 Right to Data Portability

Where we process your data based on your consent or for the performance of a contract, and the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.

9.6 Right to Object

You have the right to object to processing based on legitimate interests. If you object, we will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, or we need to process the data to establish, exercise, or defend legal claims.

You also have an absolute right to object to processing for direct marketing purposes at any time.

9.7 Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

9.8 How to Exercise Your Rights

To exercise any of these rights, please contact us using the details in section 2. We may need to verify your identity before responding to your request to ensure we are disclosing information to the correct person.

10. Cookies and Website Tracking

Our website uses cookies and similar technologies to enhance your browsing experience, analyse website traffic, and understand how visitors interact with our site.

10.1 What Are Cookies?

Cookies are small text files that are placed on your device when you visit a website. They help the website remember information about your visit, such as your preferences and settings.

10.2 Types of Cookies We Use

• Essential cookies: These are necessary for the website to function properly and cannot be disabled.
• Analytics cookies: These help us understand how visitors use our website so we can improve it.
• Functionality cookies: These remember your preferences and choices to provide a more personalised experience.

10.3 Managing Cookies

You can control and manage cookies through your browser settings. However, please note that disabling certain cookies may affect the functionality of our website.

11. Third-Party Websites

Our website may contain links to third-party websites, such as manufacturers of resin injection products or industry associations. We are not responsible for the privacy practices or content of these external sites. We recommend that you review the privacy policies of any third-party websites you visit.

12. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will update the “Last updated” date at the top of this policy.

If we make material changes that significantly affect your rights, we will notify you by email (if we have your email address) or by displaying a prominent notice on our website. We encourage you to review this policy periodically to stay informed about how we protect your personal data.

13. Children’s Privacy

Our services are not directed at children under the age of 16, and we do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete it.

14. Questions, Concerns, and Complaints

We are committed to addressing any concerns you may have about how we handle your personal data.

14.1 Contact Us

If you have any questions about this privacy policy or our data protection practices, please contact us at:

• Email: info@resininjections.co.uk
• Post: Shelton St, London

We aim to respond to all enquiries within 5 working days.

14.2 Making a Complaint

If you are not satisfied with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent supervisory authority for data protection.

Information Commissioner’s Office

• Website: www.ico.org.uk
• Telephone: 0303 123 1113
• Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

However, we would appreciate the opportunity to address your concerns before you contact the ICO, so please get in touch with us first if possible.