Privacy Policy

Last updated: 28 August 2026

Who we are

AJS Refurbishments is a property renovation and commercial refurbishment contractor based in Kettering, Northamptonshire. We are the data controller for the personal data described in this policy. You can reach us by email at ajs.refurbishments@hotmail.com or by phone on 07388349095.

This policy explains what personal data we collect, why we collect it, how long we keep it and what rights you have. It is written to meet the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003.

What personal data we collect

We only collect what we need to answer your enquiry and carry out work for you.

• Enquiry data. When you complete a form on this website we collect your name, email address, telephone number, the postcode of the property, the service you are interested in and anything you write in the message box.
• Technical data. Our web server records the page the enquiry came from, the time of submission and a one way hashed version of your IP address. The hash is used only to limit repeated automated submissions and cannot be reversed to identify you.
• Project data. If you go on to become a customer we hold the property address, quotation details, correspondence, site photographs and invoicing records.
• Cookie preferences. We record the choice you make in the cookie banner along with the date and time, as proof of consent.

We do not knowingly collect data from anyone under 18, and we do not collect special category data.

Why we use it, and our lawful basis

Purpose	Lawful basis
Replying to your enquiry and preparing a quotation	Steps taken at your request before entering into a contract
Carrying out agreed works, ordering materials and arranging trades	Performance of a contract
Invoicing, accounting and tax records	Legal obligation
Keeping records of health and safety, insurance and warranty matters	Legitimate interests, and legal obligation where applicable
Preventing spam and abuse of our website forms	Legitimate interests in protecting our systems
Non essential cookies used for analytics or marketing	Your consent, which you can withdraw at any time

Where we rely on legitimate interests we have considered whether those interests are overridden by your rights, and we have concluded they are not, because the processing is limited to running an ordinary building and refurbishment business.

Marketing

We do not sell, rent or trade your personal data. We do not add enquiry contacts to a marketing list without asking. If we ever send marketing emails, every message carries a one click unsubscribe link and we stop as soon as you ask us to.

Who we share it with

We share personal data only where it is necessary, and only with:

• Trades and subcontractors working on your project, who receive the site address and access details needed to attend.
• Our website host and email provider, who process data on our behalf under a written agreement.
• Our customer relationship system, where enquiry details are stored so nothing is missed.
• Our accountant and, where required, HM Revenue and Customs.
• Our insurers or legal advisers, if there is a claim or dispute.

We do not transfer personal data outside the United Kingdom unless the receiving provider is covered by UK adequacy regulations or an International Data Transfer Agreement.

How long we keep it

• Enquiries that do not become work. Deleted within 24 months of the last contact.
• Quotations that are not accepted. Kept for 24 months, then deleted.
• Customer and project records. Kept for 6 years after the end of the works, to cover contractual and warranty claims.
• Accounting records. Kept for 6 years after the end of the relevant tax year, as HMRC requires.
• Cookie consent records. Kept for 12 months from the date of the choice.

How we keep it safe

The website is served over an encrypted HTTPS connection. Enquiry data is stored in an access controlled database and can only be viewed by logged in administrators. Every form is validated and sanitised before storage, and all output is escaped so a hostile submission cannot run as script. Access to our email and customer systems is restricted to the people who need it.

Your rights

Under UK data protection law you have the right to:

• Ask for a copy of the personal data we hold about you, free of charge.
• Ask us to correct anything that is inaccurate or incomplete.
• Ask us to erase your data, where we no longer need it and no legal obligation requires us to keep it.
• Ask us to restrict how we use your data while a concern is looked into.
• Object to processing that we carry out on the basis of legitimate interests.
• Ask for your data in a portable, machine readable format.
• Withdraw consent at any time, where consent is the basis we rely on. Withdrawing consent does not affect anything done before you withdrew it.

To exercise any of these rights, email ajs.refurbishments@hotmail.com or call 07388349095. We will respond within one calendar month.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, by phone on 0303 123 1113, or in writing to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Changes to this policy

If we change how we handle personal data we will update this page and change the date shown below.

Who we are

Suggested text: Our website address is: https://www.ajsrefurbishments.co.uk.

Comments

Suggested text: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

Suggested text: If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select "Remember Me", your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

Suggested text: If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where your data is sent

Suggested text: Visitor comments may be checked through an automated spam detection service.