1. About this Privacy Notice
This Privacy Notice explains how CaledonianAllTrades (“we”, “us”, “our”) collects, uses, discloses, and protects personal data when you visit https://www.caledonianalltrades.co.uk or otherwise interact with us. We are the controller of your personal data for the purposes described in this Notice.
We are committed to processing your personal data lawfully, fairly, and transparently, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
Effective date: 14 December 2025
2. What Personal Data We Collect
2.1 Data you provide to us
- Contact details: name, email address, telephone number.
- Service enquiry information: details about your request, property or project details, location/timing preferences, and any other information you include in messages or forms.
- Account and communications: if you create an account (if available) or contact us directly, we may collect login credentials, preferences, and the content of your communications.
- Payment-related information: if you pay for services, we may receive transaction details and billing information from our payment or invoicing providers. We do not store full payment card numbers.
2.2 Data collected automatically
- Technical and usage data: IP address, device identifiers, browser type and version, operating system, pages viewed, links clicked, time and date of visits, referring pages, and other diagnostic data.
- Cookies and similar technologies: small files placed on your device to operate the site, remember preferences, measure performance, and, with your consent, help improve our services. See Section 5 for details.
2.3 Data from third parties
- Service providers and partners: analytics information, security/anti-fraud signals, and payment confirmation data.
- Publicly available sources: information to help verify identity, prevent fraud, or better respond to your enquiry.
3. Purposes and Legal Bases for Processing
We process personal data for the following purposes and legal bases under UK GDPR:
- To provide and manage our services, respond to enquiries, prepare quotes, schedule works, and fulfil contracts with you (Legal basis: performance of a contract or steps prior to entering into a contract).
- To operate, secure, and improve our website, including diagnosing issues, analytics, and preventing fraud or misuse (Legal basis: legitimate interests to run and protect our business and services; for analytics cookies and similar technologies, consent under PECR/UK GDPR where required).
- To communicate with you about your enquiries, appointments, service updates, and customer support (Legal basis: performance of a contract or legitimate interests to keep you informed and respond to requests).
- To send marketing communications where permitted (Legal basis: consent where required by PECR; or legitimate interests for existing customers, with an easy opt-out at any time).
- To comply with legal and regulatory obligations, including tax, accounting, and responding to lawful requests (Legal basis: legal obligation).
- To establish, exercise, or defend legal claims (Legal basis: legitimate interests).
4. What Happens If You Do Not Provide Data
Where we need personal data to enter into or perform a contract (such as contact details for an enquiry or booking) and you do not provide it, we may be unable to provide the requested services.
5. Cookies and Similar Technologies
We use cookies and similar technologies to:
- Enable core site functionality and security (strictly necessary cookies).
- Remember your preferences (functionality cookies).
- Measure and improve site performance and understand how visitors use our site (analytics/performance cookies).
Strictly necessary cookies are used without consent. Non-essential cookies (such as analytics) are used with your consent, which you can give or refuse via the cookie banner. You can withdraw consent at any time by revisiting your cookie preferences, clearing cookies from your browser, and adjusting your browser settings to block or delete cookies. If you block certain cookies, some site features may not function properly.
Retention of cookies varies by type and purpose; session cookies are deleted when you close your browser, while persistent cookies may remain for a defined period (often from a few days up to 24 months) unless you delete them sooner.
6. Sharing Your Personal Data
We share personal data only as necessary for the purposes described above, with appropriate safeguards:
- Service providers: hosting and infrastructure providers, IT and security vendors, website analytics providers, customer communication tools, payment and invoicing processors, and professional advisers (e.g., accountants, auditors).
- Trades and logistics: where required to fulfil your service request, with trusted trades professionals or suppliers assisting with your job.
- Legal and regulatory: with authorities, regulators, or law enforcement where required by law or to protect our rights, users, or the public.
- Business transfers: as part of a merger, acquisition, or other reorganisation, subject to confidentiality and data protection commitments.
We do not sell your personal data.
7. International Data Transfers
Your personal data may be transferred to and processed in countries outside the UK (and, where relevant, the European Economic Area). Where we transfer personal data internationally, we ensure appropriate safeguards are in place, such as:
- UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses (SCCs).
- Transfers to organisations certified under an approved framework, such as the UK Extension to the EU–US Data Privacy Framework (UK–US Data Bridge), where applicable.
- Other legally recognised safeguards or specific derogations permitted by law.
You can request more information about our international transfer safeguards by contacting us (see Section 12).
8. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Typical retention periods are:
- Enquiries and quotes: up to 24 months from your last interaction.
- Customer and project records: for the duration of the relationship and up to 7 years thereafter to meet tax, accounting, and legal obligations.
- Communications and support tickets: up to 36 months from resolution.
- Account information (if applicable): for as long as the account is active and up to 24 months after closure.
- Technical and analytics data: typically up to 26 months in identifiable form, after which it may be aggregated or anonymised.
- Cookies: as described in Section 5.
In some cases, we may retain data longer where required by law or to establish, exercise, or defend legal claims.
9. Your Rights
Under UK data protection law, you have the following rights (subject to conditions and exemptions):
- Right of access: to obtain a copy of your personal data and information about how it is processed.
- Right to rectification: to have inaccurate or incomplete data corrected.
- Right to erasure: to request deletion of your data where there is no overriding reason for us to continue processing.
- Right to restrict processing: to request that we limit how we use your data.
- Right to data portability: to receive your data in a structured, commonly used, machine-readable format and to have it transmitted to another controller where feasible.
- Right to object: to processing based on legitimate interests or for direct marketing (you can opt out of marketing at any time).
- Right to withdraw consent: where we rely on consent, you can withdraw it at any time (this does not affect processing prior to withdrawal).
To exercise your rights, contact us using the details in Section 12. We may need to verify your identity before responding. We aim to respond within one month, or inform you if more time is needed for complex requests.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO). Contact details: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, telephone 0303 123 1113.
10. Data Security
We implement appropriate technical and organisational measures to protect personal data, including secure hosting, access controls, encryption in transit where appropriate, regular updates and patching, least-privilege access, staff awareness, and vendor due diligence. While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is entirely secure.
11. Children’s Privacy
Our website and services are not directed to children, and we do not knowingly collect personal data from individuals under 13. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.
12. How to Contact Us and Our Data Protection Contact
CaledonianAllTrades is the controller responsible for your personal data processed in connection with this website and our services.
Data protection contact (for all privacy matters, including exercising your rights): [email protected]
We are not required to appoint a statutory Data Protection Officer. Our designated data protection contact can address questions about this Notice, our practices, or your rights.
13. Automated Decision-Making
We do not carry out decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.
14. Third-Party Websites
Our website may reference third-party websites or services. This Notice does not cover those third parties. We encourage you to review their privacy information before providing any personal data.
15. Changes to This Privacy Notice
We may update this Notice to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. Material changes will be highlighted on this page. Your continued use of our website after changes take effect signifies your understanding of the updated Notice.
Last updated: 14 December 2025