This privacy policy explains how East & Gray Ltd (“we”, “us”, or “our”) collects, uses, and protects your personal data when you interact with our website or engage with our services. We are committed to safeguarding your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Please read this privacy policy carefully. It contains important information on who we are, how and why we collect, store, use and share personal information, your rights under data protection law, and how to contact us and regulatory authorities if you have a complaint.

Who We Are

East & Gray Ltd is the data controller of the personal information we collect from you. Our business specialises in home renovations, including bathroom and kitchen design, planning, and installation in Harpenden and the surrounding areas.
Our contact details are: East & Gray Ltd
Harpenden, Hertfordshire, UK
Email: office@eastandgray.co.uk
Phone: 01582 460185

How We Collect Your Personal Information

We collect personal information from you in the following ways:

When you complete forms on our website

When you contact us by phone, email, or social media

When you engage with us at events or meetings

When you apply for a job with us

When you are referred to us by a third party

When cookies are used on our website (see Cookie Policy)

What Personal Information We Collect

We may collect and process the following types of personal data:

Name, address, email address, and phone number

Property address for quotation and renovation purposes

Information about your renovation preferences or interests

Enquiry details and records of communications

IP address, browser type, and other website usage data

How We Use Your Personal Information

We use your personal data for the following purposes:

To respond to enquiries and provide quotations

To deliver our design and renovation services

To manage customer relationships

To send service updates or marketing communications (with your consent)

To process job applications

To comply with legal obligations or for fraud prevention

We process your data under the following legal bases:

Performance of a contract

Consent (where required)

Legitimate interests (e.g., business development or service improvement)

Compliance with legal obligations

Job Applications

If you apply for a position at East & Gray, we will process your information solely for recruitment purposes. This includes:

Evaluating your suitability for the role

Contacting you during the recruitment process

Retaining your CV and details only as long as necessary or as legally required

Who We Share Your Personal Information With

We may share your data with trusted third parties such as:

Accountants and legal advisors

Contractors or subcontractors working on your project

IT and website support services

Marketing and analytics service providers (e.g. Mailchimp or Google Analytics)

All third parties are required to maintain the confidentiality and security of your data and to use it only for the specified purpose. We will not sell or lease your data to third parties for marketing purposes. We may disclose your personal information if required by law or to enforce our legal rights.

Where Your Personal Information Is Stored

Your personal data is stored securely on UK or EEA-based servers. Access is limited to authorised personnel only. Some third-party services we use (e.g. email or analytics tools) may store data outside the UK. Where this is the case, we ensure appropriate safeguards are in place in accordance with UK GDPR.

How Long We Keep Your Personal Information

We keep your personal information only for as long as necessary:

For the purpose for which it was collected

To comply with legal and regulatory requirements

For the duration of your relationship with us, and a period thereafter (typically up to 2 years)

Until you request its deletion (unless we are legally required to retain it)

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right to access – you can request copies of your personal information

Right to rectification – you can request correction of inaccurate data

Right to erasure – you can request deletion of your data

Right to restrict processing – you can limit how we use your data

Right to object – you can object to processing based on legitimate interests or direct marketing

Right to data portability – you can request your data in a format to move it elsewhere

Right to withdraw consent – if consent was the basis for processing

To exercise any of your rights, please email us at: office@eastandgray.co.uk. We may ask for proof of identity before acting on your request.

Cookies

Our website uses cookies to improve user experience and gather analytical data. You can control cookie preferences through your browser settings. For more information, please see our Cookie Policy.

Links to Other Websites

Our website may contain links to third-party websites. Once you leave our site, we have no control over the protection of your information. We encourage you to review the privacy policies of any third-party websites you visit.

Keeping Your Personal Information Secure

We use appropriate technical and organisational measures to safeguard your personal data. This includes access controls, data encryption, and regular security monitoring.

How to Complain

We hope we can resolve any concerns you may have. However, if you are not satisfied, you have the right to complain to the Information Commissioner’s Office (ICO):
Website: https://ico.org.uk/concerns
Phone: 0303 123 1113

Do You Need Help Understanding This Policy?

If you would like this policy in another format (e.g., audio, large print, braille), please contact us at office@eastandgray.co.uk.