Privacy Policy

This privacy policy explains how East & Gray Ltd (“we”, “us”, or “our”) collects, uses, and protects your personal data when you interact with our website or engage with our services. We are committed to safeguarding your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this privacy policy carefully. It contains important information on who we are, how and why we collect, store, use and share personal information, your rights under data protection law, and how to contact us and regulatory authorities if you have a complaint.

Who We Are

East & Gray Ltd is the data controller of the personal information we collect from you. Our business specialises in home renovations, including bathroom and kitchen design, planning, and installation in Harpenden and the surrounding areas.

Our contact details are:
East & Gray Ltd

Harpenden, Hertfordshire, UK

Email: office@eastandgray.co.uk

Phone: 01582 460185

How We Collect Your Personal Information

We collect personal information from you in the following ways:

• When you complete forms on our website
• When you contact us by phone, email, or social media
• When you engage with us at events or meetings
• When you apply for a job with us
• When you are referred to us by a third party
• When cookies are used on our website (see Cookie Policy)

• 
  
  

  What Personal Information We Collect

  We may collect and process the following types of personal data:

• Name, address, email address, and phone number
• Property address for quotation and renovation purposes
• Information about your renovation preferences or interests
• Enquiry details and records of communications
• IP address, browser type, and other website usage data

• 
  
  

  How We Use Your Personal Information

  We use your personal data for the following purposes:

• To respond to enquiries and provide quotations
• To deliver our design and renovation services
• To manage customer relationships
• To send service updates or marketing communications (with your consent)
• To process job applications
• To comply with legal obligations or for fraud prevention

• 
  We process your data under the following legal bases:

• Performance of a contract
• Consent (where required)
• Legitimate interests (e.g., business development or service improvement)
• Compliance with legal obligations

• 
  
  

  Job Applications

  If you apply for a position at East & Gray, we will process your information solely for
  recruitment purposes. This includes:

• Evaluating your suitability for the role
• Contacting you during the recruitment process
• Retaining your CV and details only as long as necessary or as legally required

• 
  
  

  Who We Share Your Personal Information With

  We may share your data with trusted third parties such as:

• Accountants and legal advisors
• Contractors or subcontractors working on your project
• IT and website support services
• Marketing and analytics service providers (e.g. Mailchimp or Google Analytics)

• 
  All third parties are required to maintain the confidentiality and security of your data and to use it only for the specified purpose. We will not sell or lease your data to third parties for marketing purposes. We may disclose your personal information if required by law or to enforce our legal rights.
  
  
  

  Where Your Personal Information Is Stored

  Your personal data is stored securely on UK or EEA-based servers. Access is limited to authorised personnel only. Some third-party services we use (e.g. email or analytics tools) may store data outside the UK. Where this is the case, we ensure appropriate safeguards are in place in accordance with UK GDPR.
  
  
  

  How Long We Keep Your Personal Information

  We keep your personal information only for as long as necessary:

• For the purpose for which it was collected
• To comply with legal and regulatory requirements
• For the duration of your relationship with us, and a period thereafter (typically up to 2 years)
• Until you request its deletion (unless we are legally required to retain it)

• 
  
  

  Your Rights Under UK GDPR

  You have the following rights regarding your personal data:

• Right to access – you can request copies of your personal information
• Right to rectification – you can request correction of inaccurate data
• Right to erasure – you can request deletion of your data
• Right to restrict processing – you can limit how we use your data
• Right to object – you can object to processing based on legitimate interests or direct marketing
• Right to data portability – you can request your data in a format to move it elsewhere
• Right to withdraw consent – if consent was the basis for processing

• 
  To exercise any of your rights, please email us at: office@eastandgray.co.uk. We may ask for proof of identity before acting on your request.
  
  
  

  Cookies

  Our website uses cookies to improve user experience and gather analytical data. You can control cookie preferences through your browser settings. For more information, please see our Cookie Policy.
  
  
  

  Links to Other Websites

  Our website may contain links to third-party websites. Once you leave our site, we have no control over the protection of your information. We encourage you to review the privacy policies of any third-party websites you visit.
  
  
  

  Keeping Your Personal Information Secure

  We use appropriate technical and organisational measures to safeguard your personal data. This includes access controls, data encryption, and regular security monitoring.
  
  
  

  How to Complain

  We hope we can resolve any concerns you may have. However, if you are not satisfied, you have the right to complain to the Information Commissioner’s Office (ICO):
  
  Website: https://ico.org.uk/concerns
  
  Phone: 0303 123 1113
  
  
  

  Do You Need Help Understanding This Policy?

  If you would like this policy in another format (e.g., audio, large print, braille), please contact us at office@eastandgray.co.uk.

  
  Last updated date: 2025/05/19