1. Who is responsible for your data
AMK London Building Construction Ltd is the data controller for enquiries made through this website. You can contact us at 15A Station Road, Harrow, HA1 2UF, by email at info@amkbuildingconstruction.co.uk, or by telephone at +44 7970 798313.
2. Information we collect
When you request a quote, we collect the service required, project postcode, your name, phone number, any optional project note, the page or control used to start the enquiry, your privacy acknowledgement, and the time the form was opened. We also process a one-way hash of the requesting IP address to prevent spam, enforce rate limits, and suppress accidental duplicate submissions.
We do not collect payment details, create marketing profiles, or add quote requesters to a mailing list through this website.
3. Why we use it and our lawful basis
- To answer your enquiry, discuss requirements, arrange a site visit, and prepare a quote. This is necessary to take steps at your request before entering a contract.
- To protect the form and website from abuse, fraud, and repeated submissions. We rely on our legitimate interest in operating a secure service.
- To manage customer records, contracts, tax, and legal obligations if you become a customer.
4. Service providers and international transfers
We use Vercel to host the website, Resend to deliver quote emails, and Upstash Redis to operate rate limiting and duplicate suppression. These providers act under their own security and data-processing terms. Where processing occurs outside the United Kingdom, we rely on the provider’s applicable contractual safeguards or another lawful transfer mechanism.
Google Maps, WhatsApp, Instagram, and Facebook are external destinations only. Their services are not embedded on this website; their own privacy terms apply after you choose to follow a link.
5. How long we retain information
- Unsuccessful or unconverted enquiries: up to 12 months.
- Customer and transaction records: up to six years after the relevant relationship or accounting period.
- Security and abuse-prevention logs: up to 30 days.
We may retain information longer when required to establish, exercise, or defend legal claims, or to meet a legal obligation.
6. Security
Quote requests are validated on the server, protected by rate limiting and duplicate suppression, and delivered without being stored in an application database. Provider credentials remain on the server. No internet transmission is completely risk-free, but we use proportionate technical and organisational safeguards and limit access to people who need it.
7. Your rights
Depending on the circumstances, you may ask for access to your personal information, correction, erasure, restriction, objection, or portability. You may also complain to the UK Information Commissioner’s Office. Contact us first using the details above, or visit ico.org.uk/make-a-complaint (opens in a new tab).
8. Changes to this policy
We may update this policy when our website, suppliers, or legal obligations change. The effective date shown at the top identifies the current version.