Privacy policy

01Who we are

Stonevanta Construction Ltd is a building company registered in England and Wales (company no. 17338443), with its registered office at First Floor, Office R05, 35 Haymarket, London, SW1Y 4HA. We are the controller of the personal information described here under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Data (Use and Access) Act 2025.

Questions about this policy or your information: info@stonevanta.co.uk, 07778 557569, or by post to the address above, marked "Data protection".

02What we collect and why

We don't ask for special category information. If an accident report or a site induction involves health information, we record only what the law requires and keep it restricted.

03On site and around it

Progress photographs

We photograph work as it goes, especially anything that will be covered up — foundations, damp-proofing, insulation, steels. Photos are taken of the building, not of people, but sometimes a neighbour's property or a passer-by will appear. We use them for quality records, Building Control, warranty inspections and our handover pack. We will only use photos of your home in our marketing with your written permission, and never with the address.

Site security

Some sites need a camera for security out of hours. Where one is used, signs say so, it points at the site rather than at neighbouring homes or the street, and footage is kept for no more than 30 days unless it is needed for an incident.

Signs and notices

Our site boards show the company's details and a contact number, not the names of clients.

04This website

• No cookies, no analytics, no tracking. We don't use advertising or social-media pixels.
• Two session flags. Your browser keeps sv-intro (so the opening animation plays once) and sv-shade (to finish the page transition) in session storage. They contain no personal information and disappear when you close the tab.
• Fonts and images are served from our own server. Nothing is loaded from Google or any other third party.
• The project form doesn't send anything to us by itself. It writes an email in your own mail app; nothing is transmitted until you press send there.
• Server logs. Our hosting records technical information (IP address, browser, pages requested) to keep the site secure. Logs are kept for no more than 30 days.

05Who we share it with

Only with people who need it to deliver your project or meet a legal duty:

• your architect, structural engineer and other consultants on the job;
• Building Control (the council or an approved inspector) and, for new homes, the structural warranty provider;
• Party Wall surveyors, the water company (build-over agreements) and utility companies for new connections;
• specialist subcontractors and suppliers, limited to what they need to do their part;
• our insurers, accountants, bank and professional advisers;
• HMRC, the Health and Safety Executive, the police or a court where the law requires it.

Our email, file storage and accounting providers act as processors under written contracts and may only use the information on our instructions.

06Transfers outside the UK

Some of our software providers may store information outside the UK. Where they do, we rely on UK adequacy regulations or the ICO's International Data Transfer Agreement (or the UK Addendum to the EU clauses) so your information keeps an equivalent level of protection.

07How long we keep it

• Enquiries that don't go ahead: 12 months after our last contact.
• Project records (contracts, drawings, photos, approvals, handover documents): 15 years after completion. Claims about defects in a dwelling can be brought for up to 15 years under the Defective Premises Act 1972 as amended by the Building Safety Act 2022, and these records are how we answer them.
• Accounting records: 6 years from the end of the financial year, as tax law requires.
• Site sign-in and induction records: 3 years; accident records at least 3 years, longer if a claim is possible.
• Neighbour correspondence: with the project records for that site.

When the period ends we delete or securely destroy the information, or anonymise it.

08Keeping it safe

Access to project files is limited to the people working on your job. Devices are password-protected and encrypted, accounts use two-factor sign-in, and paper documents on site are kept in the locked site office. If something goes wrong that puts your information at risk, we will tell you and, where required, the ICO.

09Your rights

You can ask us to give you a copy of your information, correct it, delete it, restrict how we use it, object to how we use it, or send it to someone else in a portable format. Some rights have limits — for example, we can't delete records we must keep by law or need to deal with a claim. We reply within one month, and there is no charge in normal cases.

10Complaints

If you're unhappy with how we've handled your information, please tell us first: we'll acknowledge your complaint within 30 days and tell you what we're doing about it. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113.

11Changes to this policy

We'll update this page if the way we handle information changes, and change the date at the top. If a change affects you significantly while we're working together, we'll tell you directly.