Strathworks Privacy Notice

Strathworks is committed to protecting your privacy and keeping your personal information secure. This notice explains what we collect, how we use it, who we share it with, how long we keep it, and your rights.

1) Who we are

Strathworks is the data controller for the personal information described in this notice.

Contact details
Email: [email protected]
Phone: 07440 475716
Postal address: Office 1072, 1/1, 3 Fitzroy Place, Finnieston, Glasgow, G3 7RH

2) What information we collect

We may collect and use:

A) Information you provide

• Name
• Email address and phone number
• Property/site address
• Details about your enquiry and the work you want us to do
• Messages you send us (email and WhatsApp/text)
• Photos/files you send or upload (e.g. site photos, plans)

B) Customer portal information

• Account details (name, email, phone)
• Quotes and acceptances/rejections
• Job records and communications
• Photos and files uploaded during the job
• Snagging/warranty communications and outcomes

C) Business records

• Quotes, accepted terms/acceptance records, invoices, and payment status
• Project notes, schedules, and supplier/subcontractor details (where relevant)

D) Website usage information

We may use privacy-friendly analytics to understand how visitors use our website and to improve performance and user experience. Where Cloudflare Web Analytics is enabled, it is designed not to use cookies or similar client-side storage for analytics.

3) How we use your information (and our lawful basis)

UK GDPR requires a lawful basis to process personal information. We use your information for:

Providing quotes and delivering services (Contract)

• Preparing and managing quotes
• Providing and managing our services
• Project updates, customer support, and aftercare
• Snagging and warranty handling

Running the business properly (Legitimate interests)

• Keeping job records for quality control and dispute resolution
• Improving our services and internal processes
• Understanding website usage and improving performance

Legal and accounting obligations (Legal obligation)

• Maintaining accounting/tax records (e.g. invoices and payment records)

Marketing photos (Consent)

• Using before/after photos on our website/social media only if you explicitly opt in
• You can withdraw this consent at any time

4) Cookies

Our website uses strictly necessary cookies for security and core site functionality (for example, cookies used for session management in our customer portal). We do not use non-essential cookies for marketing or behavioural advertising.

Where Cloudflare Web Analytics is enabled, it is designed not to use cookies or similar client-side storage to collect analytics.

5) Where your information is stored (website/portal/files)

We use Cloudflare services to run our website and customer portal infrastructure. Files (including job photos, contracts/acceptance records, invoices, and other project documents) may be stored in Cloudflare R2 object storage.

We aim to keep data stored close to the UK/Western Europe for performance where possible, but this should be treated as a location preference rather than a strict residency guarantee.

6) Who we share your information with

We do not sell your personal information.

We may share your information with trusted third parties only where necessary to run the business and deliver your service, such as:

• Suppliers and delivery companies (to deliver materials to your address)
• Subcontractors/specialists (to carry out work you have requested or that is needed for the job)
• Accounting/invoicing providers and our accountant/bookkeeper
• IT/hosting providers used to operate our website, portal, and storage systems (e.g. Cloudflare)
• Email delivery providers used to send service emails (e.g. Postmark)

We only share what is necessary for the task and expect providers to keep your information secure.

7) International transfers

Some of our service providers may process or store data outside the UK. Where this happens, we take steps to ensure appropriate safeguards are in place to protect your information.

8) How long we keep your information (retention)

We keep personal information only as long as needed for the purposes described in this notice:

• Quotes/enquiries not accepted: typically 12 months, then deleted or anonymised.
• Active customer portal accounts: we keep job photos and job records while your account remains active so you can access your project history.
• If you close/delete your account: we remove portal access and keep job photos and job records until 5 years after the end of your workmanship warranty period, then delete or anonymise.
• Accounting/tax records (including invoices): typically 6 years.

9) How we keep your information secure

We use appropriate technical and organisational measures to protect your information, including access controls and secure systems. No online system is 100% secure, but we take security seriously.

10) Your rights

You have the right to:

• access your personal information
• correct inaccurate information
• request deletion of your personal information in some circumstances
• object to or restrict processing in some circumstances
• withdraw consent (where we rely on consent, e.g. marketing photos)
• request your data in a portable format in some circumstances

To exercise your rights, contact us at [email protected].

Please note: if you request deletion, we may need to keep certain records where we have a legal obligation or a legitimate business reason to do so (for example accounting records or warranty/dispute records).

11) Complaints

If you are unhappy with how we handle your information, please contact us first and we will try to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office (ICO) (the UK data protection regulator).

12) Changes to this notice

We may update this notice from time to time. The latest version will be posted on this page with an updated “Last updated” date.