Effective Date: June 2026
Last Updated: June 2026
CS Lewis Construction Limited, trading as CSL Construction, is committed to protecting personal data and handling information responsibly, securely and in line with applicable UK data protection law.
This policy outlines how we approach data protection and our responsibilities under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who We Are
This policy applies to:
CS Lewis Construction Limited
Trading as CSL Construction
Company Number: 15260394
England & Wales
Contact email for data protection matters:
info@cslconstruction.co.uk
For the purposes of data protection law, CS Lewis Construction Limited is the Data Controller in relation to personal data processed through its business operations and website.
Our Commitment
CSL Construction is committed to:
- Processing personal data lawfully, fairly and transparently
- Collecting only the information necessary for legitimate business purposes
- Keeping data accurate and up to date
- Protecting personal data from unauthorised access, misuse, loss or disclosure
- Retaining personal data only as long as necessary
- Respecting the rights of individuals under UK GDPR
- Working with trusted third-party providers responsibly
The Types of Data We May Process
Depending on the nature of our relationship, this may include:
Customer & Enquiry Data
Such as:
- Name
- Email address
- Telephone number
- Address
- Project details
- Property information
- Garden room or construction requirements
- Quote requests
- Communication history
Website Usage Data
Through our website and digital systems:
- IP address
- Device/browser information
- Approximate location data
- Website interactions
- Referral source
- Form submissions
- Cookie preferences
Supplier/Contractor Information
Where applicable:
- Business contact details
- Payment information
- Service records
- Project-related communications
Staff/Recruitment Data
Where Relevant:
- Contact details
- Employment records
- Right to work documentation
- Payroll data
- Role-related information
(This applies only where CSL has employees or engages recruitment processes.)
Lawful Basis for Processing
We process personal data under lawful grounds including:
Legitimate Interests
To operate our business efficiently, communicate with customers, provide quotations, manage projects and improve services.
Contractual Necessity
Where processing is necessary to provide services, prepare quotations or fulfil agreed contractual obligations.
Legal Obligation
Where we are required to process or retain information for legal, tax, accounting or regulatory purposes.
Consent
Where consent is specifically required, such as certain marketing communications or non-essential cookies.
How Data is Used
Personal data may be used to:
- Respond to enquiries
- Prepare estimates or quotations
- Discuss project requirements
- Deliver contracted services
- Manage communications
- Improve website performance
- Monitor usage trends
- Prevent spam or malicious activity
- Meet legal obligations
- Maintain internal records
Data Sharing
We do not sell personal data.
Information may be shared where reasonably necessary with trusted service providers, including:
- Website hosting providers
- Analytics providers
- Spam protection providers
- IT support providers
- Payment/accounting providers
- Legal or regulatory authorities where required
All third parties are expected to handle data appropriately and securely.
International Transfers
Some third-party systems used by CSL may process data outside the United Kingdom.
Where this occurs, appropriate safeguards are relied upon to ensure personal data remains protected in accordance with UK GDPR requirements.
Data Security
We take reasonable technical and organisational measures to protect personal information.
This may include:
- Secure hosting
- Access controls
- Password protection
- Software updates
- Spam/security protection
- Restricted access where appropriate
No digital system can be guaranteed completely secure, but reasonable efforts are made to maintain protection.
Data Retention
Personal data is retained only for as long as necessary.
Retention periods may vary depending on:
- Enquiry status
- Active projects
- Legal obligations
- Financial record keeping requirements
- Legitimate business needs
Where data is no longer required, it will be securely deleted or anonymised.
Individual Rights
Under UK GDPR, individuals may have rights including:
- Right of access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to object
- Right to data portability
- Right to withdraw consent (where consent applies)
Requests can be made by contacting:
info@cslconstruction.co.uk
We will respond within the legally required timeframe
Data Breach Procedure
If CSL becomes aware of a personal data breach that may risk the rights or freedoms of individuals, appropriate action will be taken promptly.
This may include:
- investigating the incident
- containing the issue
- notifying affected parties where required
- reporting to the Information Commissioner’s Office (ICO) where legally necessary
Staff Responsibilities
Where staff, contractors or authorised users have access to personal data, they are expected to:
- handle data responsibly
- maintain confidentiality
- use data only for legitimate business purposes
- avoid unauthorised disclosure
- report concerns promptly
Website Data
Website-specific handling of personal data, cookies, analytics and tracking technologies is covered further within our:
- Privacy Policy
- Cookie Policy
Complaints
If you have concerns about how your data has been handled, please contact us first so we can attempt to resolve the issue.
You also have the right to contact:
Information Commissioner’s Office (ICO)
https://www.ico.org.uk
Policy Updates
This policy may be updated from time to time to reflect operational, legal or technical changes.
The latest version will always be published on this website.
Contact
CSL Construction
Trading name of CS Lewis Construction Limited
info@cslconstruction.co.uk