Privacy Policy

Last updated: August 2026

Trace Heritage & Restoration is committed to protecting your privacy and handling your personal information responsibly and transparently.

This privacy policy explains what information we collect, why we collect it, how we use it, who we may share it with and the rights you have in relation to your personal data.

We process personal information in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Data (Use and Access) Act 2025.

We may update this policy from time to time. Any changes will be published on this page with an updated revision date.

What information we collect

Depending on how you interact with us, we may collect information including:

  • your name
  • company or organisation
  • postal or project address
  • email address
  • telephone number
  • details about your property, project or enquiry
  • information you submit through website forms
  • correspondence between you and Trace Heritage & Restoration
  • information relating to quotations, projects, contracts and invoices
  • IP address and basic technical information about the device or browser used to access our website
  • information about how you use our website, where permitted by your cookie preferences
  • marketing preferences

We may also receive information about you from third parties, for example a contractor, architect, consultant, property manager or another organisation involved in a project.

We do not intentionally request special category personal data through our website. If you voluntarily provide this type of information, or if it becomes necessary in relation to a project, we will only process it where we have a valid lawful basis to do so.

How we use your information

We may use your personal information to:

  • respond to enquiries and requests for information
  • arrange surveys, site visits and consultations
  • prepare quotations and proposals
  • manage projects and contracts
  • communicate with clients, contractors, consultants and project stakeholders
  • provide our services
  • maintain financial and business records
  • fulfil legal, regulatory, tax and insurance obligations
  • manage and improve our website and services
  • protect our website, systems and business from fraud, misuse, spam and security threats
  • understand how people use our website
  • send relevant marketing communications where we are permitted to do so
  • manage customer relationships and previous project enquiries

Our lawful bases for using personal information

Under UK data protection law, we must have a lawful basis for processing your personal information.

Depending on the circumstances, we may rely on:

Contract
Where processing is necessary to take steps at your request before entering into a contract, or to perform a contract with you.

Legitimate interests
Where processing is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. This may include responding to business enquiries, managing customer relationships, improving our services, maintaining website security and administering our business.

Legal obligation
Where we need to process information to comply with a legal or regulatory requirement.

Consent
Where you have specifically agreed to a particular use of your information, such as certain marketing activities or non-essential cookies. You can withdraw consent at any time.

Marketing communications

We may occasionally send information about Trace Heritage & Restoration services, projects, news or other information that we believe may be relevant to you where we have an appropriate lawful basis to do so.

Where consent is required, we will ask for it before sending marketing communications.

You can stop receiving marketing communications at any time by using the unsubscribe link included in our emails or by contacting us directly.

We do not sell your personal information to third parties.

Sharing your information

We may share personal information with organisations that help us operate our business or deliver our services, including:

  • website hosting and technology providers
  • IT and security providers
  • email and communication platforms
  • analytics providers
  • professional advisers such as accountants, insurers and legal advisers
  • contractors, consultants or specialist suppliers involved in delivering a project
  • payment and financial service providers
  • public authorities or regulators where required by law

Where third parties process personal information on our behalf, we require them to handle that information appropriately and securely.

We will not sell, rent or trade your personal information.

How long we keep your information

We only keep personal information for as long as it is reasonably necessary for the purpose for which it was collected.

Retention periods may vary depending on whether the information relates to:

  • an initial enquiry
  • a quotation
  • an active or completed project
  • contractual or warranty obligations
  • accounting or taxation requirements
  • insurance requirements
  • legal claims
  • marketing preferences

We periodically review the information we hold and securely delete or anonymise information when it is no longer required.

Keeping your information secure

We take reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

Measures may include controlled access to systems, secure hosting, password protection, access permissions, backups and appropriate internal procedures.

However, no method of transmitting or storing information online can be guaranteed to be completely secure.

International transfers

Some of the technology and service providers we use may process or store information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer complies with UK data protection law.

This may include relying on:

  • UK adequacy regulations
  • the UK Extension to the EU-US Data Privacy Framework where applicable
  • approved contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum
  • another lawful transfer mechanism permitted under UK data protection law

Cookies and similar technologies

Our website may use cookies and similar technologies.

Cookies are small files stored on your device that can be used to remember preferences, provide website functionality, measure website usage and support marketing activities.

Some cookies are strictly necessary for the website to operate and do not require your consent.

Other cookies, including many analytics, advertising and marketing cookies, will only be used where you have given your consent.

Where applicable, our cookie consent tool allows you to accept, reject or manage non-essential cookies.

You can change your cookie preferences at any time using the cookie settings available on our website.

Website analytics

We may use analytics services such as Google Analytics to understand how visitors interact with our website.

Analytics information can help us understand matters such as:

  • which pages are visited
  • how visitors move through the website
  • which devices or browsers are being used
  • how visitors arrive at our website
  • how we can improve website content and usability

Where analytics cookies are not strictly necessary, they will only be activated after you have provided the appropriate consent.

Information collected by third-party analytics providers is also subject to their own privacy policies.

Social media and third-party services

Our website may contain links to, or content provided by, third-party services and social networks.

These third parties may collect information about you if you interact with their services.

We do not control how third-party websites or platforms process your personal information, and we recommend reviewing their privacy policies before providing personal information to them.

Links to other websites

Our website may contain links to websites operated by other organisations.

Once you leave our website, we are not responsible for the privacy, security or content of those websites.

You should review the privacy policy of any external website before providing personal information.

Your data protection rights

Depending on the circumstances, UK data protection law gives you rights including:

  • the right to be informed about how your information is used
  • the right of access to personal information we hold about you
  • the right to rectification if information is inaccurate or incomplete
  • the right to erasure in certain circumstances
  • the right to restrict processing in certain circumstances
  • the right to data portability where applicable
  • the right to object to certain processing, including direct marketing
  • rights relating to automated decision-making and profiling
  • the right to withdraw consent where processing is based on consent

These rights do not apply in every situation and some legal exemptions may apply.

If you would like to exercise any of these rights, please contact us using the details provided in this policy.

We may need to verify your identity before responding to a request.

Automated decision-making and profiling

We do not currently use personal information to make solely automated decisions about individuals that produce legal or similarly significant effects.

If this changes, we will update this privacy policy and provide appropriate information about the processing involved.

Complaints

If you have concerns about how we have used your personal information, please contact us first so that we can investigate the issue.

You also have the right to raise a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator.

Further information is available from the Information Commissioner's Office.

Reasonably possible and within any applicable statutory timeframe.

Who we are

Trace Heritage & Restoration provides specialist heritage restoration, conservation, remedial and building services.

For data protection purposes, the organisation responsible for your personal information is:

Email: enquiries@traceremedial.co.uk

Contact us

If you have questions about this privacy policy, the information we hold about you or how your personal information is used, please contact:

Trace Heritage & Restoration
Email: enquiries@traceremedial.co.uk

We will aim to respond to privacy enquiries and data protection requests as promptly as reasonably possible and within any applicable statutory timeframe.