Privacy policy

Who we are

K.W Brickwork Contractors Ltd ("KW Brickwork", "we", "us") is the controller of the personal data described in this policy. We are a company registered in England and Wales, company number 17409872. Our registered office address, which is used for company post and is not a place of business, is shown at the foot of every page of this website. We are based in Welshpool, Powys.

For any question about your personal data, or to exercise your rights, contact Kris Williams by phone or WhatsApp on 07974 608629, or write to us at our registered office.

What we collect and why

Enquiries through the enquiry form

When you use the enquiry form, we collect the details you enter: your name, phone number, company (optional), your role, the job type, the site town or postcode, the project size, the target start date, the details of the job, and your consent to this policy. We also record the date and time you consented, a one-way scrambled (hashed) version of your IP address, and your browser's user agent. We use these to prevent spam and abuse and to apply a limit on how many enquiries can be sent.

We use your enquiry to respond to you, prepare a quote and discuss the work. Our lawful basis is taking steps at your request before entering into a contract (UK GDPR Article 6(1)(b)). For keeping a copy of the enquiry and for spam prevention, we rely on our legitimate interests (Article 6(1)(f)) in not losing enquiries and in keeping the form secure.

Stored enquiries: 12 months, then deleted

We save a copy of each enquiry in our website's database so that no enquiry is lost if WhatsApp doesn't open on your device. Only we can see it, through a password-protected admin area. Stored enquiries are deleted automatically 12 months after they are submitted. If the enquiry leads to work, we keep the information we need for that work, such as quotes, invoices and correspondence, for as long as we need it for the contract and our legal and accounting obligations.

WhatsApp

After you submit the form, your browser opens WhatsApp with your enquiry written out as a message to Kris. Nothing is sent to us through WhatsApp until you press send. Once you send it, or if you message or call us on WhatsApp directly, the message is carried and processed by WhatsApp, which is part of Meta, under WhatsApp's own terms and privacy policy. We don't control how WhatsApp processes data. Please read WhatsApp's privacy policy if you have concerns. We use WhatsApp messages only to deal with your enquiry and any resulting work, and delete them when they are no longer needed.

Phone calls

If you call us, we'll see your phone number and may keep it, and notes of the call, to deal with your enquiry.

Website analytics

We use a cookie-free analytics service to count visits and see which pages are used. It does not set cookies or build a profile of you across other websites, and we only see aggregated figures. Our lawful basis is our legitimate interest in understanding how the website is used.

Hosting and security

The website is hosted by a hosting provider and delivered through Cloudflare, which provides content delivery and security. These providers process technical information, such as IP addresses and request details, to deliver the site and protect it from attacks. They act as our processors or under their own terms, as applicable.

Cookies

Most pages of this website set no cookies. The enquiry form page sets two cookies that are strictly necessary for the form to work securely: a session cookie, and a security cookie (XSRF-TOKEN) that protects the form against cross-site request forgery. The private admin area uses a session cookie when an administrator logs in. We don't use advertising, tracking or other non-essential cookies. The home page stores one small setting in your browser's local storage, kw-intro-seen, so that the short logo introduction only plays on your first visit. It holds no personal information, isn't sent to us, and you can clear it at any time through your browser settings. Because the cookies are strictly necessary, the law doesn't require us to ask for consent, so you won't see a cookie banner. If that changes, we'll update this policy and ask for your consent where it's required.

Who we share data with

We don't sell your personal data or use it for marketing lists. We share it only with the service providers described above (hosting, Cloudflare and our analytics provider), with WhatsApp when you choose to send a message, and where the law requires it. Some of these providers may process data outside the UK. Where they do, we rely on the safeguards the law requires, such as adequacy regulations or standard contractual clauses.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of your personal data
• ask us to correct inaccurate data
• ask us to delete your data
• ask us to restrict how we use it
• object to our use of it where we rely on legitimate interests
• ask for data you gave us to be transferred to you or another organisation, where that applies

To use any of these rights, contact us as set out above. We'll respond within one month.

Complaints

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk.

Changes to this policy

We'll update this policy if the way we handle personal data changes. This version was last updated on 25 September 2026.