PRIVACY POLICY

Last Updated: August 19, 2025

This Privacy Policy describes how Sandara.co.uk ("we," "us," or "our") collects, uses, and shares your personal information when you visit our website, sandara.co.uk, and interact with our services, including when you submit your data through Facebook and Instagram Instant Forms.

We are committed to protecting your privacy and handling your data transparently and securely, in compliance with the UK General Data Protection Regulation (UK GDPR) and other applicable data protection laws.

1. Who We Are

Sandara.co.uk is operated by SANDARA LTD, a company registered in England and Wales. We specialize in designing and building high-quality pool houses, bespoke garden rooms, functional annexes, home extensions, and loft conversions.

Our Contact Details:

SANDARA LTD [Your Company's Registered Address - as per GOV.UK, currently 18 Springdale Avenue, Broadstone, England, BH18 9EU] [Your Email Address - e.g., info@sandara.co.uk] [Your Phone Number - e.g., 01202 123456]

2. Information We Collect

We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our services, when you participate in activities on the website or our social media channels, or otherwise when you contact us.

The types of personal information we may collect include:

  • Contact Data: Names, email addresses, phone numbers, postal addresses.

  • Project Interest Data: Information about your specific project requirements, preferences, and any other details you provide regarding the building services you are interested in.

  • Technical Data: When you visit our website, we may automatically collect certain information, such as your IP address, browser type, operating system, referring URLs, and pages viewed. This data is collected through cookies and similar tracking technologies (see Section 5 for more details).

3. How We Collect Your Information

We collect information through various methods, including:

  • Direct Interactions: You may provide us with your personal data directly when you:

    • Contact us via phone, email, or contact forms on our website.

    • Fill out and submit information through Facebook Instant Forms and Instagram Instant Forms that we use for lead generation and inquiries. This includes data points such as name, email, phone number, and any custom questions we ask related to your project interests.

  • Automated Technologies or Interactions: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies.

4. How We Use Your Information

We use the personal information we collect for the following purposes:

  • To Respond to Inquiries: To provide you with information about our services, respond to your questions, and fulfil your requests for quotes or consultations. This is our primary use of data collected via Instant Forms.

  • To Provide and Improve Our Services: To operate, maintain, and improve the functionality and user experience of our website and services.

  • For Marketing and Promotional Purposes: To send you marketing communications, newsletters, or promotional offers that may be of interest to you, based on your expressed preferences. We will only send you marketing communications if you have provided your explicit consent or if we have a legitimate interest to do so and you have not opted out.

  • For Internal Business Operations: To administer our business, including accounting, record-keeping, and general business management.

  • To Comply with Legal Obligations: To meet our legal and regulatory requirements.

Our Legal Basis for Processing Your Personal Data (UK GDPR):

We will only process your personal data when we have a lawful basis to do so. Our legal bases include:

  • Consent: Where you have given us clear consent for a specific purpose (e.g., for marketing communications when you submit an Instant Form). You have the right to withdraw your consent at any time.

  • Contractual Necessity: Where the processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract (e.g., to provide you with a quote for a building project).

  • Legitimate Interests: Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (e.g., to improve our services, for internal administrative purposes, or for fraud prevention).

  • Legal Obligation: Where we need to comply with a legal or regulatory obligation.

5. Cookies and Tracking Technologies

Our website uses "cookies" and similar tracking technologies to enhance your experience and collect information about your browsing activities. Cookies are small text files placed on your device.

  • How We Use Cookies: We use cookies for purposes such as:

    • Analyzing website traffic and usage patterns.

    • Remembering your preferences.

    • Facilitating the functionality of our website.

    • Integrating with third-party services, including analytics and advertising platforms like Facebook Pixel.

  • Facebook Pixel: We use the Facebook Pixel to understand your activity on our website, measure the effectiveness of our advertising campaigns, and to deliver more relevant ads to you on Facebook and Instagram. The Facebook Pixel may collect information such as your IP address, browser information, and the pages you visit on our website. This data is processed by Facebook in accordance with their privacy policy.

  • Your Choices Regarding Cookies: Most web browsers are set to accept cookies by default. You can choose to set your browser to remove or reject browser cookies. However, if you remove or reject cookies, this could affect the availability and functionality of our website. You can also manage your preferences for targeted advertising through the settings on Facebook and Instagram directly.

6. How We Share Your Information

We may share your personal information with the following categories of recipients:

  • Service Providers: We may share your data with third-party service providers who perform services on our behalf, such as IT and system administration services, customer support, marketing assistance, and data analysis. These providers are obligated to protect your data and only use it for the purposes we specify.

  • Professional Advisors: We may share your data with professional advisors suchers as lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services.

  • Facebook and Instagram (Meta Platforms, Inc.): When you submit data through Instant Forms, this data is collected by Meta Platforms, Inc. (Facebook and Instagram's parent company) and then shared with us. Meta's use of your data is governed by their own privacy policies. We are joint controllers with Meta for certain processing activities related to the Instant Forms.

  • Law Enforcement and Legal Compliance: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

  • Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity.

We will not sell, rent, or lease your personal information to third parties.

7. International Data Transfers

As we use services like Facebook and Instagram, your personal data may be transferred to, and stored at, a destination outside the European Economic Area (EEA) and the UK. Where such transfers occur, we will ensure that appropriate safeguards are in place to protect your personal data, such as standard contractual clauses approved by the European Commission or the UK Information Commissioner's Office, or by relying on adequacy decisions.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, accidental loss, disclosure, alteration, or destruction. However, no internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security of your data.

9. Data Retention

We will retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

10. Your Data Protection Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • The right to be informed: To know how your data is being used.

  • The right of access: To request a copy of the information we hold about you.

  • The right to rectification: To request that we correct inaccurate or incomplete data.

  • The right to erasure ("right to be forgotten"): To request that we delete your personal data in certain circumstances.

  • The right to restrict processing: To request that we limit the way we use your personal data in certain circumstances.

  • The right to data portability: To request that we transfer your data to another organization or directly to you, in a structured, commonly used, machine-readable format.

  • The right to object: To object to the processing of your personal data in certain circumstances, particularly when we are relying on legitimate interests or for direct marketing.

  • Rights in relation to automated decision-making and profiling: The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

To exercise any of these rights, please contact us using the details provided in Section 1. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights).

11. Right to Lodge a Complaint

If you have concerns about our processing of your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.

Information Commissioner's Office: Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF Helpline number: 0303 123 1113 ICO website: www.ico.org.uk

We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post any changes on this page and update the "Last Updated" date at the top of this policy. We encourage you to review this Privacy Policy periodically.