Last Updated: 12/08/2026

HSAN Contracting Limited (“HSAN,” “we,” “us,” “our”) is committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains how we collect, use, store, share, and protect your personal data.

1. Data Controller

HSAN Contracting Limited is the data controller responsible for your personal data.

Company Name: HSAN Contracting Limited

Company Registration Number: 17119986

Registered Address: 45 Merefield Street, Rochdale OL11 3RH, UK

Email: info@hsan-cont.com

Phone: +44 (0) 7990412959

If we have appointed a Data Protection Officer or nominated contact, their details are: [Insert if applicable]

2. Personal Data We Collect

We collect and process the following categories of personal data:

Category -                   Examples

Identity Data -             Name, title

Contact Data -            Address, email, phone number

Project Data -             Kitchen design specifications, property details, project requirements

Financial Data -         Billing details, payment records (card data handled by our secure payment processor, not stored by us)

Technical Data -        IP address, browser type, device identifiers, cookies

Usage Data -              Website interaction data, pages visited, enquiry history

Marketing Data -       Preferences for receiving marketing communications

We do not knowingly collect special category data (e.g., health, religion) or data relating to children. If such data is inadvertently provided, we will delete it unless there is a lawful basis to retain it.

3. How We Collect Your Data

• Directly from you (enquiry forms, phone calls, emails, consultations, contracts)
• Automatically via cookies and analytics tools when you use our website
• From third parties, such as referral partners or publicly available sources (where lawful)

4. Lawful Basis for Processing

In accordance with Article 6 of UK GDPR, we rely on the following lawful bases:

• Performance of a contract – to deliver design, procurement, and installation services you’ve requested
• Legitimate interests – to run and improve our business, provided this does not override your rights (e.g., responding to enquiries, internal record-keeping)
• Legal obligation – to comply with tax, accounting, health & safety, and other regulatory requirements
• Consent – for marketing communications and non-essential cookies; you may withdraw consent at any time

5. How We Use Your Data

We use your personal data to:

• Provide quotations, consultations, and project management
• Source, procure, and deliver materials for your project
• Schedule and carry out installation services
• Process payments and maintain financial records
• Respond to enquiries and provide customer support
• Send service updates and, where consented, marketing communications
• Maintain the security and performance of our website
• Meet legal and regulatory obligations

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects on you.

6. Sharing Your Data

We may share your personal data with:

• Suppliers and manufacturers – to fulfill material orders
• Subcontracted installation teams – to carry out on-site work
• Payment processors – to handle transactions securely
• IT and software providers – who support our systems (e.g., CRM, email, hosting)
• Professional advisors – accountants, solicitors, insurers, where necessary
• Regulatory or law enforcement bodies – where legally required

All third parties are required to process your data securely and only for the specified purposes, in line with data protection law. We do not sell your personal data to third parties.

7. International Data Transfers

Where any of our service providers are based outside the UK, we ensure appropriate safeguards are in place, such as the UK’s International Data Transfer Agreement (IDTA) or adequacy regulations, to ensure your data receives an equivalent level of protection.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

• Project and contract records: 2 years from contract completion
• Financial records: As required under HMRC regulations (typically 6 years)
• Marketing data: Until you withdraw consent or request deletion

After these periods, data is securely deleted or anonymised.

9. Your Rights Under UK GDPR

You have the right to:

• Access – request a copy of the personal data we hold about you
• Rectification – request correction of inaccurate or incomplete data
• Erasure – request deletion of your data (“right to be forgotten”), where applicable
• Restrict processing – request that we limit how we use your data
• Data portability – request your data in a portable format
• Object – object to processing based on legitimate interests or direct marketing
• Withdraw consent – at any time, where processing is based on consent

To exercise any of these rights, contact us at [Insert Email]. We will respond within one month, as required by law.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Website: ico.org.uk

Helpline: 0303 123 1113

10. Cookies

Our website uses cookies and similar technologies to improve functionality, analyse traffic, and personalise content, in compliance with the Privacy and Electronic Communications Regulations (PECR). You can manage cookie preferences via our cookie banner or your browser settings. See our Cookie Policy for full details.

11. Data Security

We implement appropriate technical and organisational measures – including encryption, access controls, and secure storage – to protect your data against unauthorised access, alteration, disclosure, or destruction. In the event of a data breach likely to result in risk to your rights, we will notify the ICO and affected individuals as required under UK GDPR.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The “last updated” date at the top of this page will indicate the most recent revision.

13. Contact Us

For any questions about this Privacy Policy or our data practices, contact us:

Company: HSAN Contracting Limited

Email: info@hsan-cont.com

Phone: +44 (0) 7990412959

Address: 45 Merefield Street, Rochdale OL11 3RH, UK

Note: This is a general template aligned with UK GDPR / DPA 2018 principles. Please have this document reviewed by a solicitor or data protection consultant before publishing, particularly the ICO registration status and data retention schedule.