This Privacy Policy explains how HBC Timberframe ("we", "us", "our") collects, uses, and protects your personal data when you visit our website or contact us. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and applicable Irish data protection law.
1. Who We Are
HBC Timberframe Ltd. is the data controller responsible for your personal data.
2. What Data We Collect
We only collect personal data that you voluntarily provide to us. This may include:
- Your name
- Email address
- Phone number (if provided)
- Details about your project or enquiry
- Enquiry type (residential or commercial)
We do not collect any special category data, and we do not use automated decision-making or profiling.
3. How We Use Your Data
We use the information you provide solely to:
- Respond to your enquiry or request for information
- Provide quotations or project proposals
- Communicate with you regarding your build project
Our lawful basis for processing is legitimate interests (responding to business enquiries) and, where applicable, contract performance.
4. Data Sharing
We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share data with trusted service providers (such as email hosting) strictly as needed to operate our business, and only where appropriate data processing agreements are in place.
5. Data Retention
We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Enquiry data is typically retained for up to 3 years unless you request earlier deletion or we enter into a longer-term business relationship.
6. Your Rights
Under GDPR, you have the right to:
- Access — request a copy of the data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your personal data
- Restriction — request we limit how we use your data
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interests
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
7. Security
We take reasonable technical and organisational measures to protect your personal data against loss, misuse, or unauthorised access. Our website is served over HTTPS.
8. Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Data Protection Commission (DPC) Ireland at www.dataprotection.ie.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The current version will always be available on this page. Material changes will be communicated where appropriate.