Privacy Policy

1. Who We Are

This website is operated by Trojan Access Ltd ("we", "us", "our"), a company registered in England and Wales.

For any privacy-related queries, please contact us at: faye@trojanaccess.co.uk

2. What Personal Data We Collect and Why

We collect personal data only when you choose to contact us through our website contact form. The data we collect includes:

• Name — so we can address you correctly in our response.
• Email address — so we can reply to your enquiry.
• Message content — to understand and respond to your enquiry.

Lawful basis: We process this data under Article 6(1)(f) UK GDPR — Legitimate interests, specifically our legitimate interest in responding to business enquiries. If you request a quote or service, the lawful basis is Article 6(1)(b) — performance of a contract.

3. How We Use Your Data

We use your personal data solely to:

• Respond to enquiries submitted via our contact form.
• Provide you with quotes or information about our scaffolding services.

We do not use your data for marketing without your explicit consent.

4. How Long We Retain Your Data

Contact form enquiries are retained for up to 12 months from the date of receipt, after which they are securely deleted. If an enquiry leads to a commercial relationship, data may be retained for up to 7 years to comply with legal and accounting obligations.

5. Third-Party Data Processors

Your data may be processed by the following third parties:

• Google Analytics (Google LLC) — we use Google Analytics 4 to collect anonymous information about how visitors use our website (pages visited, time on site, general location by region). This data is only collected after you give your consent via our cookie banner. Google may transfer data outside the UK/EEA; Google LLC participates in the EU-US Data Privacy Framework. See Google's Privacy Policy.
• Email service provider (SMTP) — used to deliver contact form submissions to our inbox. Data is transmitted securely over HTTPS/TLS.
• Hosting provider — our website and its server infrastructure is provided by a third-party host. Data is stored on servers located within the UK/EEA.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

6. Cookies

Our website uses cookies. Please see our Cookie Policy for full details of the cookies we use, their purpose, and how to manage your preferences.

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access — you may request a copy of the data we hold about you.
• Right to rectification — you may request that inaccurate data is corrected.
• Right to erasure — you may request that we delete your personal data.
• Right to restrict processing — you may request that we limit how we use your data.
• Right to data portability — you may request your data in a machine-readable format.
• Right to object — you may object to processing based on legitimate interests.

To exercise any of these rights, please contact us at faye@trojanaccess.co.uk. We will respond within 30 days.

8. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated revision date. We encourage you to review this page periodically.