Privacy Policy

We may collect the following categories of personal data:

• Identity data — your full name.
• Contact data — email address, phone number and postal address.
• Project data — details about your construction enquiry or project.
• Technical data — IP address, browser type, operating system and pages visited (via analytics).
• Communications data — the content of messages or emails you send to us.

We collect data through:

• Enquiry forms and emails submitted via this website.
• Telephone or in-person communications.
• Automated technologies such as cookies and server logs when you browse the Site.

We process your personal data on the following legal bases and for the following purposes:

• Contract / pre-contractual steps — to respond to enquiries, prepare quotations and manage ongoing construction projects.
• Legitimate interests — to improve our Site and services, and to protect against fraud.
• Legal obligation — to comply with applicable laws and regulations, including tax and accounting requirements.

We retain personal data only as long as necessary for the purposes set out in this Policy or as required by law:

• Enquiries that do not progress to a contract: up to 12 months.
• Client and contract records: up to 7 years after project completion (for tax and legal compliance).
• Analytics data: aggregated and anonymised; retained indefinitely.

We do not sell your personal data. We may share data with trusted third parties where necessary, including:

• IT and cloud hosting providers (e.g. Vercel, Inc.) who process data on our behalf under data processing agreements.
• Professional advisers such as accountants or solicitors where required.
• Regulatory bodies or law enforcement where required by law.

All third parties are required to handle your data securely and in accordance with applicable data protection law.

Some of our service providers (e.g. cloud hosting) may operate outside the UK or European Economic Area. Where such transfers occur we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO).

Under the UK GDPR and the Data Protection Act 2018, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request erasure of your data (the "right to be forgotten").
• Object to or restrict our processing of your data.
• Request portability of your data in a structured, machine-readable format.
• Withdraw consent at any time where processing is consent-based.

To exercise any of these rights, contact us at admin@npkb.co.uk. We will respond within one calendar month. You also have the right to lodge a complaint with the ICO at ico.org.uk.

We use cookies and similar technologies on our Site. For full details please read our Cookie Policy.

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or destruction. All data is transmitted over HTTPS. However, no internet transmission is completely secure, and we cannot guarantee the absolute security of data sent to us electronically.

We may update this Policy from time to time. The revised date will always be shown at the top. Material changes will be highlighted where reasonably practicable.