Privacy Policy

1. Introduction

Hearthstone Builds ("we", "our", "us"), operated by Karun Koirala, is committed to protecting and respecting your privacy. This comprehensive Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://hearthstonebuilds.co.uk (the "Site") and when you engage our residential construction and space-improvement services.

We are a UK-based residential construction business specialising in garage transformations, utility room improvements, and internal space optimisations. We act as a Data Controller in respect of the personal data we process about our customers and site visitors.

2. Information We Collect

We collect information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, with a particular consumer or household ("personal information").

A. Information You Provide to Us

We collect information you provide directly to us when you fill out an enquiry form, request a written proposal, or communicate with Karun Koirala. This includes:

• Contact Details: Name, email address, phone number, and postal address.
• Project Information: Property type, specific space-improvement interests (e.g., garage conversion), room dimensions, and property layout details provided during consultations.
• Financial Information: Payment details used for our construction services. Please note that payments are processed through Stripe; we do not store full credit card numbers on our systems.
• Correspondence: Any records of communication between you and Hearthstone Builds.

B. Information Collected Automatically

When you visit our Site, we automatically collect certain technical information, including:

• IP address, browser type and version, time zone setting, and operating system.
• Information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from our site, and page response times.

3. How We Use Your Information

We process your personal information for several legitimate business purposes, including:

• Providing Services: To deliver the residential construction and space-improvement services you have requested.
• Quotations and Proposals: To prepare and deliver written proposals and defined project specifications.
• Communication: To respond to your enquiries, provide project updates, and manage the completion review process.
• Payments: To process one-time payments for project-based services via Stripe.
• Legal Compliance: To comply with UK building regulations, health and safety requirements, and financial reporting obligations.

4. Data Retention

We retain project-related personal information for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or insurance requirements. For construction projects, we typically maintain records for a minimum of six years following the completion review to align with UK statutory limitation periods.

5. Sharing Your Information

We do not sell your personal information. We only share information with third parties in the following circumstances:

• Service Providers: We use trusted third-party providers, such as Stripe for payment processing and hosting providers for our website.
• Subcontractors: If specific elements of your project require specialised trades, we may share necessary site address and project scope details with vetted subcontractors.
• Legal Requirements: If required by law, we may disclose information to regulatory authorities or law enforcement.

6. Cookies

Our website uses cookies to distinguish you from other users and provide a functional browsing experience. For detailed information on the cookies we use and the purposes for which we use them, please see our Cookie Policy.

7. Stripe Payments and Security

All financial transactions are handled through our payment services provider, Stripe. We recommend reviewing their privacy policy at stripe.com. We implement robust technical and organisational measures to ensure a level of security appropriate to the risk of processing personal data.

8. Your Rights under UK GDPR

As a UK resident, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the information we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete data.
• Right to Erasure: You can request that we delete your data in certain circumstances.
• Right to Restrict Processing: You can ask us to limit how we use your data.
• Right to Data Portability: You can request your data in a machine-readable format.

To exercise any of these rights, please contact us at hearthstonebuildss@gmail.com.

9. Data Security Practices

We take the security of your data seriously. We use industry-standard encryption for data in transit and ensure that access to project documentation is strictly limited to Karun Koirala and authorised personnel. While no method of transmission over the Internet is 100% secure, we strive to use commercially acceptable means to protect your personal information.

10. International Transfers

Your information may be processed in the United Kingdom or other countries where our service providers operate. We ensure that any international transfers comply with relevant data protection laws and that adequate safeguards are in place.

11. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

13. Contact Information

For questions or concerns regarding this Privacy Policy or our data practices, please contact:

Karun Koirala
Hearthstone Builds
Email: hearthstonebuildss@gmail.com