Last updated: 1 January 2026

How Stonebridge Builds collects, uses and protects your personal information, written in plain English and aligned with UK GDPR.

1. Introduction

This Privacy Policy describes how Stonebridge Builds, operated by Sabina Kaliraj as an independent sole trader (referred to in this policy as “I”, “me” or “my”), collects, uses, stores and protects personal information provided by visitors to this website and by customers engaging my residential improvement services. This policy is written in plain English and is designed to satisfy my obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The website covered by this policy is stonebridgebuilds.co.uk. Where this policy refers to “the website” it means that domain and any sub-pages served from it. By using the website or by submitting an enquiry, you confirm that you have read and understood this policy.

2. Who I Am And How To Contact Me

The data controller for the purposes of UK GDPR is Sabina Kaliraj, trading as Stonebridge Builds, an independent sole trader based at East Ham, London, E6 1JL, United Kingdom. You can contact me about any data protection matter by emailing info@stonebridgebuilds.co.uk. I aim to respond to data protection enquiries within five business days.

3. What Information I Collect

I collect personal information that you give me directly, and a limited set of technical information that is collected automatically when you visit the website. Specifically:

Contact form submissions. Name, email address, telephone number, project type and the content of the message you send me.
Direct enquiries. Any information you choose to provide when you contact me by email or telephone, including details about your property and the project you have in mind.
Payment information. When you book a service, payment is processed by Stripe. I do not collect or store payment card details. I receive a confirmation of payment and the name and email address associated with the transaction.
Technical information. When you visit the website, the hosting infrastructure may record your IP address, browser type, device type, referring page and the pages you visit, for the purposes of operating the website, preventing abuse and producing aggregated analytics.
Cookies. The website uses a limited set of cookies as described in the Cookie Policy.

4. Why I Use Your Information And Lawful Basis

I use the personal information I collect for specific, defined purposes. The lawful basis for each use is set out below.

Responding to enquiries. When you submit the contact form or email me, I use the information to respond to your enquiry and to discuss any potential project. The lawful basis is your consent and, where you become a customer, the performance of a contract.
Delivering services. When you engage me to deliver a project, I use your contact details, property information and project information to plan, schedule, deliver and complete the work. The lawful basis is the performance of a contract.
Issuing quotations and invoices. I use your contact and project information to issue written project plans, quotations and invoices. The lawful basis is the performance of a contract.
Legal and tax records. I retain records of services delivered, invoices issued and payments received as required by UK tax and accounting law. The lawful basis is compliance with a legal obligation.
Operating the website. Technical information is used to operate the website securely. The lawful basis is my legitimate interest in providing a functioning website.

5. How I Share Information

I do not sell personal information. I share personal information only with specific third parties that are necessary to operate the business, and only to the extent required for the purpose set out below.

Stripe — payment processing for online service bookings.
Email service provider — for sending and receiving correspondence with you.
Website hosting provider — for serving the website.
Accountant or bookkeeper — where engaged, to maintain accurate financial records.
Regulators, courts and law enforcement — where required by law.

I do not transfer personal information outside the United Kingdom unless the provider concerned operates under recognised safeguards under UK GDPR.

6. How Long I Keep Your Information

I keep personal information only for as long as I need it. Specifically: contact form submissions from non-customers are retained for up to 24 months; customer records relating to delivered projects are retained for at least six years from the end of the relevant tax year, in line with HMRC requirements; payment records held by Stripe are retained according to Stripe’s own retention policies.

7. Cookies And Analytics

The website uses cookies and similar technologies as described in the Cookie Policy. Where the website uses analytics, the data is collected in an aggregated form and is used to understand how the website is being used so that it can be improved. The Cookie Policy sets out how to manage or refuse cookies.

8. Your Rights

Under UK GDPR you have the following rights in relation to your personal information:

The right to be informed about how your information is used (this policy).
The right of access to the personal information I hold about you.
The right to have inaccurate information corrected.
The right to have your information erased in certain circumstances.
The right to restrict the use of your information in certain circumstances.
The right to data portability in certain circumstances.
The right to object to the use of your information based on legitimate interests.
Rights relating to automated decision-making, although I do not carry out any automated decision-making.
The right to withdraw consent at any time, where my use of your information is based on consent.

To exercise any of these rights, please email me at info@stonebridgebuilds.co.uk. I aim to respond within one month.

9. Data Security

I take the security of personal information seriously. The website is served over HTTPS. Email correspondence is held in reputable, access-controlled email services. Payment information is handled by Stripe under their own security standards. Paper records, where created, are kept in a secure location. I limit access to personal information to those who genuinely need it to deliver the service or to meet a legal obligation.

Despite the measures taken, no system is perfectly secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, I will notify the Information Commissioner’s Office within 72 hours and, where required, notify affected individuals.

10. Children

The website and the services described on it are intended for adults. I do not knowingly collect personal information from children.

11. Marketing

I do not currently operate a marketing mailing list. If that changes, opt-in consent will be requested separately and you will be able to withdraw consent at any time.

12. Complaints

If you have a concern about how I have used your personal information, please contact me first so I have the opportunity to address it. You also have the right to lodge a complaint with the Information Commissioner’s Office at ico.org.uk.

13. Changes To This Policy

I may update this Privacy Policy from time to time to reflect changes in the law or in how I operate. The “Last updated” date at the top of this page indicates when the policy was last revised. Material changes will be highlighted on the website.

14. Contact

If you have any questions about this Privacy Policy or how I handle your personal information, please email info@stonebridgebuilds.co.uk.