Privacy Policy

Who we are

Stones & Co Construction Ltd (“we”, “us”) is a property maintenance company registered in England and Wales (Company No. 14467861, VAT No. 430107354), Unit 7 Oris Studios, 26 Grosvenor Way, London E5 9UQ. We are the data controller for the personal information described in this policy. Contact us about your data at [email protected] or 020 4569 0296.

What we collect

• Contact and booking details — your name, phone number, email address, property address and details of the work you ask us to do.
• Customer portal account — login credentials (passwords are stored securely hashed, never in plain text), your jobs, documents, e-signatures and signing records (including date, time and device information used to sign).
• Communications — emails, WhatsApp messages, SMS and call notes exchanged with us, so we have an accurate record of your job.
• Payment information — invoice and payment records. Card payments are processed by our payment providers; we never see or store full card numbers.
• Website data — basic technical data needed to serve the site securely. We do not run advertising trackers.

Why we use it

• To perform our contract with you — quoting, booking, carrying out and guaranteeing work, taking payment and providing your documents.
• Legal obligations — tax and accounting records, gas/electrical safety certification, and consumer-law records such as signed work orders.
• Legitimate interests — responding to enquiries, keeping job history so we can honour guarantees, protecting our systems, and asking for feedback or reviews after a job.

WhatsApp, email and SMS

If you contact us on WhatsApp, messages are delivered through the WhatsApp Business Platform operated by Meta Platforms Ireland Ltd, and message content is stored in our customer system so our team can help you. WhatsApp’s own privacy policy also applies to your use of WhatsApp. Emails are sent through our email delivery provider. We only message you about your enquiry or job; we will not send marketing without your consent, and you can ask us to stop at any time.

Who we share it with

We never sell your data. We share it only with service providers who help us run the business — secure cloud hosting and database services, email delivery, WhatsApp messaging (Meta), payment processing, and our accountants — and with engineers assigned to your job (name, address and job details only). Some providers process data outside the UK; where they do, transfers are protected by UK-approved safeguards such as the UK International Data Transfer Agreement or adequacy regulations.

How long we keep it

• Job records, signed documents and invoices — 6 years (legal, tax and guarantee obligations).
• Portal accounts — while your account is active, then deleted or anonymised on request.
• General enquiries that don’t become jobs — up to 12 months.

Your rights

Under UK GDPR you can ask us for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable format. Email [email protected] and we’ll respond within one month. If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

Our website uses only the cookies and local storage needed to make it work — such as keeping customers securely logged in to the portal. We don’t use advertising or cross-site tracking cookies.

Changes to this policy

We’ll update this page when our practices change and revise the date at the top. Significant changes will be flagged to portal account holders directly.