England & Scotland Glasgow · Aberdeen · Fareham

Privacy Policy

How we handle personal data collected through this website.

Last updated: 15 July 2026.

Who we are

PKBC Ltd is the data controller for the personal data described in this policy. You can reach us at:

We have a Data Protection Officer who oversees how we handle personal data. To reach them about anything in this policy, including any of the rights set out below, write to the address above or email info@pkbc.co.uk.

What this policy covers

This policy covers personal data we collect through this website. Where we handle personal data outside the website, we provide a separate notice directly to the people concerned.

The enquiry form

The form on our contact page asks for:

  • Your name and email address — required, so we can identify who is asking and reply.
  • Your company and phone number — optional.
  • Project details — whatever you choose to tell us about the work. Please do not include sensitive personal information here; it is a business enquiry field.

When you submit the form, we email its contents to our own inbox, together with the page you submitted it from. That is the whole of it — this website has no database and stores nothing about you. Your enquiry lives in our email inbox, where we treat it like any other business correspondence.

We rely on our legitimate interests to handle enquiries: you have asked us to get in touch about a project, and replying is what you are expecting us to do with the information. If your enquiry turns into a tender or a contract, we also handle your details in order to take steps at your request before entering into that contract.

You do not have to use the form. You can email info@pkbc.co.uk or call us instead.

Spam protection

The enquiry form is protected by Cloudflare Turnstile, which checks that a submission comes from a person rather than a bot. To make that check, your IP address and the Turnstile token from your browser are sent to Cloudflare. We rely on our legitimate interests in keeping the form usable and free of automated abuse. Cloudflare states that Turnstile is not used to track individuals across sites or to build advertising profiles.

Hosting

This site is hosted on Cloudflare Pages. As with any web host, Cloudflare processes the requests your browser makes — including your IP address — to serve the pages to you and to protect the site against attack and abuse.

The projects map

Our projects map draws its map tiles from OpenStreetMap. If you open that page, your browser requests those tiles directly from the OpenStreetMap Foundation, which means your IP address is visible to them. No other page on this site loads them. OpenStreetMap publishes its own privacy policy.

WhatsApp

The WhatsApp button on our contact page opens a conversation with us in WhatsApp, which is operated by Meta. Once you are there, WhatsApp's own privacy policy applies to that conversation rather than this one.

Cookies, analytics and tracking

This site sets no cookies of its own, runs no analytics, and carries no advertising or social media tracking. We do not profile you and we make no automated decisions about you. The fonts are served from this site rather than from a font network. Cloudflare may set cookies that are strictly necessary for security and for the Turnstile check on the contact page.

Who we share your data with

We do not sell your personal data, and we do not share it for marketing. Enquiries reach us through a small number of service providers who act on our instructions:

  • Cloudflare — hosting, and the Turnstile check on the enquiry form.
  • Resend — delivers the enquiry form's contents to our inbox as an email.
  • Microsoft — our email, which is where enquiries arrive and are kept.

Beyond that, we may disclose personal data where we are required to by law, or where it is necessary to establish, exercise or defend legal claims.

Where your data is processed

Some of the providers above are based in the United States and may process personal data outside the United Kingdom. Where that happens, the transfer is covered by the safeguards UK data protection law requires for international transfers, such as the UK's International Data Transfer Agreement or the addendum to the European Commission's standard contractual clauses.

How long we keep it

We keep enquiries for as long as we are dealing with them, and for as long as any resulting business relationship or legal obligation requires. We review correspondence periodically and delete what we no longer need. If you would like us to delete your enquiry sooner, email info@pkbc.co.uk and we will do so, unless we are required to keep it.

Your rights

Under UK data protection law you have the right to:

  • ask what personal data we hold about you, and get a copy of it;
  • have inaccurate or incomplete data corrected;
  • have your data erased;
  • restrict how we use your data, in certain circumstances;
  • object to our use of your data where we rely on legitimate interests — including everything described in this policy;
  • receive your data in a portable form, in certain circumstances.

To exercise any of these, email info@pkbc.co.uk or write to the address at the top of this page. We will respond within one month. There is no charge, though we may charge a reasonable fee for further copies of data we have already provided, or for requests that are manifestly unfounded or excessive.

Complaints

If you are unhappy with how we have handled your personal data, tell us first — email info@pkbc.co.uk and we will review it internally.

You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk/concerns. You do not have to come to us first, but we would like the chance to put things right.

Changes to this policy

If we change how this website handles personal data, we will update this page and the date at the top of it.