Privacy Policy
Last updated: 15 April 2026
Who we are
Stoneley Scaffolding Limited (company number 14192317, incorporated in England & Wales) is the data controller for personal data collected through this website.
- Registered office: 23a The Precinct, London Road, Waterlooville, Hampshire, PO7 7DT
- Trading yard: 59 Sea Front, Hayling Island, PO11 0AN
- Email: chris@stoneleyscaffolding.co.uk
- Phone: 07925 869 437
What data we collect
When you contact us or request a quote
- Name
- Phone number
- Email address (optional)
- Site postcode and project details
- Preferred access dates
When you use our site-survey wizard
The quote wizard helps us scope a scaffold without visiting in person. When you use it we process:
- Property address you select (resolved via Google Places autocomplete)
- Coordinates (latitude / longitude) of the site
- Perimeter outline you draw on the satellite map
- Imagery of the property — we fetch a Google Street View snapshot of the address and store it against your enquiry
- Derived information — drive time and fuel cost from our yard, a short AI-generated hazard assessment based on the Street View image (e.g. "terraced, narrow pavement, setback from road"), and a pavement-licence flag
We use this to produce an accurate fixed-price quote. The property imagery is held against the enquiry record for as long as the enquiry is active and is deleted when the enquiry is closed or after 24 months (whichever is sooner).
When you use the AI support chat
The floating chat widget is powered by a large language model routed via Cloudflare AI Gateway. Messages you send are:
- Processed by Cloudflare (our infrastructure provider)
- Forwarded to a model provider (Google — Gemini family) to generate a reply
- Logged against your visitor IP and conversation so we can audit quality and detect abuse
Do not share sensitive personal data (health, financial details, government identifiers) in the chat. If your conversation results in an enquiry, the transcript is kept alongside the enquiry record.
Automatically collected
- IP address (for security, abuse detection, and rate limiting)
- Cookie consent preferences
- Pages visited and site interactions — only with analytics consent (see Cookie Policy)
- Referral data (which site linked you to us, UTM parameters)
How we use your data
| Purpose | Lawful basis (UK GDPR Art. 6) |
|---|---|
| Responding to enquiries and producing quotes | Legitimate interest (pre-contractual enquiry) |
| Fulfilling scaffolding contracts | Performance of a contract |
| Service-related communications (e.g. scheduling, invoices) | Performance of a contract |
| Website analytics | Consent |
| Measuring Meta / Facebook ad performance | Consent |
| Fraud / bot prevention on forms (reCAPTCHA) | Legitimate interest |
| Security logging and abuse detection | Legitimate interest |
| Team notifications on new leads (WhatsApp / email) | Legitimate interest |
Who we share data with
We use the following processors. All are bound by appropriate contractual and data-protection terms.
| Processor | Purpose | Data involved |
|---|---|---|
| Cloudflare | Website hosting, security, database (D1), AI Gateway routing | All request data, enquiry records, chat messages |
| Resend | Transactional email delivery (confirmations, team alerts) | Name, email address, enquiry summary |
| Google Analytics 4 | Website usage analytics (with consent) | Anonymised usage events, IP (truncated), consent-mode signals |
| Google reCAPTCHA Enterprise | Bot and spam protection on the contact form | IP, browser fingerprint, form interaction |
| Google Maps / Places / Street View | Address lookup and property imagery in the quote wizard | Search query, coordinates, fetched Street View image |
| Google Cloud — Vertex AI (Vision) | AI hazard assessment of your Street View snapshot | Street View image of the property address |
| Google / Cloudflare AI Gateway (LLM providers) | Powering the AI support chat — responses are generated by a large language model | Chat messages you send to the assistant |
| Meta (Facebook / Instagram) | Measuring the effectiveness of Meta-run ads (with advertising consent) | Hashed event data, Meta Pixel identifiers |
| CallMeBot (WhatsApp notifications) | Pushing new-enquiry alerts to the team's WhatsApp | Customer name, enquiry summary |
We do not sell your data to third parties, and we do not use it to train external AI models.
Automated decision-making
When an enquiry arrives, we use an AI model to pre-score it (quality, urgency, spam probability) so we can prioritise responses. This is decision-support for us, not an automated decision about you — a human being reviews every enquiry before any action affecting you is taken. You can ask us to review your enquiry without reference to the AI score by emailing chris@stoneleyscaffolding.co.uk.
International transfers
Some processors above (Google, Meta, Cloudflare) operate globally. Where personal data is transferred outside the UK, it is protected by the UK International Data Transfer Agreement, an EU-UK approved addendum, or the UK's adequacy decision for the processor's region. You can request copies of the relevant safeguards by email.
How long we keep data
- Enquiries: up to 24 months after last contact, then deleted
- Project records (contracts, invoices): 6 years (HMRC requirement)
- Property imagery from the quote wizard: retained with the enquiry, deleted with it
- AI chat transcripts: 90 days if no enquiry resulted; otherwise retained with the enquiry
- Analytics data: up to 14 months in GA4 (default retention)
- Cookie consent: 13 months from date of consent, then re-prompted
- Security logs: 30 days
Your rights
Under UK GDPR, you have the right to:
- Access — request a copy of the data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data (subject to HMRC retention for contracted work)
- Restriction — ask us to stop processing your data for specific purposes
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interest
- Withdraw consent — for any processing based on consent (analytics, advertising, AI chat)
Email chris@stoneleyscaffolding.co.uk and we'll respond within 30 days.
Complaints
If you're not happy with how we handle your data, you can complain to the Information Commissioner's Office (ICO): ico.org.uk / 0303 123 1113.
Changes
We may update this policy when our processing changes. Material changes will be flagged on the site; the "last updated" date at the top of this page always reflects the current version.