Privacy Policy

Privacy Notice

Last updated: 22 July 2026

1. Who we are

Heritage Decorators Scotland is a trading name of Sean Lawlor, sole trader, based in Stirling, Scotland.

For the purposes of UK data protection law, Sean Lawlor trading as Heritage Decorators Scotland is the data controller responsible for the personal information described in this notice.

Contact details

Telephone: 07976 265880
Email: info@heritagedecoratorsscotland.co.uk
Website: www.heritagedecoratorsscotland.co.uk

2. What this privacy notice covers

This privacy notice explains how we collect, use, store and protect personal information when you:

Visit our website.
Submit an online enquiry.
Contact us by telephone, email, text message or social media.
Ask us to provide an estimate or quotation.
Become a customer, supplier or subcontractor.
Work with us on a commercial or residential project.
Apply for work or respond to a recruitment advertisement.
3. Personal information we may collect

Depending on your relationship with us, we may collect:

Your name.
Home, site or business address.
Email address.
Telephone number.
Project location.
Details about the property or work required.
Photographs, plans, drawings or specifications relating to a project.
Communications between you and us.
Quotation, contract, invoice and payment information.
Company name, job title and business contact details.
Supplier and subcontractor information.
Records of work completed and materials supplied.
Feedback, reviews or testimonials.
Website usage information, such as IP address, browser type and device information.
Employment information where you apply for work, including your CV, qualifications, experience and right-to-work information.

We do not normally require special category information, such as medical information. Please do not send this type of information unless it is genuinely necessary for us to provide a service or meet a legal obligation.

4. How we collect personal information

We may collect information:

Directly from you through our website enquiry form.
When you contact us by telephone, email, text message or social media.
During a site visit, consultation or project meeting.
Through quotations, contracts, invoices and payment records.
From contractors, architects, designers, developers, property owners or managing agents involved in a project.
From publicly available business sources.
Through our website hosting and security systems.
When you apply to work with us.
5. How we use personal information

We use personal information to:

Respond to enquiries.
Arrange site visits and consultations.
Prepare estimates, quotations and tenders.
Enter into and perform contracts.
Plan, manage and complete decorating and finishing work.
Communicate with customers, suppliers, subcontractors and other project professionals.
Purchase and deliver materials.
Issue invoices and process payments.
Maintain business, tax and accounting records.
Manage warranties, complaints, defects or follow-up work.
Maintain the security and proper operation of our website.
Improve our services and customer experience.
Establish, exercise or defend legal claims.
Recruit staff, workers or subcontractors.
Meet legal, tax, insurance and regulatory obligations.
Send marketing communications where permitted by law.

We will not sell your personal information.

6. Our lawful bases

UK data protection law requires us to have a lawful basis for using personal information.

We may rely on the following lawful bases:

Contract

We use your information where it is necessary to:

Provide a quotation at your request.
Take steps before entering into a contract.
Provide the services you have asked us to perform.
Manage payments and project communications.
Legal obligation

We may use and retain information where required for:

Tax and accounting purposes.
Health and safety obligations.
Employment and right-to-work requirements.
Insurance requirements.
Responding to lawful requests from public authorities.
Other legal or regulatory responsibilities.
Legitimate interests

We may use information where necessary for our legitimate business interests, provided those interests do not override your rights.

These interests include:

Managing and developing our business.
Keeping records of enquiries and completed projects.
Preventing fraud and protecting our business.
Maintaining website and information security.
Managing complaints and disputes.
Recovering unpaid sums.
Obtaining professional advice.
Communicating with existing commercial contacts where appropriate.
Consent

Where required, we will obtain your consent before:

Sending certain electronic marketing communications.
Publishing an identifiable testimonial or project photograph.
Using non-essential website cookies or tracking technologies.

You may withdraw your consent at any time by contacting us.

7. Photographs and project information

We may take photographs of work for:

Project records.
Quality control.
Evidence of existing conditions or completed work.
Supporting quotations, invoices, warranties or disputes.

We will seek appropriate permission before using photographs that identify a customer, show private personal information or clearly identify a private home in marketing materials.

Where permission is provided, photographs may appear on our website, social media pages, printed portfolio, advertising or promotional material.

You may withdraw permission for future marketing use by contacting us. This will not affect uses that took place before permission was withdrawn.

8. Who we may share information with

Where necessary, we may share relevant information with:

Employees, workers and subcontractors involved in your project.
Main contractors, architects, designers, developers or project managers.
Suppliers and delivery companies.
Accountants, bookkeepers and professional advisers.
Banks and payment providers.
Insurers and insurance brokers.
Debt recovery providers or solicitors.
Website, email, IT and cloud-storage providers.
IONOS, as our website hosting and website service provider.
HM Revenue & Customs and other public authorities where legally required.
Police, courts or regulators where disclosure is necessary or required by law.

We only share information that is reasonably necessary for the relevant purpose.

Service providers acting on our behalf are expected to keep information secure and use it only for the agreed service.

9. International transfers

Some technology, website, email or cloud-service providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we will take reasonable steps to ensure appropriate legal safeguards are in place, as required by UK data protection law.

10. How long we retain information

We retain personal information only for as long as reasonably necessary.

Our usual retention periods are:

General enquiries that do not result in work: up to 12 months after the last communication.
Quotations and estimates: up to 3 years after the quotation expires or the last communication.
Customer, contract, project and invoice records: generally 6 years after completion of the project or final payment.
Accounting and tax records: for the period required by applicable tax and accounting law.
Supplier and subcontractor records: generally 6 years after the end of the working relationship or final transaction.
Complaints, disputes and legal claims: for as long as reasonably necessary to resolve the matter and meet applicable limitation periods.
Job applications: normally up to 6 months after the recruitment process ends, unless the applicant agrees to a longer retention period.
Marketing records: until you unsubscribe, withdraw consent or object to the use of your information.
Website security records: for the period reasonably required to maintain security and investigate misuse.

Information may be kept for longer where required by law, insurance conditions or an ongoing dispute.

When information is no longer needed, we will delete it securely or anonymise it.

11. Website cookies

Our website may use cookies and similar technologies.

Essential cookies may be used to:

Make the website function correctly.
Maintain security.
Remember privacy or cookie preferences.
Enable forms and essential website features.

Non-essential analytics, advertising or tracking cookies should only be used where you have provided the required consent.

You can manage available choices through the cookie banner or settings displayed on our website. You may also restrict or delete cookies using your browser settings.

Disabling essential cookies may affect how the website works.

12. Website enquiries

When you submit an enquiry through our website, we may collect your name, contact details, project information and message.

We use this information to:

Respond to your enquiry.
Discuss your requirements.
Arrange a site visit.
Prepare a quotation.
Take steps towards entering into a contract.

Submitting an enquiry does not automatically add you to a marketing list.

13. Marketing communications

We may contact existing customers or business contacts about relevant services where permitted by law.

Where consent is required, we will ask for it separately.

You can stop receiving marketing communications at any time by:

Using the unsubscribe option provided in the communication.
Replying and asking us to stop.
Contacting us using the details in this notice.

We may keep a minimal suppression record so that we can respect your request not to receive further marketing.

14. Keeping information secure

We take reasonable organisational and technical measures to protect personal information against:

Unauthorised access.
Loss or theft.
Accidental disclosure.
Alteration.
Misuse or destruction.

Measures may include:

Password-protected accounts and devices.
Restricted access to records.
Secure website and email services.
Software and security updates.
Secure disposal of paper and electronic records.
Using reputable professional and technology providers.

No internet-based system is completely secure. However, we take reasonable steps appropriate to the nature of the information we hold.

15. Your data protection rights

Depending on the circumstances, you may have the right to:

Ask for a copy of the personal information we hold about you.
Ask us to correct inaccurate or incomplete information.
Ask us to delete your information.
Ask us to restrict how we use your information.
Object to certain uses of your information.
Receive certain information in a portable format.
Withdraw consent where we rely on consent.
Complain about how your information has been handled.

Some rights are subject to legal conditions and exemptions.

We will normally respond to a valid data protection rights request without undue delay and within one month.

We may need to confirm your identity before fulfilling a request.

To exercise your rights, contact:

Sean Lawlor
Email: info@heritagedecoratorsscotland.co.uk
Telephone: 07976 265880

16. Data protection complaints

You may raise a data protection complaint using the contact details above.

We will:

Provide a clear way for you to make your complaint.
Acknowledge the complaint within 30 days.
Take appropriate steps to investigate it without undue delay.
Keep you informed where appropriate.
Explain the outcome of our investigation.

Please provide enough information for us to understand your concern and identify the relevant records.

If you remain unhappy after contacting us, you may complain to the Information Commissioner’s Office.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: Information Commissioner’s Office – Make a complaint

17. Links to other websites

Our website may contain links to third-party websites or social media platforms.

We are not responsible for the privacy practices, security or content of third-party websites. You should review their privacy information before submitting personal information.

18. Changes to this notice

We may update this privacy notice where our services, website, business practices or legal obligations change.

The latest version will be published on our website with the updated date shown at the top.