FF Construction Logo

Legal

Privacy policy

What personal data we hold, why we hold it, how long we keep it and what you can ask us to do with it. This covers enquiries through this website, the people we work for, and everyone who comes onto one of our sites.

Version
2.0
Last updated
4 August 2026
Controller
FF Construction Ltd, Unit 4, Osney Mead, Oxford OX2 0ES
Contact
privacy@ffconstruction.co.uk
Status
Draft — pending legal review

Words we use

We, us, our
FF Construction Ltd, the data controller
Personal data
Any information that identifies a living person, directly or indirectly
Processing
Anything we do with personal data — collecting, storing, sharing or deleting it
Lawful basis
The reason the UK GDPR permits us to process a particular piece of data
The UK GDPR
The UK General Data Protection Regulation, read with the Data Protection Act 2018

Who we are

FF Construction Ltd is the data controller for the personal data described on this page. We are registered in England and Wales, company number 05812349, at Unit 4, Osney Mead, Oxford OX2 0ES.

Data protection questions go to privacy@ffconstruction.co.uk, or by post to a director at the address above.

What we collect

  1. Enquiry details: your name, organisation, email address, phone number and whatever you tell us about the building and the work you are planning.

  2. Project records: correspondence, drawings, site photographs, valuations, variations and the day-to-day paperwork of running the job.

  3. Site records: signing-in sheets, inductions, competence cards and accident reports for everyone who comes onto a site we control, including your staff and other contractors.

  4. Website data: pages visited and approximate location, collected in aggregate so we can see which parts of the site are used. We do not build advertising profiles.

Why we hold it

We process enquiry and project data to answer you, to price the work, and then to perform the contract we have with you. Site and safety records are processed to meet our legal obligations under health and safety and CDM legislation.

Where we rely on legitimate interests — keeping a record of completed projects, or contacting a past client about work on the same building — you can object at any time and we will stop unless we have a compelling reason not to.

We do not sell personal data, and we do not send marketing email to anyone who has not asked for it.

Who we share it with

Design consultants, subcontractors and suppliers see the parts of a project record they need to do their work. Our accountants, insurers and legal advisers see what they need for their own duties. Where an incident is reportable, the Health and Safety Executive sees the accident record.

Our IT, email and file storage suppliers hold data on our behalf under written terms that limit them to acting on our instructions. We keep data in the UK and the European Economic Area.

How long we keep it

We keep project records for twelve years after practical completion. That matches the period in which a claim can be brought against a contract executed as a deed, so it is the point at which the records stop being useful to either of us.

Enquiries that do not become projects are deleted after two years. Site signing-in records are kept for three years, and accident records for the periods the relevant regulations set.

Project records
12 years after practical completion
Unsuccessful enquiries
2 years
Site attendance records
3 years
Website analytics
14 months, aggregated

Your rights

  1. You can ask for a copy of the personal data we hold about you. We respond within one month and do not charge for it.

  2. You can ask us to correct anything inaccurate, or to complete anything partial.

  3. You can ask us to delete data, or to restrict what we do with it. We may have to keep project records where a legal obligation or a potential claim requires it, and we will tell you if that is why.

  4. You can object to processing we carry out under legitimate interests, and you can withdraw consent at any time where consent is what we relied on.

  5. To exercise any of these, write to privacy@ffconstruction.co.uk.

Cookies

This site sets the cookies it needs to work — remembering your theme choice and keeping a contact form submission intact between pages. These do not require consent.

Analytics cookies are set only if you accept them, and you can change that choice at any time. Declining them does not change how the site behaves.

Complaints

If you are unhappy with how we have handled your data, tell us first — write to a director at the head office address or at directors@ffconstruction.co.uk. We respond within five working days.

You can also complain to the Information Commissioner at ico.org.uk or on 0303 123 1113. You do not have to come to us first.

Changes to this policy

We update this page when what we do with data changes. The version and date at the top show which set applies, and we keep earlier versions on file.

Questions about your data

Ask us what we hold and we will tell you — you do not need to make a formal request first. If you would rather have it in writing, a director will confirm it by letter.

Email hello@ffconstruction.co.uk or call 01865 000 000. By post: FF Construction Ltd, Unit 4, Osney Mead , Oxford, OX2 0ES.