Get a Quote

Privacy Policy

Last updated: July 2026

Get a Free Quote
✓ Over 20 Years Experience ✓ Fully Insured ✓ SSIP & CHAS Accredited

1. Introduction

Vine Scaffolding Ltd ("we", "our", "us") is committed to protecting your privacy. This privacy policy explains how we collect, use, store, and safeguard your personal data when you visit our website or use our services.

We are registered in England and Wales. Our registered office is Upper Caldecote, Biggleswade, Bedfordshire, SG18 9BH.

If you have any questions about this policy or how we handle your data, please contact us at admin@vine-scaffolding.com or call 07355 446584.

2. What Personal Data We Collect

2.1 Information You Provide Directly

When you fill in our contact / quote request form, we collect:

  • Full name
  • Email address
  • Phone number
  • Project location (town/city)
  • Project type (residential, commercial, tube & clip, or other)
  • Project details (the message you send describing your requirements)

2.2 Information Collected Automatically

When you visit our website, our hosting provider (Cloudflare) automatically collects standard server log information:

  • IP address
  • Browser type and version (user-agent string)
  • Pages visited and the date/time of each visit
  • Referring website (if you arrived via a link from another site)
  • Approximate geographic location (based on IP address, at city/region level)

This information is used for website analytics, security monitoring, and diagnosing technical issues. It cannot identify you personally based on IP address alone.

2.3 Information We Do NOT Collect

We do not collect or use any of the following:

  • Cookies of any kind — we do not set or read cookies
  • Tracking pixels, beacons, or fingerprinting scripts
  • Google Analytics, Facebook Pixel, or any third-party analytics service
  • Advertising identifiers or behavioural tracking data
  • Payment card or financial information (all transactions are handled offline)
  • Sensitive personal data (race, health, religion, political opinions, etc.)

3. How We Collect Your Data

  • Contact form: Submitted through our website and delivered via email using Resend, our email delivery provider.
  • Direct communication: When you contact us by phone or email, we may keep a record of that correspondence.
  • Server logs: Automatically recorded by our hosting platform (Cloudflare) when you browse the site.

4. Lawful Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we rely on the following lawful bases:

Processing Activity Lawful Basis Explanation
Responding to quote requests Contract (Article 6(1)(b)) Processing is necessary to take steps at your request before entering into a contract for scaffolding services.
Sending project-related communications Contract (Article 6(1)(b)) We need to contact you about your project to provide the service you requested.
Website analytics & security Legitimate Interest (Article 6(1)(f)) We have a legitimate interest in monitoring and improving our website's performance, security, and user experience.
Compliance with legal obligations Legal Obligation (Article 6(1)(c)) We may need to retain certain records for HMRC or health & safety compliance.

5. How We Use Your Data

We use your personal data exclusively for the following purposes:

  • To respond to your quote requests and project enquiries
  • To communicate with you about your scaffolding project (site surveys, quotes, scheduling, delivery, collection)
  • To send project-related follow-ups (e.g., invoice reminders, handover instructions)
  • To monitor and improve our website's performance and security
  • To comply with legal and regulatory obligations (e.g., health & safety records, tax records)

We do not:

  • Sell your personal data to anyone
  • Use your data for marketing or advertising purposes
  • Send newsletters, promotional emails, or marketing communications
  • Share your data with third parties (except our email delivery provider — see Section 6)

6. Data Sharing and Third Parties

We share your data only with the following third parties, strictly for the purposes described:

6.1 Cloudflare (Hosting) & Resend (Email Delivery)

Our website is hosted by Cloudflare, Inc. (based in the United States) using Cloudflare Pages. Cloudflare acts as a data processor on our behalf, providing content delivery and security services. Cloudflare is compliant with the UK GDPR and participates in the EU-US Data Privacy Framework.

Quote request form submissions are delivered to us via email using Resend (based in the United States), our email delivery provider. Your form data is transmitted directly from our website to Resend's API and forwarded to us by email. Resend is GDPR compliant and data is processed under appropriate safeguards (Standard Contractual Clauses).

6.2 We Do Not Share With

  • Advertising platforms (Google Ads, Facebook, LinkedIn)
  • Data brokers or marketing agencies
  • Credit reference agencies
  • Any other third party without your explicit consent

We may disclose your information if required to do so by law or in response to valid legal requests by public authorities (e.g., a court order or law enforcement request).

7. International Data Transfers

Our website is hosted by Cloudflare, which serves content through their global content delivery network (CDN) with data centres worldwide, including in the United Kingdom, European Union, and the United States. Where personal data is transferred outside the UK, this is done under the UK's International Data Transfer Agreement (IDTA) and the EU-US Data Privacy Framework, ensuring appropriate safeguards are in place.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

Data Type Retention Period Reason
Quote request form submissions 2 years from the date of submission To handle follow-up enquiries and reference previous quotes
Customer project records (if you become a client) 6 years after project completion Legal obligation (HMRC tax records, insurance requirements, health & safety)
Website server logs (30 days) 30 days Security monitoring and technical diagnostics
Email correspondence 2 years after the last communication Reference and continuity of service

After these periods, your data is securely deleted or anonymised.

9. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right What It Means
Right to be informed You have the right to be told how your data is used (this policy fulfils this right).
Right of access You can request a copy of the personal data we hold about you (a "subject access request").
Right to rectification You can ask us to correct any inaccurate or incomplete data we hold about you.
Right to erasure You can ask us to delete your personal data where there is no lawful reason for us to keep it ("right to be forgotten").
Right to restrict processing You can ask us to stop actively processing your data while a dispute is being resolved.
Right to data portability You can request your data in a machine-readable format (e.g., CSV) to transfer to another provider.
Right to object You can object to our use of your data where we rely on legitimate interest as our lawful basis.
Rights related to automated decision-making We do not use automated decision-making or profiling based on your personal data.

How to Exercise Your Rights

To exercise any of these rights, please contact us:

We will respond to your request within one month (as required by UK GDPR). If your request is complex or you have made multiple requests, we may extend this by up to two months and will explain why.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority:

  • Website: ico.org.uk
  • Phone: 0303 123 1113
  • Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

10. Cookies

This website does not use cookies. We do not set any cookies on your device, and we do not use any third-party services that set cookies (such as analytics trackers, advertising pixels, or social media embeds).

Our hosting provider (Cloudflare) may set strictly functional cookies required for the operation of their content delivery network — these are transient and do not track you across sites.

11. Security

We implement appropriate technical and organisational security measures to protect your personal data, including:

  • HTTPS encryption (TLS 1.3) for all data transmitted between your browser and our website
  • Encrypted transmission of form submissions over HTTPS
  • Access to form submission data restricted to authorised personnel only
  • Regular security reviews of our website and infrastructure
  • Use of security headers (HSTS, X-Frame-Options, Content-Security-Policy)

Despite these measures, no online transmission or storage method is 100% secure. We cannot guarantee absolute security but will notify you of any data breach that affects your personal data within 72 hours, as required by UK GDPR.

12. Third-Party Links

Our website contains links to third-party websites, including:

These third-party sites have their own privacy policies governing how they handle your data. We are not responsible for the privacy practices of other websites. We encourage you to review their privacy policies before providing them with your personal information.

13. Changes to This Policy

We may update this privacy policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. If we make material changes to how we handle your personal data, we will notify you by email (if we have your contact details) or by placing a prominent notice on our website.

We encourage you to review this policy periodically to stay informed about how we are protecting your data.

14. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or our data handling practices, please contact us: