Privacy Policy | SummitStone Works

Last updated: 14 June 2026

Introduction

SummitStone Works (“SummitStone Works”, “we”, “us”, or “our”) is a residential masonry and stonework business operated by Sadiq Bhandari and based at 544 Manor Street, London, E12 6QN. We are committed to protecting the privacy of everyone who contacts us, requests a quotation, or uses our website at https://summitstoneworks.co.uk.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, how long we keep it, and the rights you have over your information under the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By contacting us or using our website, you acknowledge that you have read and understood the practices described in this policy.

We are the data controller responsible for the personal information we hold about you. If you have any questions about this policy or the way we handle your information, please contact us using the details at the end of this document.

Information We Collect

We only collect the information we need in order to respond to enquiries, plan and deliver stonework projects, and meet our legal obligations. The categories of information we may collect include:

Contact and identity information — your full name, email address, telephone number, and the location or address of the property where work is being considered.
Enquiry information — details you provide about your property, your design preferences, measurements discussed during a site review, and the scope of work you are interested in.
Project and correspondence information — quotations, written specifications, scheduling details, and the messages you exchange with us by email, telephone, or our contact form.
Payment-related information — records that a payment has been made for a particular package. Card payments are processed by our payment provider; we do not collect or store your full card details on our systems.
Technical information — limited technical data such as your browser type and basic usage information that may be collected automatically by essential cookies when you visit our website.

How We Use Your Information

We use the personal information we collect for the following purposes:

To respond to your enquiries and provide quotations and recommendations.
To carry out site reviews, prepare written project specifications, and agree the scope, materials, and timeline of your project.
To schedule, deliver, and complete your stonework project, including the final walkthrough.
To process payments for the services you book and to maintain accurate financial and tax records.
To communicate with you about your project and to respond to any questions or complaints.
To operate, maintain, and improve our website and to keep it secure.
To comply with our legal, regulatory, accounting, and reporting obligations.

Legal Bases for Processing

Under the UK GDPR we must have a lawful basis for processing your personal information. The bases we rely on are:

Contract — where processing is necessary to take steps at your request before entering into a contract and to perform a contract for stonework services.
Legitimate interests — where processing is necessary for our legitimate interests in operating and promoting our business, provided your rights do not override those interests.
Legal obligation — where we must process information to comply with the law, such as retaining financial records.
Consent — where you have given clear consent, for example to non-essential cookies. You may withdraw consent at any time.

Contact Forms and Customer Enquiries

When you submit our contact form, the form prepares an email containing the details you have entered and opens your own email application so that you can review and send it to us directly. The information is used solely to respond to your enquiry and to plan any work you ask us to carry out. We do not sell, rent, or trade enquiry information to third parties, and we do not use it for unrelated marketing.

If you contact us by telephone or email instead, we will keep a record of that correspondence for the same purposes.

Payment Processing

Payments for our packages are handled by a third-party payment processor through secure, hosted payment pages. When you choose to book and pay online, you are taken to the payment provider’s secure environment, where your card details are entered and processed by them. We do not see or store your full card number, security code, or other sensitive payment credentials.

Our payment provider acts as an independent controller or processor of the payment data you submit to them and operates under its own privacy policy and security standards, including industry payment-card security requirements. We receive only the confirmation and limited transaction information we need to identify your booking and maintain our records.

Cookies

Our website uses a small number of cookies and similar technologies. Essential cookies are necessary for the website to function and to remember choices such as your acknowledgement of our cookie notice. Where we use any non-essential cookies, we will ask for your consent first.

You can control and delete cookies through your browser settings. Disabling essential cookies may affect how parts of the website work. For full details, please read our Cookie Policy.

Data Sharing and Disclosure

We do not sell your personal information. We share it only where necessary and with appropriate safeguards, including with:

Our payment processor, in order to take and confirm payments.
Service providers who help us operate our website and business, who are bound to use the information only as instructed by us.
Professional advisers such as accountants, where required for our legitimate business and legal obligations.
Law enforcement, regulators, or other authorities where we are legally required to disclose information.

Data Retention

We keep personal information only for as long as necessary for the purposes for which it was collected. Enquiry information from people who do not proceed to a project is normally retained for a limited period and then deleted. Information relating to projects we have delivered is retained for longer in order to manage warranties, respond to any later questions, and meet our legal and accounting obligations.

Financial records are retained for the period required by UK tax and accounting law. When information is no longer needed, we securely delete or anonymise it.

Data Security

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, or alteration. These measures include restricting access to information on a need-to-know basis, using reputable service providers, and using secure, encrypted connections for our website and payment pages.

While we work hard to protect your information, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

Your Rights

Under the UK GDPR you have a number of rights in relation to your personal information, including the right to:

Be informed about how your information is used (which this policy provides).
Request access to the personal information we hold about you.
Request that inaccurate or incomplete information is corrected.
Request that we erase your information where there is no continuing reason for us to keep it.
Object to or request that we restrict certain processing of your information.
Request the transfer of your information to you or another provider in a portable format, where applicable.
Withdraw consent at any time where we rely on consent.

To exercise any of these rights, please contact us using the details below. We will respond within the time limits set by law. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk.

Children’s Privacy

Our services and website are directed at homeowners and adults. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so that we can remove it.

International Data Transfers

We are based in the United Kingdom and aim to store and process personal information within the UK or the European Economic Area wherever possible. Some of the service providers we use, such as our payment processor and font provider, may process limited data outside the UK. Where personal information is transferred outside the UK, we take reasonable steps to ensure it is protected by appropriate safeguards, such as adequacy regulations or standard contractual clauses recognised under UK data protection law.

By using our website and services, you understand that your information may be processed by these providers in accordance with their own published privacy and security commitments, which we review when selecting who we work with.

Marketing Communications

We do not operate intrusive marketing campaigns. We will only use your contact details to send you information about your specific enquiry or project, or to respond to questions you have raised. We will not add you to a marketing list without your clear consent, and where you have consented to receive any updates you may ask us to stop at any time by contacting us. Withdrawing consent will not affect the lawfulness of any processing carried out before you withdrew it.

Automated Decision-Making and Profiling

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects. All quotations, recommendations, and project decisions are made by people, based on the information you provide and the conditions observed during a site review.

Third-Party Links

Our website and payment pages may contain links to third-party websites, such as our payment provider. This Privacy Policy applies only to our own website. We are not responsible for the privacy practices or content of other websites, and we encourage you to read the privacy policies of any third-party site you visit.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on this page, with the date it was last updated shown at the top.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

SummitStone Works
Operated by Sadiq Bhandari
544 Manor Street, London, E12 6QN
Email: summitstoneworkss@gmail.com
Phone: +44 7570 732444