Privacy Policy

ESSCO provides Quantity Surveying and commercial refurbishment support to UK property investors.

Our services focus on helping investors manage the commercial side of HMO conversions and larger refurbishment projects, including contractor selection, tender reviews, cost control and refurbishment oversight.

This Privacy Policy explains how personal information is collected and used when you visit our website, submit an enquiry, complete an application or book a consultation.

Data controller: [CONFIRM LEGAL BUSINESS NAME]

Contact email: [CONFIRM PRIVACY CONTACT EMAIL]

Business contact address: [CONFIRM BUSINESS ADDRESS]

Depending on how you interact with our website, we may collect:

• Your name, email address and phone number
• Details about your property investment or refurbishment project
• Information provided through application forms
• Your preferred consultation date and time
• Messages or questions you send us
• Technical information about your website visit, subject to the tracking technologies actually enabled

We only request information relevant to your enquiry, application or our services.

We may use your information to:

• Respond to your enquiries
• Review your application
• Understand your refurbishment requirements
• Assess whether our services may be suitable
• Arrange consultations
• Send booking confirmations and appointment reminders
• Communicate about services you have requested
• Maintain relevant business records
• Improve our website and services

Any marketing communications and advertising measurement must follow applicable data protection and electronic marketing requirements.

Depending on the purpose, our lawful basis may include:

• Taking steps before entering into a contract
• Performing a contract
• Legitimate business interests, where permitted
• Consent, where required
• Meeting legal obligations

The final published policy must accurately identify the lawful basis used for each processing purpose.

Our website may use cookies or similar technologies to support website functionality, measure performance and understand how visitors interact with our pages.

Advertising and analytics technologies, including Meta Pixel where implemented, must be disclosed accurately.

Where consent is required, non-essential tracking must not run until valid consent has been obtained.

Visitors must be able to manage their cookie preferences.

Confirmation required before publication: Meta Pixel is currently implemented. The applicable cookies, consent process and preference controls must be reviewed; this draft does not confirm that consent controls are in place.

Our website and booking process may involve external service providers. These include:

• Lovable for website functionality and hosting
• Calendly for consultation scheduling
• Vimeo for video playback
• Meta for advertising and conversion measurement
• Zapier for receiving application submissions and booking-status updates

Relevant providers may process personal information on our behalf or as independent controllers, depending on the service. Any additional providers and downstream destinations must be confirmed before publication.

We aim to handle personal information securely and restrict access to those who need it for legitimate business purposes.

The final policy should describe the security practices actually in place without making unsupported guarantees.

Personal information should only be retained for as long as necessary for the purposes for which it was collected, including applicable legal requirements.

Specific retention periods or criteria must be confirmed before publishing.

Under UK data protection law, you may have rights to:

• Access your personal information
• Correct inaccurate information
• Request deletion in certain circumstances
• Restrict or object to certain processing
• Request data portability where applicable
• Withdraw consent where processing relies on consent

You may also raise a complaint with the Information Commissioner's Office at https://ico.org.uk.

Some technology providers may process information outside the UK.

Where international transfers take place, appropriate safeguards must be used where required by law.