Skip to main content
Legal

Privacy notice

How we handle your personal information, under UK GDPR and the Data Protection Act 2018.

AdaptScot Limited (in formation) is the data controller for personal information you give us. This notice explains what we collect, why, how long we keep it, and your rights.

What we collect

  • Contact details (name, email, phone, postcode) when you enquire or are referred.
  • Property and accessibility-need information needed to scope an adaptation.
  • Communication records — emails, call notes, meeting minutes.
  • Engagement files — drawings, photos (with consent), invoices, certificates.

Why we collect it

  • To respond to your enquiry and deliver the service you've engaged us for.
  • To meet legal and regulatory obligations (CDM, building control, framework reporting).
  • To improve the service over time (anonymised analytics only).

Lawful basis

We rely on legitimate interests for initial enquiry handling, contractonce you engage us, and legal obligation for retained financial and CDM records.

How long we keep it

  • Enquiries that don't proceed: 12 months from last contact.
  • Active engagements: for the duration of the engagement plus 7 years (HMRC).
  • CDM and building-control records: 15 years.

Your rights

You can ask us at any time to access, correct, or delete your information, restrict processing, or object. Contact us at hello@adaptscot.co.uk. You can also complain to the ICO.

Sub-processors

We use Supabase (UK region, infrastructure), Resend (transactional email), Plausible (privacy-friendly analytics — opt-in), and Vercel (hosting). All sub-processors are contractually bound to UK GDPR standards.

Last updated: incorporation date.