Privacy Policy

This Privacy Policy explains how AlderStone Projects (“AlderStone Projects”, “the studio”, “I”, “me”, or “my”), an independent sole trader business operated by Saugat Thapa, collects, uses, stores, shares, and protects personal data in connection with the website alderstoneprojects.co.uk and the services offered through it. AlderStone Projects acts as the data controller for the personal data described in this policy.

This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using this website or engaging AlderStone Projects for a service, you confirm that you have read and understood this Privacy Policy.

1. Who I am

AlderStone Projects is an independent sole trader business operated by Saugat Thapa, based at 45 Tinsley Road, London, E1 3DA, United Kingdom. You can contact me about anything in this policy by emailing hello@alderstoneprojects.co.uk or calling +44 7345 133580.

2. The personal data I collect

I only collect personal data that is necessary to provide the services described on this website and to operate AlderStone Projects responsibly. Depending on how you interact with me, this may include:

• Identification data such as your name and, where relevant, household information you choose to share.
• Contact data such as your email address, phone number, and property address for project visits.
• Project data — the brief, photos, notes, plans, sketches, and other information shared during a project.
• Transactional data created when you purchase a service through Stripe (I do not store full card details).
• Correspondence — the content of messages you send via email, the contact form, or text.
• Technical data — limited information such as device type, browser, and approximate location collected by website analytics, if active.

3. Contact forms and enquiries

When you submit the contact form on this website, the information you provide (name, email, phone, project type, and message) is used solely to respond to your enquiry, scope a potential project, and follow up where appropriate. I do not use these details for marketing without your explicit consent.

4. How I use your personal data

I rely on the following legal bases under UK GDPR to process personal data:

• Contract: to discuss, plan, deliver, invoice, and review the services you engage me for.
• Legitimate interests: to operate AlderStone Projects responsibly, including responding to enquiries, maintaining basic records, and protecting the website.
• Legal obligation: to comply with tax, accounting, and other applicable legal requirements.
• Consent: where you actively opt in, for example to non-essential analytics or optional communications.

5. Cookies and similar technologies

This website uses a small number of strictly necessary cookies to operate correctly. Where any non-essential cookies (such as analytics) are used, they will only be set with your consent. Full details are provided in the Cookie Policy.

6. Website analytics

If analytics are enabled, they are configured to provide aggregated, privacy-respecting information about how visitors use the site (such as which pages are viewed). Analytics data is used to improve the website and is not used to identify individual visitors.

7. Payments

Payments for AlderStone services are processed by Stripe, an independent payment processor. When you complete a purchase, your payment details are submitted directly to Stripe and are subject to Stripe's privacy policy. I do not see or store your full card details. I retain only the limited transactional information needed for accounting and customer records.

8. Sharing your personal data

AlderStone Projects is an independent sole trader business and does not sell personal data. I may share limited personal data with:

• Stripe and similar regulated providers, strictly to process transactions.
• My accountant or bookkeeper, where required for legitimate accounting purposes.
• HMRC or other authorities, where required by law.
• Hosting and email providers used to operate the website and communicate with you.

9. Data retention

I retain personal data only for as long as is necessary for the purposes described in this policy, or for as long as required by law. Project records are typically retained for up to six years to comply with UK accounting requirements, after which they are securely deleted or anonymised. Contact enquiries that do not lead to a project are usually deleted within twelve months.

10. Your rights under UK GDPR

You have the right to: access the personal data I hold about you; request correction of inaccurate data; request deletion of your data (subject to legal limits); object to or restrict certain processing; withdraw consent for any processing based on consent; and request data portability where applicable. To exercise any of these rights, please email hello@alderstoneprojects.co.uk and I will respond within one calendar month.

11. Security

I take reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, and disclosure. Access to project files, correspondence, and customer records is restricted to me as the sole trader running AlderStone Projects.

12. International transfers

Some of the providers I use (such as Stripe and email/hosting providers) may process data outside the United Kingdom. Where this happens, appropriate safeguards are in place to ensure data is treated to a standard equivalent to UK GDPR.

13. Children's data

The website and services are intended for adults. I do not knowingly collect personal data from children under the age of 16. If you believe a child has shared personal data with the studio, please contact me and I will delete it.

14. Changes to this Privacy Policy

I may update this policy from time to time to reflect changes in the law or in how AlderStone Projects operates. The “last updated” date at the top of the page will always indicate when the most recent changes were made. I encourage you to review this page periodically.

15. Complaints

If you are unhappy with how I have handled your personal data, please contact me first so I can try to resolve the matter. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

16. Contact

Questions about this Privacy Policy should be addressed to:
Saugat Thapa, AlderStone Projects, 45 Tinsley Road, London, E1 3DA, United Kingdom — hello@alderstoneprojects.co.uk — +44 7345 133580.