Privacy Policy
How we collect, use, and protect your personal information
Last Updated: 22 December 2025
D&SH Limited ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services or visit our website.
1. Information We Collect
We may collect the following types of personal information:
- Contact Information: Name, email address, phone number, postal address
- Service Information: Details about the services you request, project specifications, and preferences
- Payment Information: Billing address and payment details (processed securely through third-party payment processors)
- Communication Records: Correspondence, feedback, and complaints
- Website Usage: IP address, browser type, pages visited, and time spent on our website
2. How We Use Your Information
We use your personal information for the following purposes:
- To provide, schedule, and deliver our services
- To communicate with you about your bookings, quotes, and service updates
- To process payments and manage invoices
- To respond to your inquiries, requests, and complaints
- To improve our services and website functionality
- To send you marketing communications (with your consent)
- To comply with legal obligations and protect our legal rights
3. Legal Basis for Processing
Under UK GDPR and the Data Protection Act 2018, we process your personal data based on:
- Contract: To fulfill our contractual obligations to provide services
- Consent: When you have given clear consent for specific purposes (e.g., marketing)
- Legal Obligation: To comply with legal requirements (e.g., tax records)
- Legitimate Interests: For business operations, fraud prevention, and service improvement
4. How We Share Your Information
We do not sell your personal information. We may share your information with:
- Service Providers: Third-party companies that help us operate our business (e.g., payment processors, IT services)
- Legal Requirements: When required by law, court order, or government regulation
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- With Your Consent: When you have explicitly agreed to the sharing
All third parties are required to maintain the confidentiality and security of your information.
5. Data Security
We implement appropriate technical and organisational measures to protect your personal information:
- Encryption of sensitive data in transit and at rest
- Secure storage systems with restricted access
- Regular security assessments and updates
- Staff training on data protection and confidentiality
- Secure payment processing through reputable providers
However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
6. Data Retention
We retain your personal information only for as long as necessary:
- Service records: 7 years (for tax and legal compliance)
- Marketing data: Until you withdraw consent or opt out
- Website analytics: Aggregated and anonymised data may be retained longer
When data is no longer needed, we securely delete or anonymise it.
7. Your Rights
Under UK GDPR, you have the following rights:
- Right of Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your data (subject to legal requirements)
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or for direct marketing
- Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
To exercise these rights, please contact us at contact@dshlimited.uk. We will respond within one month.
8. Cookies and Tracking
Our website may use cookies and similar tracking technologies to:
- Remember your preferences and settings
- Analyse website traffic and usage patterns
- Improve website functionality and user experience
You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.
9. Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
10. International Transfers
Your information is primarily processed within the UK and European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place to protect your information in accordance with UK GDPR.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last Updated" date. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.
12. Complaints
If you have concerns about how we handle your personal information, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
13. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
