Privacy policy

Who is responsible

The controller of the personal data collected through cutedgecorrosion.co.uk is Allbase Group Ltd, a company registered in England and Wales under company number 09611962, with its office at Cutter Mill, Tileyard North, Wakefield WF1 5FY.

This site is a microsite of allbase.co.uk and holds no separate company behind it. Anything submitted here reaches the same team.

What is collected

Nothing is collected unless you send it. There are four ways that happens.

• Free assessment requests. The survey form asks for a name, an email address, a phone number where you give one, the company and role where you give them, the site address and postcode, and your answers about the roof and its condition.
• The roof outline. Where the map step is used, the shape you draw is kept as a set of coordinates with the area and perimeter worked out from it. That outline describes a building, not a person, but it travels with the rest of the request.
• Photographs and documents. Files attached to an assessment request are uploaded to Vercel Blob, the file store behind this site, and the links are passed on with the request. A photograph of a roof can carry location data in its own metadata, so send only what you are content to share.
• Enquiries and reviews. The contact form asks for a name, an email address, the company where you give one, and your message. A review submitted about completed work carries whatever you write in it, along with the name you put to it.

Server logs record the usual technical details of a request, including an IP address, so that the rate limit on the lead intake applies per visitor rather than to the whole site.

Why it is collected, and on what basis

Assessment requests and enquiries are handled so that someone can answer them, quote for the work where it is wanted, and arrange it. The lawful basis is legitimate interests, specifically responding to a request you have made, and the performance of a contract once there is one.

Reviews are published only where they were submitted for that purpose. The site's two measurement scripts run on consent alone and on nothing else, and measure the site rather than the visitor.

Personal data collected through this site is never sold, and it is not used for profiling.

Who it reaches

Submissions are passed to the following, and to nobody else.

• The Allbase content and lead systems, which hold the enquiry and the case raised from it.
• Expert contractors, where a repair is going ahead and a contractor has to be matched to the roof. Only what is needed to survey and quote the work is passed on.
• Vercel, which hosts this site and stores uploaded files. Once analytics is allowed it also receives the page-view counts and loading timings described in the cookie policy. Neither of those carries a name, an address or anything else submitted through a form.
• Resend, which delivers the email fallback used when a submission cannot reach the lead system directly, so that a request is never silently lost.
• Mapbox, which serves the maps and the address list on the assessment form. See the cookie policy for how that is gated.

How long it is kept

An assessment request and the files attached to it are kept for as long as the enquiry is live, and then for six years from the last contact, which is the period a claim about the work could still be brought.

An enquiry that goes no further is kept for two years. A published review stays up until it is withdrawn. Server logs are kept for a short operational period and then discarded.

Your rights

Under UK data protection law you can ask for any of the following.

• A copy of the personal data held about you.
• Correction of anything inaccurate.
• Deletion, where there is no longer a reason to keep it.
• Restriction of how it is used, or an objection to that use.
• A portable copy, where it was provided by you and is handled by automated means.

Ask by writing to privacy@allbase.co.uk. A request is answered within one month. If the answer is unsatisfactory, the Information Commissioner's Office is the regulator to approach, at ico.org.uk.

Getting in touch

Questions about this policy go to privacy@allbase.co.uk, or by post to Allbase Group Ltd, Cutter Mill, Tileyard North, Wakefield WF1 5FY.