Privacy Policy

Last Updated: January 2026

Dotted Space is committed to protecting the privacy and security of our clients and website visitors. This policy explains how we collect, use, and manage your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

We are Dotted Space, located at 32 Balfour Road, Northampton, NN2 6JR. For the purposes of data protection legislation, we are the Data Controller.

2. Information We Collect

We may collect, use, store and transfer different kinds of personal data about you:

• Contact Data: Name, email address, phone number, company name, and billing address (via contact or quote forms).
• Project Data: Plans, briefs, site photos, and specific details shared during project initiation.
• Usage Data: Information about how you use our website (IP address, browser type) collected via cookies and analytics.
• Marketing Data: Your preferences in receiving marketing from us and your communication preferences.

3. How We Use Your Information

We rely on appropriate legal bases to process your data, including:

• Contractual Necessity: To respond to inquiries, provide quotes, and fulfill design/BIM services.
• Legitimate Interests: To improve our website, prevent fraud, and keep our records updated.
• Legal Obligation: To comply with tax laws (e.g., HMRC requirements).

4. Data Sharing

We do not sell your personal data. We only share data with trusted third parties where necessary for business operations, such as:

• IT and Cloud Service providers (e.g., for email hosting or file storage).
• Professional advisers (accountants, insurers).
• Subcontractors (under strict confidentiality agreements) if required for a specific project.

5. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for. Typically, client project data is retained for 6 years for legal and tax purposes.

6. Your Legal Rights

Under UK GDPR, you have rights including access to your data, correction of errors, erasure (the 'right to be forgotten'), and objection to processing.