Legal
Privacy Policy
Last updated: October 2026
This policy explains how Chiltern Surface Co ("we", "us") collects, uses and protects your personal data, in line with the UK GDPR and the Data Protection Act 2018. It applies to enquiries made through this website, by phone, WhatsApp or email.
Who we are
Chiltern Surface Co provides exterior surface cleaning services across Buckinghamshire, Oxfordshire, Berkshire, Hertfordshire and Surrey. We are the data controller for the information you provide. You can contact us at info@chilternsurface.co.uk or on 01628 232 450.
What we collect
When you submit our enquiry form we collect your name, email address, phone number, the service you're interested in, your area/town, any message and any photos you choose to upload.
We also collect limited technical information to understand how the website is used and where enquiries originate (for example the page you submitted from and basic campaign/referrer information). Analytics and marketing cookies are only used with your consent.
How we use your information
We use your details to respond to your enquiry, arrange a free site visit, provide a quote and carry out any work you ask us to. We may contact you by phone, email, WhatsApp or SMS in connection with your enquiry.
Our lawful bases are your consent and our legitimate interest in responding to enquiries and running our business. We do not sell your data.
Sharing & storage
Your data is stored securely in our systems. The companies that help us run our business are listed under “Who we share your information with”. Uploaded photos are stored privately and are not made public.
We keep enquiry data only as long as necessary for the purpose it was collected and to meet our legal obligations.
Who we share your information with
We use a small number of trusted companies to run our business. Each one only receives what it needs for its job, works under a contract with us, and is not allowed to use your information for its own purposes.
Railway hosts our website and our office systems, including the database where your enquiry is kept and the private storage for any photos you upload.
Cloudflare delivers our website to your browser and protects it from attack. It sees your IP address while you browse.
Google provides our email and calendar (your messages to us and your appointment), and stores copies of your quotes and invoices in our Google Drive. If you accept analytics cookies, Google Analytics measures how the website is used; before you choose, Google may receive an anonymous signal that the page was visited, with no cookie and nothing that identifies you. Google Ads receives what is described under “Advertising and measurement”.
Microsoft Clarity shows us, only if you accept analytics cookies, how visitors move around our pages, so we can fix what is hard to use. It does not record what you type into our forms.
Meta (Facebook and Instagram) receives the details described under “Advertising and measurement”, only if you accept marketing cookies. If you message us on WhatsApp, WhatsApp (also Meta) carries those messages.
OpenAI reads the text of a website enquiry, with the name and email address on it, to tell real enquiries from sales messages, so that every real enquiry reaches us quickly. It does not use your message to train its systems.
Stripe takes card payments for deposits and invoices. Your card details go straight to Stripe; we never see or store your card number.
Xero is our accounting system. It holds your name, billing address and the invoices and payments for your work, as the law requires us to keep.
Some of these companies are based in, or store data in, the United States. Where they do, the transfer is protected by the UK’s approved safeguards (the UK–US data bridge or the UK’s standard contract clauses).
Your rights
You have the right to access, correct or delete your personal data, to object to or restrict processing, and to withdraw consent at any time. To exercise any of these rights, contact us at info@chilternsurface.co.uk.
You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Advertising and measurement
If you accept marketing cookies, we share limited information with Meta (Facebook and Instagram) and Google so we can measure which adverts bring us genuine enquiries and stop paying for ones that do not.
What we send is your email address, phone number, name, town and postcode in a “hashed” form: scrambled by a one-way process into a string of characters before it ever leaves our systems, so it cannot be read or reversed back into your details. It is used only to match you to an advert you may have clicked. Alongside it we send the milestones of an enquiry — that a quote was sent, or that work was booked, paid for or completed — with the value of the quote or the payment, the service you asked about and the first half of your postcode. We never send your message, your photos or your street address.
Google is the one exception that does not depend on cookies. If you reached us from a Google advert, Google gave that visit a click reference. When an enquiry from that visit leads to booked work, we tell Google the click reference and the value of the quote, marked as not consented if you declined marketing cookies, so Google may use it only to count the result of its advert, not to personalise adverts. Nothing that identifies you, such as your name, email address or phone number, is sent with it.
If you do not accept marketing cookies, nothing else is sent to Meta or Google. You can change your mind at any time through the cookie settings on this site, and you can ask us to stop at any point by emailing us.
Deleting your data
You can ask us to delete the personal data we hold about you at any time. Email info@chilternsurface.co.uk with the subject “Data deletion request”, from the address you contacted us on, and tell us your name and the address the enquiry related to.
We will confirm within 5 working days and complete the deletion within 30 days. This includes asking the advertising platforms above to delete the matched records they hold from us. We may need to keep a limited record where the law requires it — invoices and accounting records, for example — and we will tell you if that applies.
Cookies
We use essential cookies to make the site work, and — only with your consent — analytics and marketing cookies. See our Cookie Policy for details and to manage your preferences.
