Privacy Policy

Last updated: 18 November 2025

ASHTON PAUL (D&B) LTD ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website ashton-paul.co.uk or use our services.

1. Company Information

2. Legal Basis for Processing

We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We only collect and use your personal information where we have a lawful basis to do so, including:

• Your consent (which you can withdraw at any time)
• To fulfil a contract we have with you
• When we have a legal obligation
• When it is in our legitimate interests (and your rights do not override those interests)

3. Information We Collect

3.1 Information You Provide

We may collect the following personal information that you voluntarily provide:

• Name and contact details (email address, phone number, postal address)
• Project details and requirements when you request a consultation or quote
• Information you provide when booking a consultation or contacting us
• Correspondence and communication records
• Any other information you choose to provide

3.2 Information Automatically Collected

When you visit our website, we may automatically collect:

• IP address and device information
• Browser type and version
• Pages visited and time spent on pages
• Referring website addresses
• Other technical information about your visit

3.3 Analytics and Tracking Technologies

We partner with Microsoft Clarity and Google Analytics to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity.

Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, please visit the Microsoft Privacy Statement.

4. How We Use Your Information

We use your personal information for the following purposes:

• To respond to your enquiries and provide information about our services
• To arrange and conduct consultations
• To provide quotes and proposals for architectural and design services
• To manage projects and deliver our services
• To communicate with you about your project
• To improve our website and services
• To comply with legal obligations
• To send you marketing communications (only with your consent)

5. Cookies

Our website may use cookies and similar tracking technologies. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

6. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

• Analytics Partners: Microsoft Clarity and Google Analytics to understand how visitors use our website and improve user experience (see section 3.3 for details)
• Service Providers: Third-party contractors, builders, or consultants who assist in delivering our services (only the information necessary to perform their services)
• Professional Advisors: Lawyers, accountants, and other professional advisors when necessary
• Legal Requirements: When required by law, regulation, or legal process
• Business Transfers: In connection with any merger, sale, or acquisition of all or part of our business

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Typically:

• Enquiry information: Up to 2 years if no project proceeds
• Client project information: Duration of project plus 6 years (for legal and warranty purposes)
• Marketing consent: Until you withdraw consent
• Website analytics: Up to 26 months

8. Your Rights

Under UK GDPR, you have the following rights:

• Right of Access: Request a copy of the personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal data (in certain circumstances)
• Right to Restriction: Request restriction of processing of your personal data
• Right to Data Portability: Receive your personal data in a structured, commonly used format
• Right to Object: Object to processing of your personal data for certain purposes
• Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, please contact us at ashton@ashton-paul.co.uk.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to read their privacy policies before providing any personal information.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Us and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues: