Privacy Policy

Who We Are

The Cornerstone Group is the shared trading name of Cornerstone Roofing Ltd and Cornerstone Scaffolding Ltd. The website at https://the-cornerstone-group.co.uk is operated jointly by both limited companies, who act as joint data controllers for any personal data submitted through it.

• Cornerstone Roofing Ltd — company number 12161708. Registered office: Unit G, Hove Technology Centre, St. Josephs Close, Hove, England, BN3 7ES.
• Cornerstone Scaffolding Ltd — company number 16736345. Registered office: Unit G, Hove Technology Centre, St. Josephs Close, Hove, United Kingdom, BN3 7ES.

For any privacy-related questions, contact us at info@the-cornerstone-group.co.uk.

Joint Controllers

Cornerstone Roofing Ltd and Cornerstone Scaffolding Ltd are joint controllers under Article 26 of the UK GDPR for personal data submitted through this website. Both companies share access to enquiries received via the contact form so that the right team can respond, depending on whether your enquiry relates to roofing, scaffolding, or both.

You may exercise your data protection rights against either company. We have agreed between ourselves how we respond to your requests, but you remain free to contact either entity using the details above.

What Data We Collect

We only collect personal data that you choose to provide, plus a limited amount of technical data when you visit the site.

• Contact form submissions: name, email address, phone number (optional), enquiry type, and any message content you provide.
• Analytics data: if you consent to analytics cookies, we collect anonymous usage data (pages visited, time on site, referring source) via Google Analytics 4.
• Technical data: when you visit our website, our hosting provider records standard server log information (IP address, browser type, request timestamps) for security and operational purposes.

How We Use Your Data

• To respond to enquiries you submit through the contact form.
• To route enquiries to the appropriate company (Cornerstone Roofing Ltd, Cornerstone Scaffolding Ltd, or both) based on the nature of the enquiry.
• To understand how visitors use our website and to improve it (analytics, only with your consent).
• To maintain the security and integrity of the website.

Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Consent: for analytics cookies. You can withdraw consent at any time via our cookie settings.
• Legitimate interests: for essential website functionality, server logs, and security.
• Contractual / pre-contractual necessity: to respond to enquiries you make through the website.

Data Retention

Contact form submissions are retained for up to 24 months unless you request earlier deletion or unless a longer retention period is required to fulfil a contract or comply with our legal obligations. Analytics data is retained in accordance with Google Analytics' default retention settings (14 months).

Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict processing of your data.
• Data portability.
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at info@the-cornerstone-group.co.uk. You may direct your request to either company; we will coordinate our response.

Third Parties

We use the following third-party processors and services to operate the website:

• Bulldogs Digital Ltd — our website provider. Stores blog content and contact form submissions on our behalf, on UK and EU servers.
• Vercel — website hosting. Data may be processed outside the UK. See Vercel's Privacy Policy.
• Google Analytics — website usage analytics (only with your consent). Data may be processed outside the UK. See Google's Privacy Policy.
• Supabase — image and asset hosting for blog content. See Supabase's Privacy Policy.

International Transfers

Some of our third-party processors (Google, Vercel, Supabase) may process data outside the UK. Where this occurs, appropriate safeguards are in place — including Standard Contractual Clauses and adequacy decisions — to ensure your data is protected to UK GDPR standards.

Cookies

For details about the cookies we use, please see our Cookie Policy.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk/make-a-complaint
• Phone: 0303 123 1113

Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated date.