Loft Invaders | Privacy Policy

 

Privacy Policy

Last updated: 17 June 2026

Loft Invaders Ltd (“we”, “our”, or “us”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, contact us, request a quote, or use our services.

We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), and the Data (Use and Access) Act 2025.

Our website address is: https://loftinvaders.co.uk.

1. Who We Are

  • Business name: Loft Invaders Ltd

  • Address: 6 Swan Mews, Eastbourne, England, BN22 8FD

  • Contact email: info@loftinvaders.co.uk

Loft Invaders Ltd is the Data Controller for the personal information collected through this website and through enquiries made to us.

2. Information We Collect

When you contact us through our website, enquiry form, email, phone, or other communication channels, we may collect the following information:

  • Your name
  • Your email address
  • Your phone number
  • Your address or property location, where needed to provide a quote or service
  • Details of your enquiry, such as the nature of the loft services required
  • Any other information you choose to provide when contacting us

We may also collect technical information through our website and tracking tools, including:

  • IP address
  • Browser type
  • Device information
  • Pages visited
  • How visitors use and interact with our website
  • General browsing behaviour

We do not intentionally collect or request special category data, such as health information, racial or ethnic origin, religious beliefs, or political opinions. Please do not include this type of information when submitting an enquiry unless it is necessary.

3. How We Use Your Data

We use your data for the following purposes:

    • Responding to your enquiry
    • Preparing and sending quotes
    • Arranging appointments or visits
    • Providing our services
    • Communicating with you about your enquiry or booking
    • Providing customer support
    • Managing our business records
    • Improving our website, services, and customer experience
    • Running and measuring advertising campaigns
    • Understanding how visitors use our website
    • Complying with legal and regulatory obligations
    • Handling data protection requests and complaints

4. Lawful Basis for Processing

We rely on the following lawful bases when processing your personal information:

Contract
Where we need to process your information to provide a quote, arrange work, deliver our services, or take steps before entering into a contract with you.

Consent
Where you have given consent, such as agreeing to certain non-essential cookies or marketing communications.

Legitimate interests
Where processing is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This may include responding to enquiries, improving our services, managing customer relationships, maintaining website security, preventing fraud, and promoting our services.

Legal obligation
Where we need to process your information to comply with UK law, tax, accounting, regulatory, or other legal requirements.

5. Cookies & Tracking Technologies

Our website uses cookies and similar storage and access technologies to help the website function, understand how visitors use the site, and support advertising activity.

These may include:

Strictly necessary cookies
These are required for the website to operate properly and cannot usually be switched off.

Analytics cookies
These help us understand how visitors use our website, such as which pages are visited and how people interact with the site.

Marketing cookies and tracking technologies
These may be used to support advertising activity, including tools such as Meta Pixel for Facebook and Instagram advertising.

Tools we may use include Google Analytics, Google Tag Manager, Google Search Console, Microsoft Clarity, and Meta Pixel.

We use a cookie banner to request consent for non-essential cookies where required. You can adjust your preferences or withdraw consent at any time through the cookie settings on our website.

Some low-risk analytics or functionality cookies may not require consent under updated PECR rules, but we will still provide clear information about their use and offer appropriate controls where required.

6. Data Sharing & Third Parties

We may share your personal information with trusted third-party service providers where necessary to operate our business, manage enquiries, deliver services, or improve our website.

These may include:

  • Google Analytics, Google Tag Manager, and Google Search Console for website analytics and tracking
  • Meta Pixel for Facebook and Instagram advertising
  • Microsoft Clarity for website behaviour analytics
  • Tradify for business management and handling enquiries
  • Website hosting, email, IT, and security providers
  • Professional advisers, where required, such as accountants or legal advisers
  • Regulatory bodies, authorities, or law enforcement where legally required

We do not sell or trade your personal data.

Some third-party providers may process data outside the UK or EEA. Where this happens, we rely on appropriate safeguards, such as UK-approved international data transfer mechanisms or contractual protections.

7. Data Retention

We only keep personal information for as long as necessary for the purpose it was collected.

Customer enquiries are usually retained for up to 2 years after the last contact, unless we need to keep the information for longer for legal, accounting, contractual, complaint handling, or business record purposes.

Customer records relating to completed work may be kept for longer where needed for tax, insurance, warranty, legal, or regulatory reasons.

Analytics and advertising data is retained according to the default retention periods of the tools we use, unless adjusted by us.

    8. Data Security

    We use reasonable technical and organisational measures to protect your personal information from loss, misuse, unauthorised access, disclosure, alteration, or destruction.

    These measures may include secure systems, access controls, password protection, secure servers, and limiting access to personal data to those who need it.

    However, no online system can be guaranteed to be completely secure.

    9. Data Breach Procedure

    In the event of a personal data breach, we will assess the risk and take appropriate action.

    Where legally required, we will notify the Information Commissioner’s Office (ICO) within 72 hours of becoming aware of the breach.

    Where a breach is likely to result in a high risk to your rights and freedoms, we will also notify affected individuals without undue delay.

      10. Your Rights

      You have rights under UK data protection law, including:

      • The right to access your personal data
      • The right to correct inaccurate or incomplete data
      • The right to request erasure of your personal data
      • The right to restrict how we process your data
      • The right to data portability
      • The right to object to processing, including direct marketing
      • The right to withdraw consent at any time, where we rely on consent
      • The right to complain about how your personal data is handled

      To exercise your rights, please contact us at:

      info@loftinvaders.co.uk

      We may need to verify your identity before responding to your request. We will only carry out searches for personal information that are reasonable and proportionate. If we need more information from you to deal with your request, we may ask for clarification.

      11. Data Protection Complaints

      If you have a concern about how we collect, use, store, or handle your personal information, please contact us first so we can investigate and respond.

      You can raise a data protection complaint by emailing:

      info@loftinvaders.co.uk

      You may also use the complaints form on our website.

      When we receive a data protection complaint, we will:

      • Acknowledge your complaint within 30 days
      • Take appropriate steps to investigate the matter without undue delay
      • Keep you informed where appropriate
      • Tell you the outcome of your complaint

      If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office (ICO).

      ICO website: www.ico.org.uk

      12. Changes to This Privacy Policy

      We may update this Privacy Policy from time to time to reflect changes in the law, our website, our services, or how we process personal information.

      Any updates will be published on this page with a revised “Last updated” date.