What we do with your details.
This covers the personal data you send us through the enquiry form on this website: what we collect, why we are allowed to, who else sees it, where it goes, how long we keep it, and what you can ask us to do about it.
The short version: we use what you type into the enquiry form to answer you and to price the job. Three suppliers handle it on the way, one of them stores a copy in the United States, we do not market to you, and the site sets no cookies. The detail is below.
Who we are
Axora Construction Ltd is the data controller for the personal data described on this page. That means we decide what happens to it, and we are answerable for it.
We do not have a Data Protection Officer. We are not required to appoint one: we are not a public authority, we do not monitor people, and we do not handle sensitive data at any scale. Naming a role we have not filled would only mislead you. Chris Wall deals with these requests himself.
What the enquiry form collects
Only what is on the form in front of you:
There is one field on the form you cannot see, named website. People never fill it in because it is hidden; automated spam scripts fill in everything they find. If it comes back filled in we throw the submission away and no email is sent. There is no database behind this form: a genuine enquiry becomes an email and nothing more. Section 07 says how long we keep it.
If you email or ring us instead of using the form, everything on this page still applies to the details you give us.
Why we do it, and what allows us to
We use your details to read your enquiry, reply to it, price the work, talk it through with you, and, if it turns into a job, set the contract up and run it.
Our lawful basis is Article 6(1)(f) of the UK GDPR, legitimate interests. The interests we are pursuing, in plain words: reading, answering and pricing the enquiries people choose to send us, and keeping a record of what was asked and what we quoted.
We have weighed that against your privacy. Answering an enquiry you chose to send us is what you would expect to happen, we ask for no more than we need to answer it, and we do nothing else with it. If you disagree, section 10 is the right to object and it applies here in full.
Two narrower points, so the picture is complete:
- If you are enquiring in your own name rather than on behalf of a company, for example a private client or a sole trader, the work we do to get you a price and set up a contract is also covered by Article 6(1)(b): steps taken at your request before entering into a contract.
- Once a job has been invoiced, your contact details end up on tax, VAT and CIS records. We keep those because the law tells us to, which is Article 6(1)(c).
We do not ask you to consent to any of this, and there is no tick box on the form. Consent has to be a free choice, and it would not be a free choice if it were the price of getting a reply.
We do not use your details for marketing. No newsletter, no mailing list, and we do not pass them to anyone who sells things.
Nothing here is decided by a machine. There is no automated decision making and no profiling: one of the two directors reads every enquiry.
Do you have to fill it in?
No. Giving us your details is not required by law and it is not a condition of any contract.
We ask for a name and an email address because without them we cannot answer you, and that is the only consequence of leaving them out. Everything else on the form is optional and only helps us price the job properly. If you would rather not type anything in, ring 01904 373037 instead.
Who else sees it
Inside Axora, the two directors: Chris Wall and Tom Ellis. The enquiry goes to both mailboxes, and we have given nobody else access to them.
Outside Axora, three suppliers handle it on our behalf:
Each of them acts on our instructions under their data processing terms, and none of them is allowed to use your details for their own purposes. We do not sell your data and we do not share it with anyone else, unless the law requires us to.
Where it goes outside the UK
Some of it leaves the UK, so here it is plainly. Resend stores message content, delivery logs and account records in the United States. Your enquiry is message content, so a copy of it sits on servers in the United States for as long as Resend keeps it.
Resend's sending region setting controls where an email is sent from, not where it is stored. We could not honestly tell you your enquiry is held in the UK, so we are not going to.
Railway and Microsoft are United States companies as well. Where they process your details outside the UK, the same safeguard applies.
Each of the three handles your details under a data processing agreement carrying one of the two safeguards UK law recognises for this: the International Data Transfer Addendum to the EU Standard Contractual Clauses, issued by the Information Commissioner under section 119A of the Data Protection Act 2018, or the UK Extension to the EU-US Data Privacy Framework. Which one applies differs by supplier.
You are entitled to see the safeguards we rely on. Email c.wall@axoraconstructionltd.co.uk and we will send you a copy.
How long we keep it
The six and twelve year figures are the limitation periods in the Limitation Act 1980: six years to bring a claim on an ordinary contract, twelve where the contract was signed as a deed. While someone can still bring a claim about a job, we need the records to answer it.
At enquiry stage there is no database behind this form: your enquiry is an email in two mailboxes, so deleting it means deleting those emails. If the job goes ahead, the same name, email and phone number also end up in our job records and our accounts, and the periods above are what govern those.
Keeping it safe
- Everything you send through this website travels over an encrypted connection (https).
- The enquiry mailboxes are seen by the two directors and nobody else.
- The form limits how long each field can be, refuses anything that is not the shape it expects, and limits how many enquiries one connection can send in an hour. Between them that stops the form being used to flood the mailbox.
We hold no information security certification such as ISO 27001, so we do not claim one. What is written above is what we actually do.
Your rights
You can ask us to:
- Give you a copy of the personal data we hold about you, and tell you what we do with it.
- Correct anything that is wrong or incomplete.
- Delete it, where we no longer have a reason to keep it.
- Restrict what we do with it while a question about it is sorted out.
- Stop using it altogether, which is the right to object and has its own section below.
Data portability, the right to be handed your data in a portable format, applies where the processing runs on consent or on a contract and is done by automated means. Answering a business enquiry runs on legitimate interests, so it does not apply there. It can apply if you enquired in your own name and we went on to contract with you, which is the Article 6(1)(b) case in section 03. Ask and we will tell you which of the two you are in.
Ask by emailing c.wall@axoraconstructionltd.co.uk. It costs nothing, and we will deal with it within one month. If your request is complicated we can take up to two months longer, and if we need that time we will tell you why inside the first month.
We may ask you to confirm who you are before we act, so that we do not hand your details to somebody else.
Your right to object
Because we rely on legitimate interests, you have the right to object to what is described in section 03, at any time, under Article 21 of the UK GDPR. It costs nothing and you do not have to give a reason.
Tell us and we will stop, unless we can show compelling legitimate grounds that override your interests, or we need the records to establish, exercise or defend a legal claim. If we do carry on, we will tell you exactly why.
Email c.wall@axoraconstructionltd.co.uk with Object in the subject line, or ring 01904 373037.
How to complain to us
You have a right under section 164A of the Data Protection Act 2018 to complain to us directly about how we have handled your personal data. You can do that in any of these ways:
- Email c.wall@axoraconstructionltd.co.uk with Data protection complaint in the subject line.
- Write to Axora Construction Ltd, C/O Holmes & Co Accountants Ltd, 16 Westgate, Baildon, Shipley, BD17 5EJ.
- Ring 01904 373037. We will write the complaint down for you and send you a copy to check.
Tell us your name, how to get back to you, what happened and what you would like us to do. Put it in whatever form suits you. If writing it down is difficult, ring 01904 373037 and we will take it down for you.
What happens next: we acknowledge your complaint within 30 days, look into it, keep you posted on how it is going, and tell you the outcome.
How to complain to the ICO
If you are not happy with how we have handled your personal data, you can complain to the Information Commissioner under section 165 of the Data Protection Act 2018. You can go to the ICO whether or not you have come to us first.
Changes to this notice
If we ever want to use your details for something other than what section 03 describes, we will tell you what and why before we do it, not afterwards.
This notice is written to the UK GDPR and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025. It is reviewed on the date below, or sooner if anything we do changes.
Ask Chris directly. You will get a person, not a ticket number.