Privacy Policy

Company details

APG Steel Structures Limited · Registered in England and Wales, company no. 17427281 · Registered office: 13 Sudbury Close, Romford RM3 9FL · VAT no. GB529662656 · Email: [email protected] · Phone: 020 8058 8414

Who we are

APG Steel Structures Limited ("APG Steel", "we") is responsible for the personal information described here, as its controller. If you have any question about it, or want to use your rights, email us at [email protected] or write to us at our registered office, 13 Sudbury Close, Romford RM3 9FL, United Kingdom.

What we collect and why

• Quotes and orders. Your name, email, phone number, company name, delivery or site address (including any map pin you drop), the drawings and files you upload, your notes, and the details of what you order and pay. We use them to price your job, make and deliver the steel, invoice you and deal with any after-sales questions. Legal basis: performing our contract with you, or taking steps you ask for before one; and keeping the business and tax records the law requires.
• Your customer account. Your email address (we send a one-time code to it instead of using a password), your profile and saved addresses, and, if you give them, your company number and VAT number. Legal basis: providing the account you asked for.
• Enquiries and site visits. What you send through our contact and consultation forms: name, email, phone, postcode, site address, preferred times and your message. We use it to reply and to arrange a visit. Legal basis: steps you ask for before a contract, and our legitimate interest in answering enquiries.
• Project updates by email. Your email address and a record of when you subscribed. Legal basis: your consent, which you can withdraw at any time with the unsubscribe link in every email or by contacting us.
• Phone calls. Calls to our office line may first be answered by an automated assistant that takes your details, answers common questions and passes your call or message to our team. Calls to and from our office line are recorded, and we keep your phone number, the time of the call and a written record of the conversation. We use these to handle your enquiry, to keep an accurate record of what was agreed, and to check and improve our service. Legal basis: our legitimate interests in running and improving our business. No decision with legal or similarly significant effects is made about you by automated means alone.
• WhatsApp. If you message us on WhatsApp, we see your name, number and messages. WhatsApp processes them under its own terms and privacy policy. Legal basis: our legitimate interest in answering you the way you chose to contact us.
• Using this website. Our hosting and security providers keep technical logs (such as your IP address, browser and the pages requested) to keep the site secure and working. When you type an address, what you type is sent to Google to suggest matching addresses, and the map you use to place a pin is loaded from Google Maps. The map on our contact page comes from OpenStreetMap, and some photos are loaded from Unsplash. These providers receive your IP address so they can deliver their content. Legal basis: our legitimate interests in a secure, working website. See our Cookies page for the small files we use.

Who we share it with

We never sell your personal information. We share it only where needed with:

• the provider of our website and business software, which hosts this site and our customer, quote, order and phone records and runs our call assistant;
• our email provider (Google Workspace);
• Cloudflare, which protects this website and helps deliver it quickly;
• Google, for address suggestions and maps;
• our accountants and professional advisers, under a duty of confidentiality;
• HMRC, the police or other authorities where the law requires us to.

Our service providers act on our instructions and must keep your information secure. Some of them process data outside the UK. When they do, we rely on the UK's adequacy regulations (for example for the European Economic Area) or on approved safeguards such as the ICO's International Data Transfer Agreement or the UK Extension to the EU–US Data Privacy Framework.

How long we keep it

• Orders, invoices and payment records: six years after the end of the financial year they belong to, as UK tax law requires.
• Quotes that did not go ahead, enquiries and site-visit requests: up to two years after we last heard from you.
• Call recordings and call records: up to twelve months, unless we need them longer for an order, a complaint or a dispute.
• Your customer account: until you delete it; the order records above are then kept for the period shown.
• Project updates: until you unsubscribe. We keep a note of your email address so that we do not contact you again.
• Website logs: for the short period set by our hosting and security providers.

Your rights

You have the right to ask for a copy of your personal information, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. You can always object to marketing. If you have an account, you can download your information and delete your account yourself from your account page.

To use any of these rights, email us at [email protected]. We will reply within one month. If you are unhappy with how we have handled your information, please tell us first; you also have the right to complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

Keeping it safe

This website is served only over an encrypted connection, customer accounts use one-time sign-in codes rather than passwords, and access to customer records is limited to the people who need it to do their job.

Changes to this policy

We will update this page if how we use personal information changes. The date at the top shows when it was last updated.