GDPR statement

airy-horizon adheres to the UK GDPR and Data Protection Act 2018. This page outlines how we handle personal data in compliance with these rules.

Data controller

airy-horizon is the data controller for information provided directly to us.

Lawful basis for processing

We process data only when we have a lawful basis to do so.

Contractual necessity

To prepare proposals and deliver construction services.

Legitimate interest

To respond to enquiries and maintain records of client communication.

Legal obligation

To meet health, safety, and construction compliance requirements.

Data protection measures

We keep personal data secure through technical and organisational safeguards.

Access to personal information is limited to authorised staff and trusted partners who require the data to complete project tasks. We review access permissions regularly and use secure storage systems.

Any third-party data processor is required to meet equivalent data protection standards.

Data transfers

We store data within the United Kingdom and do not transfer it internationally.

Requests and complaints

You can request access, correction, or restriction of your data.

Data access

We respond to access requests within 30 days.

Corrections

Updates are applied once we verify the request.

Complaints

You may contact the UK Information Commissioner’s Office if needed.