This notice explains what we do with personal information. It covers people who visit elitecg.co.uk, people who send us an enquiry through the site or contact us directly, and people at other businesses we approach about tenders and project opportunities. If anything in it is unclear, ask us and we will explain it.
Who is responsible for your information
Elite Contracting Group Ltd is the controller of the personal information described in this notice. We decide what is collected and why.
Elite Contracting Group Ltd
Registered in England and Wales, Company No. 14046093
Saunders House, 52–53 The Mall, London W5 3TA
Data protection contact: Dr Assil Shareef, Managing Director
assil@elitecg.co.uk
Tel 0044 20 3576 1731 · WhatsApp 0044 7878 012662
We have not appointed a Data Protection Officer. We are not required to. Anything to do with this notice, or with information we hold about you, goes to the address or the email above.
What we collect
When you use a contact form on this site, we collect your name, your email address and your message. The form asks for nothing else. Whatever else you choose to put in the message, we hold as well — so please do not use it to send bank details, identity documents, drawings you are not free to share, or anything confidential. Using the form is not compulsory; the telephone, WhatsApp and email routes above reach the same people.
When you contact us directly by email, on the landline or on WhatsApp, we hold your contact details and the correspondence itself. WhatsApp and Instagram messages also sit on Meta’s systems under Meta’s own terms, which we do not control.
Whenever anyone uses the site, our host records technical information automatically: IP address, the approximate location that address suggests, browser and device type, operating system, the page you came from, the pages you looked at, and the date and time. This sits in server logs and is used to keep the site working and secure.
If we approach you about work, we hold your name, job title, employer, work email address and work telephone number. We take these from your employer’s own website, from a published tender or bidders list, or from a construction information service such as Glenigan, and we use them to ask whether you want to receive our company profile or a submission from us. We tell you where we got your details the first time we write to you.
If you send us a CV or an unsolicited application, we hold it and the message that came with it.
We do not ask for special category information — health, ethnicity, beliefs, trade union membership, biometrics — and we do not want it. If you put it in a message to us, we keep it only for as long as it takes to answer you.
Why we use it, and on what legal basis
Answering your enquiry and pricing work for you. Where you are asking about work you might instruct us to do, we rely on Article 6(1)(b) of the UK GDPR: steps taken at your request before entering into a contract. Where you are asking on behalf of a company, we rely on Article 6(1)(f), our legitimate interest in responding to enquiries about our services.
Running a project. Article 6(1)(b) where the contract is with you personally; Article 6(1)(f) where it is with your company and we need to deal with you as its representative.
Approaching businesses about tenders, prequalification and project opportunities. Article 6(1)(f), our legitimate interest in marketing our services to other businesses. We do this business to business only, which is what the Privacy and Electronic Communications Regulations allow without consent. We always say who we are, and we stop the moment we are asked to.
Considering a CV you send us. Article 6(1)(f), and Article 6(1)(b) if we go on to discuss terms with you.
Keeping the site available, secure and free of spam. Article 6(1)(f).
Advertising. Your consent, given through the cookie banner, which you can withdraw at any time.
Accounting and tax records, and records we may need in order to defend a claim about work we carried out. Article 6(1)(c), legal obligation, and Article 6(1)(f).
Where we rely on legitimate interests we have weighed our interest against your rights and are satisfied it does not override them. You can object — see Your rights.
Who else handles it
We do not sell personal information, and we do not share it with anyone for their own marketing.
Hostinger hosts this website and provides our email. It runs the server, the website database in which form submissions are stored, the server logs, and the mailboxes that receive and store your message and our reply.
Meta Platforms receives website usage data if you agree to advertising cookies, and receives your messages if you contact us on WhatsApp or Instagram.
Our accountants, insurers, brokers and professional advisers see personal information where a matter requires it — for example an insurer handling a claim about work we carried out.
A court, a regulator, or anyone else we are required by law to disclose to.
For a project in Spain, we share what is needed with our Spanish group companies, Elite Contracting Group Spain and Lux View Construction, and with the Spanish law firm we work with, so that title checks, NIE, notary and land registry steps can be handled. We tell you before this happens. That law firm is connected to us through a joint venture and is not independent of us; you are free to instruct your own lawyer, and we recommend it.
Information sent outside the UK
Our website and email are hosted within the European Economic Area. Transfers to the EEA are covered by the UK adequacy regulations, so no additional safeguard is needed.
Meta Platforms processes personal information in the United States. Where it does, we rely on the UK extension to the EU–US Data Privacy Framework where Meta is certified under it, or otherwise on the UK International Data Transfer Agreement together with a transfer risk assessment. Ask us and we will tell you which applies.
How long we keep it
We do not keep personal information because it might one day be useful. Each category has a period.
Enquiries that do not turn into work: twenty-four months from our last contact with you. We then delete the message from the mailbox and the stored submission from the website database.
Enquiries that do turn into work: for as long as the project runs, and then for the period in which a claim about the work could still be brought against us. That is six years from completion, twelve years where the contract was executed as a deed, and up to fifteen years for work to a dwelling, where the Defective Premises Act 1972 allows a longer claim.
Accounting and tax records: for as long as tax law requires us to hold them.
Business contact details used for tenders and outreach: until you tell us to stop, or until they go out of date, whichever comes first.
A CV sent to us speculatively: twelve months, unless you ask us to keep it longer or we are already talking to you about a role.
Server logs: our host overwrites these on its own cycle. We do not extend it and we do not copy log data off the server.
Advertising data: in Meta, a browser drops out of our website audience at the end of the membership period we set, which we keep short.
We clear old submissions out of the website database at least twice a year.
Cookies and similar technologies
Every cookie this site sets, what it is for and how long it lasts, is listed in our Cookie Policy. What follows is the short version.
A cookie is a small file a website asks your browser to store. Some are needed for the site to work. Others watch what you do, and those we do not use unless you agree.
Strictly necessary — set without asking, because the site cannot work properly without them. WordPress and Elementor set session and security cookies when someone signs in to administer the site; an ordinary visitor will not normally receive these. Our caching software, LiteSpeed Cache, may set a cookie so the server sends you the correct version of a page. Our cookie banner stores your choice so we do not ask again on every page.
Advertising — only with your consent. The Meta pixel tells Meta that a browser visited a page on this site. We use it to measure whether our Instagram and Facebook advertising works, and to show follow-up advertising to people who have already looked at a page here. Meta can also use it to build advertising audiences on its own platforms.
We do not currently use analytics cookies. If we add them, we will update this notice and ask for your consent before they are used.
Nothing in the advertising group loads until you have agreed to it. If you refuse, those scripts are not placed on the page at all.
You are asked when you first arrive. You can change your answer at any time through the cookie settings link in the footer of every page. Refusing advertising cookies does not restrict any part of this site. You can also block or delete cookies in your browser settings; that may affect the strictly necessary ones, and parts of the site may then behave oddly.
Your rights
Under the UK GDPR you can ask us to give you a copy of the personal information we hold about you; correct anything that is wrong or incomplete; delete it, where we no longer have a reason to keep it; restrict what we do with it while a question about it is being resolved; or send it to you, or to someone you name, in a machine-readable format, where we hold it on the basis of your consent or a contract with you.
You can also object to us using your information for our legitimate interests, including business marketing. If you object to marketing we stop. And you can withdraw consent to cookies at any time; withdrawing it does not make what we did beforehand unlawful.
There is no charge for any of this. Write to assil@elitecg.co.uk, or to Saunders House, 52–53 The Mall, London W5 3TA. We reply within one month. If a request is complicated we will tell you and may take longer, as the law allows. We may need to check who you are before we release anything.
We do not make decisions about you by automated means, and we do not profile you, beyond the advertising audiences described under Cookies.
If you are unhappy
Tell us first, at assil@elitecg.co.uk. Most things are quicker to fix directly.
If we do not put it right, you can complain to the Information Commissioner’s Office, the UK’s data protection regulator:
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
ico.org.uk · Telephone 0303 123 1113
Complaining to the ICO does not stop you bringing a claim in court as well.
How we look after it
The site is served over an encrypted connection. Access to the WordPress administration area and to the company mailbox is limited to the people who need it, under individual accounts with their own passwords. We review who holds an administrator account. We keep the platform, the theme and the plugins updated.
No website can be guaranteed secure. Please do not send confidential documents, identity documents or payment details through the contact form. Ask us and we will arrange a secure route.
Children
This site is for people doing business with us. It is not aimed at children, and we do not knowingly collect information about them.
Changes to this notice
We update this notice whenever what we do changes — a new tool on the site, a new provider, a different retention period. The version date is at the foot of the page. If a change materially affects you we will say so on the site.
Version 1. Published 21 September 2026.
