1. Home
  2. Privacy and Security Policies

Privacy and Security Policies

Privacy Policy

Last Updated: November 2026

Steel Build Masters Ltd ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit steelbuildmasters.co.uk, purchase our products or services, or authenticate using our Google-integrated applications.

1. Data Controller Details

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the Data Controller is:

  • Company Name: Steel Build Masters Ltd (Registered in England and Wales, Company No. 5878134)
  • Registered Address: Twyford Mill Farmhouse West, Pig Lane, Bishop's Stortford, Hertfordshire, CM22 7PA, United Kingdom
  • Contact Email: sales@steelbuildmasters.co.uk
  • Telephone: 0800 368 9100

2. Information We Collect

We may collect and process the following categories of personal data:

  • Identity and Contact Data: Name, company name, billing and delivery addresses, email address, and telephone number when you request a Quick Quote, place an order, or contact us.
  • Transaction and Project Data: Details about quotes, Bills of Materials (BOM), site surveys, planning documentation, and payment records.
  • Technical and Usage Data: IP address, browser type, operating system, and browsing activity collected via cookies when you navigate our Shopify storefront.
  • Google Account Data (via Google OAuth): If you connect or sign in using Google, we access only the specific data authorised by you on the Google OAuth consent screen, which may include [select/edit as applicable: your name, email address, profile picture, and/or specific Google Workspace data such as Gmail/Calendar/Drive files].

3. Google API Services User Data Policy & Disclosures

Our application's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

  • How We Access Google Data: We request access to your Google account strictly through standard Google OAuth 2.0 authentication. We never ask for or store your Google password.
  • How We Use Google Data: We use the data obtained from Google APIs solely to [insert your specific purpose, e.g., authenticate your user account, send quote confirmations, or sync project schedules]. We do not use Google user data for serving advertisements, nor do we allow humans to read your data unless we have your explicit affirmative agreement, it is necessary for security purposes, or it is required to comply with applicable law.
  • Data Sharing & Transfers: We do not sell, rent, or trade your Google user data to any third parties. Data is only transferred to essential infrastructure providers (such as Shopify and secure cloud hosting) strictly as necessary to operate our services.
  • Data Storage, Security, and Retention: OAuth access tokens and any associated Google user data are encrypted in transit (via TLS/HTTPS) and at rest. We retain your Google data only for as long as your account remains active or as needed to provide you with our services.
  • Revoking Access & Deletion: You can revoke our application's access to your Google account at any time via your Google Account Security Settings (https://account.google.com). Upon revocation or upon your written request to sales@steelbuildmasters.co.uk, we will permanently delete your stored OAuth tokens and associated Google user data within 30 days.

4. How We Use General Personal Data & Lawful Basis

Under UK GDPR, we process your general customer data under the following lawful bases:

  • Contractual Necessity: To prepare quotations, process orders, deliver steel buildings, and carry out groundworks or construction services.
  • Legal Obligation: To maintain accurate financial and tax records under UK law.
  • Legitimate Interests: To respond to customer enquiries, improve our website, and prevent fraud.

5. Third-Party Service Providers

We share necessary data with trusted third-party processors who help us run our business, including:

  • Shopify Inc. (e-commerce platform hosting)
  • Payment Processors (to securely handle card, PayPal, and bank transfer transactions)
  • Haulage, Engineering, and Construction Partners (solely to fulfil your building delivery and site works)

6. Your Rights Under UK GDPR

You have the right to:

  • Request access to the personal data we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request erasure of your personal data ("right to be forgotten").
  • Object to or restrict the processing of your data.
  • Lodge a complaint with the Information Commissioner's Office (ICO) in the UK (ico.org.uk).

To exercise any of these rights, please email us at sales@steelbuildmasters.co.uk or write to our registered office address listed in Section 1.

Powered by Omni Themes