Privacy Policy

Opulent Signature Homes Ltd

How we collect, use and protect your personal data

Date of last review: 14 September 2026

Next scheduled review: September 2028

1. Introduction

Opulent Signature Homes Ltd (“Opulent Signature Homes”, “we”, “us” or “our”) provides bespoke building, construction and residential design services. We understand that the personal information you share with us is important, and we are committed to being transparent about how we collect, use, store, share and protect it.

This Privacy Notice explains what personal data we collect, why we collect it, the legal grounds we rely on, who we share it with, how long we keep it, and the rights you have in relation to it. It is written to reflect our obligations under the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

Please take a moment to read this notice carefully. If, having read it, you have any questions about how we handle your personal data, please contact us using the details set out in Section 4 (“How to Contact Us”).

2. Who We Are

Opulent Signature Homes Ltd is a private limited company registered in England and Wales.

Registered company name	Opulent Signature Homes Ltd
Company number	17121540
Registered office	190 Billet Road, London, England, E17 5DX
Nature of business	Residential building, construction and design services, including the planning, project management and delivery of building works and associated design services for clients.
Website	www.opulentsignaturehomes.co.uk

For the purposes of the UK GDPR, Opulent Signature Homes Ltd is the data controller of the personal data described in this notice. We are not currently part of a wider group of companies, and there are no joint controller arrangements in place in respect of the processing described in this notice.

We have not appointed a formal Data Protection Officer, as this is not a statutory requirement for our organisation. Instead, day-to-day data protection queries are handled by our nominated privacy contact – see Section 4 below.

3. Scope of This Notice

This notice applies to personal data we collect and use in connection with:

Visitors to our website;
Prospective, current and former clients and customers, including individuals who request a quotation, enquiry or consultation from us;
Individuals connected with the properties on which we carry out works, including homeowners, occupiers and, where relevant, neighbouring residents;
Our subcontractors, suppliers and professional partners (such as architects, surveyors and building control bodies) where we hold personal data about the individuals who work for or represent them; and
Other individuals who contact us, for example by telephone, email, post or at industry or client events.

We do not currently employ staff directly; our workforce is made up of self-employed contractors and subcontractors engaged on a project-by-project basis. Where we process personal data about our contractors and subcontractors for onboarding, right-to-work and payment purposes, this is described in Sections 5, 10 and 11 below.

We provide our services to individuals located in the United Kingdom and do not currently offer goods or services to individuals located outside the UK.

4. How to Contact Us

If you have any questions about this notice, or about how we use your personal data, please contact us at:

info@opulentsignaturehomes.co.uk

We aim to respond to all privacy-related queries as promptly as possible, and in any event within the statutory timeframes described in Section 18.

5. The Personal Data We Collect

5.1 Information you give to us directly

Depending on your relationship with us, we may collect the following categories of personal data:

Identity and contact details: full name, postal address(es), property address, telephone number(s) and email address(es).
Project and enquiry details: information about the works or design services you are enquiring about or have instructed us to carry out, including property details, specifications, plans, quotations and related correspondence.
Financial information: information reasonably necessary to invoice for and receive payment for our services.
Site access information: details such as keys, alarm codes and access instructions provided to enable us to carry out works at your property (see Section 11).
Images and video: photographs and video recordings of works in progress and completed projects, including “before and after” imagery (see Section 9).

5.2 Special category data

In some circumstances, we may receive special category data – for example, information about health or mobility needs that is relevant to how we plan or carry out works at a property (such as access requirements). Depending on the circumstances, we rely on one of the following lawful conditions under Article 9 UK GDPR for this processing:

Explicit consent (Art. 9(2)(a)) – where you have voluntarily chosen to share this information with us and have given your explicit consent to our use of it where the information is necessary for the performance of a contract and is needed to plan, adapt or safely carry out the works you have instructed us to undertake;
Substantial public interest (read with Art. 9(2)(g)) – where the works are commissioned by a local authority or other public body exercising a statutory function (for example, arranging disability-related adaptations), and that body has confirmed this basis applies to the information shared with us; or
Vital interests (Art. 9(2)(c)) – in rare circumstances where processing is necessary to protect someone’s life and they are unable to give consent.

We only use special category data for the purpose for which it was provided or collected. Where we rely on consent, you may withdraw it at any time by contacting us using the details in Section 4.

5.3 Information we receive from other sources

We may also receive personal data about you from other sources, including:

Subcontractors, suppliers, architects, surveyors and other professional partners we work with in connection with a project;
Publicly available sources, where relevant to verifying details about a property or project; and
Referrals from third parties, such as existing clients or professional contacts, who introduce you to us.

Where we receive personal data about you from a source other than you directly, we will, where required, provide you with the information set out in this notice, including the source of the data, at the point we first communicate with you or within a reasonable period thereafter, in accordance with Article 14 UK GDPR.

6. How We Use Your Personal Data and Our Legal Basis for Doing So

UK GDPR requires that we have a valid legal basis for each way in which we use personal data. The table below sets out our main purposes for processing and the legal basis relied on for each.

Purpose	Legal basis
To respond to enquiries and provide quotations for our services.	Legitimate interests / steps taken prior to entering into a contract (Art. 6(1)(f) / 6(1)(b))
To enter into and perform contracts for building, construction and design services, including project and site management.	Performance of a contract (Art. 6(1)(b))
To liaise with subcontractors, architects, surveyors and building control on your project.	Performance of a contract; legitimate interests (Art. 6(1)(b) / 6(1)(f))
To communicate with you about your project, including updates and scheduling.	Performance of a contract (Art. 6(1)(b))
To invoice for, and process payment of, our services and maintain financial and accounting records.	Performance of a contract; legal obligation (Art. 6(1)(b) / 6(1)(c))
To carry out right-to-work and identity checks on subcontractors.	Legal obligation (Art. 6(1)(c))
To comply with health and safety, building regulations and other legal or regulatory obligations.	Legal obligation (Art. 6(1)(c))
To take and, with consent, use photographs/videos of projects for our portfolio and marketing.	Consent (Art. 6(1)(a))
To maintain the security of our sites, staff, contractors and property.	Legitimate interests (Art. 6(1)(f))
To establish, exercise or defend legal claims.	Legitimate interests (Art. 6(1)(f))
Where you have separately given consent, to use special category (health/mobility) information you provide to plan or carry out works.	Explicit consent (Art. 9(2)(a))

Where we rely on legitimate interests as our legal basis, those interests are: running and administering our business efficiently; managing and delivering client projects; maintaining accurate business and financial records; protecting the security of our sites, staff, contractors and property; establishing, exercising or defending legal claims; and, where consent has separately been obtained for the use of images (see Section 9), showcasing our completed work to promote our services. We have considered that this processing is proportionate and does not override your interests or fundamental rights and freedoms.

Where the provision of personal data is necessary for us to enter into or perform a contract with you (for example, your contact details and project information), we will not be able to provide the relevant services if that information is not provided.

7. Marketing

We do not currently use personal data for direct marketing purposes (for example, marketing emails, SMS or telephone marketing). If this changes in the future, we will update this notice and, where required by law (including under the Privacy and Electronic Communications Regulations), obtain your consent and provide a clear and easy means for you to opt out at any time.

8. Automated Decision-Making and Profiling

We do not currently carry out any automated decision-making or profiling, including through the use of artificial intelligence, that produces legal effects concerning you or similarly significantly affects you. If this changes, we will update this notice to explain the logic involved, the significance of the processing, and your rights under Article 22 UK GDPR, including the right to request human review of any such decision.

9. Photographs, Videos and Site Imagery

As part of showcasing our work, we may take photographs and videos of projects, including “before and after” images of a property. Where such images identify you, your property, or any individual, we only use them for portfolio, marketing or promotional purposes with the prior consent of the relevant homeowner or client. You may withdraw your consent at any time by contacting us using the details in Section 4, and we will stop using the relevant images for that purpose going forward (though we may not always be able to recall images already shared publicly, for example on social media).

Images taken on site may incidentally include other identifiable individuals, such as subcontractors or members of the public. We take reasonable steps to avoid unnecessarily capturing or publishing images of individuals other than our client without an appropriate basis for doing so.

9.1 Drone surveys and inspections

Where we use drones for site surveys or inspections, this may incidentally capture images of neighbouring properties or members of the public, as well as the client’s own site. We only use drones where reasonably necessary for a project, take reasonable steps to minimise the capture of identifiable third parties, and operate in accordance with applicable Civil Aviation Authority rules. Any personal data incidentally captured is not used for any purpose beyond the survey or inspection for which it was collected, and is retained only in accordance with Section 14.

10. Sharing Your Personal Data

We share personal data with the following categories of recipients, where reasonably necessary:

Subcontractors and tradespeople engaged to carry out works on a project, who need relevant project and site access information to complete the work.
Professional partners such as architects, structural engineers, surveyors and building control bodies, where their involvement is necessary for the design, approval or delivery of a project.
IT and software providers who process personal data on our behalf, for example, Microsoft, in connection with our use of business email, document storage and productivity tools.
Professional advisers such as accountants, insurers and, where necessary, legal advisers.
Regulators and public authorities where we are required to disclose personal data by law, or to protect our legal rights.

We do not sell personal data to third parties. Where a third party processes personal data on our behalf as a data processor, we put in place a written data processing agreement reflecting the requirements of Article 28 UK GDPR.

11. Property Access Information

Where necessary to carry out works at your property, we may hold information such as keys, alarm codes and access instructions. This information is:

used solely to enable authorised personnel to access the property to carry out the agreed works;
shared only with the subcontractors or personnel who require it for that purpose; and
securely returned to you, or securely destroyed/deleted, once it is no longer required for the project.

12. Subcontractors and Right-to-Work Checks

We engage subcontractors to help deliver our projects and, as part of onboarding, we carry out right-to-work and identity checks on the individuals concerned. Personal data collected for this purpose (such as identity documents) is used solely to verify eligibility to work and to meet our legal obligations, and is retained only for as long as necessary for that purpose and any applicable statutory retention period. Where we act as a data controller in respect of a subcontractor’s personal data, the relevant provisions of this notice apply; a dedicated supplier/subcontractor privacy notice may also be provided separately.

13. International Transfers

We do not currently transfer personal data outside the United Kingdom. If this changes in the future – for example, where a supplier or software provider stores data outside the UK – we will ensure an appropriate safeguard is in place, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or a UK adequacy regulation, and we will update this notice accordingly.

14. How Long We Keep Your Data

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, taking into account:

the length of our relationship with you and the duration of the relevant project;
any legal, tax, accounting or regulatory retention requirements (for example, financial records are generally retained for six years in line with statutory requirements);
the limitation periods within which legal claims relating to building and construction works may be brought (which, depending on the type of contract, can extend to six or twelve years); and
whether the data is still needed to resolve any dispute, complaint or query.

Once personal data is no longer required, we securely delete or destroy it or anonymise it so that it can no longer be linked to you.

Specific retention periods:

Category of data	Retention period
Client enquiry and project records	6 months – 12 years*
Contracts and financial/accounting records	6 years – 12 years*
Photographs and video of projects	6 years – 12 years*
Subcontractor right-to-work and identity records	2 years post the term of engagement*

(*The above is the maximum retention period personal data will be held for following its final use. Retention may differ depending on the legal basis for processing and other regulatory requirements).

15. How We Protect Your Data

We take the security of personal data seriously and restrict access to personal data to those who reasonably need it to carry out their role or the services requested. Personal data is currently held on our business devices and computer systems, and we take reasonable steps to keep this information secure and to guard against unauthorised access, loss, misuse or disclosure.

16. Cookies and Website Tracking

Our website does not currently use cookies or similar tracking technologies. If this changes – for example, if analytics, advertising, or embedded third-party content (such as maps, videos or social media feeds) is added to the website – we will introduce a cookie banner or similar mechanism allowing visitors to accept or reject non-essential cookies, together with a separate Cookie Policy, and this notice will be updated accordingly.

17. Children and This Notice

Our services are intended for adults, and the youngest age of client we typically serve is 18. We do not knowingly collect personal data from, or market our services to, children. If we become aware that we have inadvertently collected personal data from a child without appropriate consent, we will take steps to delete that information.

18. Your Rights

Subject to certain conditions and exemptions under the UK GDPR, you have the following rights in relation to your personal data:

Right of access: to ask us for a copy of the personal data we hold about you.
Right to rectification: to ask us to correct any inaccurate or incomplete personal data.
Right to erasure: to ask us to delete your personal data in certain circumstances.
Right to restrict processing: to ask us to limit how we use your personal data, without deleting it.
Right to data portability: to ask us to provide certain personal data to you, or to a third party, in a structured, commonly used, machine-readable format, where this right applies (broadly, where processing is based on consent or contract and carried out by automated means).
Right to object: to object to our processing of your personal data where we rely on legitimate interests, or to object at any time to processing for direct marketing purposes.
Right to withdraw consent: where we rely on your consent (for example, for special category data or the use of images), you may withdraw that consent at any time, as easily as you gave it, without affecting the lawfulness of processing carried out before withdrawal.
Rights related to automated decision-making: as explained in Section 8, we do not currently carry out qualifying automated decision-making, so this right does not currently apply; if this changes, we will explain how it applies and how to exercise it.

To exercise any of these rights, please contact us using the details in Section 4. We will not usually charge a fee, and we will normally respond within one month of receiving your request, in accordance with the UK GDPR. We may need to ask you for specific information to help confirm your identity before responding.

19. Complaints

If you are unhappy with how we have handled your personal data, we would welcome the opportunity to resolve this directly. Please contact us using the details in Section 4, and we will aim to acknowledge and investigate your complaint promptly.

Named contact for internal Data Protection complaints:

Kate Lewis – Company Director

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent supervisory authority for data protection matters, at any time. The ICO can be contacted as follows:

Website: ico.org.uk/make-a-complaint
Telephone: 0303 123 1113
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

20. Changes to This Notice

We may update this notice from time to time, for example to reflect changes in the law or in how we process personal data. Where changes are significant, we will take reasonable steps to bring them to your attention. We recommend reviewing this notice periodically, and in any event whenever you provide us with personal data.

21. Applicable Law

This notice, and our processing of personal data, is governed by the UK GDPR and the Data Protection Act 2018. No other data protection regime currently applies to our processing.