Legal

Privacy Policy

Last updated: 18 July 2026

1. Who we are

TufKo Ltd is the data controller responsible for personal information collected through this website and through the services we provide.

TufKo Ltd
37 Gilbert House
Studio Way
Welwyn Garden City
AL7 3FH
United Kingdom

Registered in England and Wales. Company number 16551005.

You can contact us about privacy matters using the contact form available on this website.

2. Information we may collect

We may collect information including:

  • your name and contact details;
  • property, development or inspection information;
  • information submitted through enquiry, booking or callback forms;
  • customer, contractor, inspector and account information;
  • inspection notes, photographs, reports and defect records;
  • messages and correspondence exchanged with TufKo;
  • technical information needed to operate and secure the website;
  • payment, invoice and transaction records where applicable.

Please do not provide sensitive personal information through a general enquiry form unless it is genuinely necessary.

3. How we use personal information

We may use personal information to:

  • respond to enquiries and booking requests;
  • prepare quotations and enter into service agreements;
  • arrange and perform inspections;
  • create reports and manage defects;
  • operate customer, contractor and administration portals;
  • manage accounts, authentication and access permissions;
  • communicate about services and ongoing work;
  • maintain business, financial and audit records;
  • protect the website, users and TufKo against misuse or fraud;
  • meet legal and regulatory obligations;
  • establish, exercise or defend legal claims.

4. Lawful bases

Depending on the circumstances, we rely on one or more of:

  • Contract: where processing is necessary to provide requested services or take steps before entering a contract.
  • Legal obligation: where records or processing are required by law.
  • Legitimate interests: to operate, secure and improve our business, manage enquiries, maintain records and protect legal rights.
  • Consent: where consent is specifically requested and can be withdrawn.

5. Sharing personal information

We may share information only where reasonably necessary with:

  • authorised TufKo personnel;
  • customers, contractors or inspectors involved in relevant work;
  • website, hosting, email, storage and IT service providers;
  • accountants, insurers, legal advisers and professional advisers;
  • payment providers where payment services are used;
  • regulators, courts or public authorities where legally required.

Service providers acting for TufKo must handle personal information appropriately and only for authorised purposes.

6. International transfers

Some technology providers may process information outside the United Kingdom. Where this occurs, TufKo will use an appropriate lawful transfer mechanism and suitable safeguards where required.

7. Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

Retention periods depend on the type of record, contractual and legal requirements, accounting obligations, operational needs and relevant limitation periods. Information that is no longer required will be securely deleted or anonymised where reasonably practicable.

8. Security

We use proportionate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

No internet service can guarantee absolute security. Users are responsible for protecting their own login credentials and notifying TufKo promptly of suspected unauthorised access.

9. Your rights

Depending on the circumstances, you may have rights to:

  • request access to your personal information;
  • request correction of inaccurate information;
  • request deletion of information;
  • request restriction of processing;
  • object to certain processing;
  • request transfer of eligible information;
  • withdraw consent where processing relies on consent;
  • complain to the Information Commissioner's Office.

Some rights are subject to legal conditions and exemptions. We may need to verify your identity before acting on a request.

10. Right to object

You have the right to object where we process your personal information on the basis of legitimate interests.

11. Complaints

Please contact TufKo first through the website contact form so that we have an opportunity to address your concern.

You may also complain to the Information Commissioner's Office, the United Kingdom's data-protection regulator.

12. Changes to this policy

We may update this policy when our services, technology or legal obligations change. The latest version will be published on this page with its revision date.