GDPR Compliance

Last updated: June 2026

DNDH Construction Ltd is committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

What is GDPR?

The General Data Protection Regulation (GDPR) is a European Union regulation that governs the processing of personal data. It gives individuals greater control over their personal data and sets strict requirements for organisations that collect, store, and process such data.

Following Brexit, GDPR has been incorporated into UK law as the UK GDPR, alongside the Data Protection Act 2018. We comply with both UK GDPR and EU GDPR requirements.

Data Controller

Denis Narubins is the Data Controller for DNDH Construction Ltd.

Company: DNDH Construction Ltd
Company Number: 16146279
Registered Office: Cambridgeshire, United Kingdom

Your Rights Under GDPR

Under GDPR, you have the following rights regarding your personal data:

1. Right to be Informed

You have the right to know what personal data we collect, how we use it, and who we share it with. This is covered in our Privacy Policy.

2. Right of Access

You have the right to request a copy of all personal data we hold about you. This is known as a Subject Access Request (SAR). We will provide this information within one month of your request, free of charge.

To make a SAR, contact us at hello@dndhconstruction.co.uk.

3. Right to Rectification

If the personal data we hold about you is inaccurate or incomplete, you have the right to request correction or completion. We will correct the data within one month of your request.

4. Right to Erasure (Right to be Forgotten)

You have the right to request that we delete your personal data. This right applies when:

  • The data is no longer necessary for the purpose it was collected
  • You withdraw your consent
  • You object to the processing
  • The data was unlawfully processed
  • There is a legal obligation to erase the data

We may refuse erasure if we have a legal obligation to retain the data.

5. Right to Restrict Processing

You have the right to request that we limit how we use your personal data. This applies when:

  • You contest the accuracy of the data
  • You have objected to processing and we are verifying the objection
  • Processing is unlawful but you do not want erasure
  • We no longer need the data but you require it for legal claims

6. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format. You can also request that we transfer your data to another organisation.

7. Right to Object

You have the right to object to processing based on legitimate interests. If we cannot demonstrate compelling legitimate grounds, we will stop processing.

You also have the right to object to direct marketing at any time.

8. Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or significant effects. You have the right not to be subject to decisions based solely on automated processing.

How to Exercise Your Rights

To exercise any of your rights, contact us in writing:

Email: hello@dndhconstruction.co.uk

We will verify your identity before processing your request. We respond within one month (three months for complex requests).

What Information We Collect

For details on what personal data we collect and how we use it, see our Privacy Policy.

Our Legal Basis for Processing

We process personal data under the following GDPR legal bases:

  • Article 6(1)(b) - Contract: Processing is necessary for the performance of a contract or to take steps at your request before entering into a contract.
  • Article 6(1)(a) - Consent: You have given consent for specific purposes, such as marketing communications.
  • Article 6(1)(f) - Legitimate Interests: Processing is necessary for our legitimate interests, such as responding to enquiries and improving our services.
  • Article 6(1)(c) - Legal Obligation: Processing is necessary to comply with a legal obligation, such as tax and accounting requirements.

Data Retention

We retain personal data only for as long as necessary:

  • Contact enquiries: 2 years after last contact
  • Customer records: 7 years after project completion (legal/tax requirements)
  • Marketing consent: Until consent is withdrawn

Transferring Data Outside the EEA

We do not transfer your personal data outside the European Economic Area (EEA). All data is stored and processed within the UK/EU.

Right to Complain

If you believe we have not handled your personal data in accordance with the law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

  • Phone: 0303 123 1113
  • Website: ico.org.uk
  • Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Changes to This Policy

We may update this GDPR compliance statement from time to time. Any changes will be posted on this page with an updated revision date.

Contact Us

If you have any questions about how we handle your personal data, please contact:

DNDH Construction Ltd
Data Controller: Denis Narubins
Email: hello@dndhconstruction.co.uk
Phone: 07411 482595