Exceptional Building Services website

Privacy Policy

ILIYAN YORDANOV t/a Exceptional Building Services
14 Jubilee Road, Bristol, BS15 4XG
Email: info@ebs-team.co.uk

Last Updated: March 2026

1. Introduction

Exceptional Building Services respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, and protect personal information when you interact with us through our website, email, telephone, or in person.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

ILIYAN YORDANOV trading as Exceptional Building Services is the data controller responsible for your personal data.

Business address:
14 Jubilee Road
Bristol
BS15 4XG

Email: info@ebs-team.co.uk

3. What Personal Data We Collect

We may collect the following types of information:

  • Name
    • Address and project location
    • Email address
    • Telephone number
    • Details about your project or enquiry
    • Payment and invoice information
    • Photographs of works carried out (project documentation)
Photographs may be taken during or after projects for documentation, quality records, and portfolio or marketing purposes. Where photographs include identifiable personal property or information, they will only be used with appropriate consent.
 

We only collect information necessary to provide our services.

4. How We Collect Your Data

Personal data may be collected when you:

  • Contact us via our website contact form
    • Request a quote
    • Email or call us
    • Book a site survey
    • Enter into a contract for building services
    • Make a payment for services

5. How We Use Your Data

Your personal data may be used to:

  • Provide quotations and estimates
    • Schedule and carry out works
    • Communicate about your project
    • Issue invoices and process payments
    • Maintain project records
    • Respond to enquiries
    • Comply with legal and accounting obligations

We do not sell or rent your personal data to third parties.

6. Legal Basis for Processing

We process your data under the following lawful bases:

Contractual necessity
To provide the services you have requested.

Legitimate interests
To manage our business operations and communicate with customers.

Legal obligation
To comply with tax, accounting, and legal requirements.

7. Data Sharing

We may share limited personal data with trusted third parties where necessary, including:

  • subcontractors working on your project
    • accountants, bookkeepers, or authorised administrative assistants helping with financial record management
    • payment processing providers
    • suppliers delivering materials

These parties are required to keep your information secure and use it only for the intended purpose.

We may also use trusted third-party service providers to operate our business systems, including accounting software providers, email providers, website hosting services, and cloud storage platforms. These providers process personal data only on our instructions and in accordance with UK data protection law.

8. Data Retention

We retain personal data only as long as necessary for business and legal purposes.

Typical retention periods include:

  • Project records – up to 6 years
    • Financial records – up to 6 years (for HMRC compliance)

9. Data Security

We take reasonable security measures to protect personal data from loss, misuse, or unauthorised access.

Security measures include restricted access to business systems, password-protected software platforms, secure email communication, and limited access to authorised individuals only.

This includes secure storage of digital records and restricted access to business systems.

10. Personal Data Breach

In the unlikely event of a personal data breach, Exceptional Building Services will take immediate steps to investigate the incident and limit any potential impact.

Where a breach is likely to result in a risk to the rights and freedoms of individuals, we will notify the Information Commissioner’s Office (ICO) without undue delay and, where feasible, within 72 hours, in accordance with UK GDPR requirements.

Where the breach is likely to result in a high risk to affected individuals, we will also inform those individuals without undue delay and provide information about the nature of the breach and any steps they can take to protect themselves.

We maintain internal procedures for identifying, reporting, and managing personal data breaches to ensure personal data is handled responsibly and securely.

11. Your Rights

Under UK GDPR you have the right to:

  • Request access to your personal data
    • Request correction of inaccurate information
    • Request deletion of your data where appropriate
    • Object to certain types of data processing
    • Request restriction of processing
    • Request data portability

Requests can be made by contacting us at info@ebs-team.co.uk.

12. Cookies

Our website may use basic cookies to improve website functionality and performance.

Cookies do not typically identify individual users.

You may disable cookies through your browser settings.

13. Complaints

If you are unhappy with how we handle your personal data, you may contact us directly.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

www.ico.org.uk

14. Updates to This Policy

This Privacy Policy may be updated from time to time.

The latest version will always be available on our website.

 

For all data protection enquiries, please contact:
ILIYAN YORDANOV – Data Controller
Email: info@ebs-team.co.uk