Privacy Policy

This privacy notice explains how Snagged Building Services Ltd ("Snagged", "we", "us") collects, uses and protects your personal data when you enquire about, book or receive a snagging inspection service, or when you visit our website snagged.co.uk. We are the data controller for the personal data described here.

1.What data we collect

We collect personal data you provide directly to us via our website booking form, contact form, telephone or email. This includes:

• Name
• Email address
• Phone number
• Full property address (including plot number and development name where relevant)
• Developer or agent details (for access coordination)
• Survey type, completion or handover date
• Any additional information you choose to share about the property or your requirements

We do not collect payment card details. Payment is taken by bank transfer or cash at the survey; we do not store card numbers.

2.How we use it

We use your personal data only for the purposes set out below, on the following lawful bases under the UK GDPR:

• To provide the survey service (contract): arranging your appointment, coordinating access with the developer, delivering the inspection, and issuing the report.
• To issue your invoice and take payment (contract).
• To communicate with you about your survey (contract or legitimate interests): appointment reminders, follow-ups on defects, revisits.
• For our accounts, tax and regulatory records (legal obligation): retention periods set by HMRC, our accountants and our professional body.
• To defend or make legal claims where necessary (legitimate interests).
• To ask for feedback or a Google/Trustpilot review (legitimate interests): only once, after your report is delivered.

3.Who we share it with

We do not sell your data. We only share it where necessary to deliver the service or comply with the law:

• Your developer or estate agent, only where you specifically ask us to raise the report on your behalf. By default, the report is sent to you and it is your responsibility to forward it.
• Our accountants and bookkeeper, for invoicing and tax records.
• Netlify (our website host) and Microsoft (Outlook) (our email provider), as data processors on our behalf.
• Google Workspace / Microsoft 365 for document storage, both under standard data processing agreements.
• Regulatory or legal authorities where required by law.

None of your personal data is transferred outside the UK or EEA in a form or to a country that does not provide equivalent data protection standards.

4.How long we keep it

We retain your data for the periods below:

• Enquiry only (no booking): up to 12 months, then deleted.
• Completed inspection records and reports: 6 years, in line with HMRC record-keeping requirements and to defend potential claims under the Limitation Act 1980.
• Invoices and accounting records: 7 years, as required by HMRC.
• Marketing consent records (if you have opted in): until you unsubscribe or ask us to delete them.

5.Your rights

Under the UK GDPR, you have the right to:

• Ask for a copy of the personal data we hold about you (right of access)
• Ask us to correct data that is inaccurate or incomplete (right to rectification)
• Ask us to delete your data, where we no longer need it and no legal obligation prevents it (right to erasure)
• Ask us to restrict how we process your data in certain circumstances
• Object to processing based on our legitimate interests
• Ask us to transfer your data to another provider (data portability)
• Withdraw any consent you previously gave

To exercise any of these rights, contact us at info@snagged.co.uk. We will respond within one calendar month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

6.Cookies and website analytics

Our website uses only strictly necessary cookies and does not set any third-party marketing or advertising cookies. We use basic first-party analytics from Netlify to understand aggregated traffic (page views, referrers, country). No individual user is identified or tracked.

Fonts are loaded from Google Fonts, which may set a technical cookie. No personal data from your visit is shared with any advertising network.

7.Security

We take appropriate technical and organisational measures to protect your personal data, including:

• HTTPS encryption on our website and email in transit
• Two-factor authentication on our business accounts
• Access restricted to authorised personnel only
• Regular review of data held and prompt deletion of records no longer needed

No system is 100% secure. If a data breach occurs that is likely to affect your rights, we will notify you and the ICO within the required timescales.

8.Changes to this policy

We may update this privacy notice from time to time. The current version is dated at the top of the page. Material changes will be communicated to you where practical.

9.Contact and complaints

This privacy notice is version September 2026 and applies to all customers, enquirers and website visitors from 20 September 2026 onwards.