Stonebridge & Sons ("we", "us", "our") is a topping, flailing and sand school contracting business based in Guernsey. This policy explains what personal data we collect through this website and in the course of our work, why we collect it, how long we keep it, and what rights you have over it.
The law that applies
Guernsey is not part of the EU, so the EU's GDPR does not directly apply to us. Instead we're covered by The Data Protection (Bailiwick of Guernsey) Law, 2017 (the "DPL"), which gives individuals equivalent rights and protections to the GDPR and is overseen by Guernsey's Office of the Data Protection Authority (ODPA).
Who we are
For the purposes of the DPL, Stonebridge & Sons is the data controller for personal data collected through this website and through our work. Contact details are at the bottom of this policy.
What we collect
We only collect what's needed to quote and carry out work. This is typically:
- Name and contact details (phone number, email address)
- Address or field/site location
- Details of the work requested (type of job, size, timing, access notes)
- Basic invoicing and payment records, where work is carried out
We don't ask for or knowingly collect sensitive categories of data (health information, financial account details beyond what's needed to invoice, etc.), and this site is not directed at children.
Why we collect it, and our lawful basis
- To respond to enquiries and provide quotes — necessary to take steps at your request before entering into a contract
- To carry out agreed work and invoice for it — necessary for performance of the contract between us
- To keep basic job and accounting records — necessary to comply with our legal obligations (e.g. tax/accounting record-keeping) and our legitimate interest in maintaining accurate business records
We don't use your data for marketing, profiling, or automated decision-making, and we don't sell it or share it with third parties, except where the law requires us to (for example, to a tax authority).
How long we keep it
As a general rule:
- Enquiries that don't lead to a job are kept for around 12 months, then deleted
- Records relating to completed work (invoices, job details) are kept for as long as required for accounting and tax purposes — typically 6 years, in line with standard Guernsey record-keeping practice — then deleted
Cookies and tracking
This website does not use cookies, analytics, or any third-party tracking scripts. Nothing about your visit to this site is recorded unless you choose to contact us.
Keeping your data secure
We take reasonable steps to protect the personal data we hold, including limiting who has access to enquiry and job records and keeping them only on secured personal devices and email accounts. As a very small business, we don't hold data in large databases or share it with external processors beyond what's needed (for example, our email provider).
Your rights
Under the DPL, you have the right to:
- Ask what personal data we hold about you, and get a copy of it
- Ask us to correct it if it's inaccurate or incomplete
- Ask us to delete it, where we're not required to keep it for legal reasons
- Object to how we're using it, or ask us to restrict our use of it
To exercise any of these rights, contact us at timstonebridge@hotmail.com. We'll respond within a reasonable time.
If you're unhappy with how we've handled your data, you have the right to complain to Guernsey's Office of the Data Protection Authority (ODPA), the independent body responsible for enforcing the DPL.
Changes to this policy
If how we handle personal data changes, we'll update this page and change the date at the top.
Contact
Stonebridge & Sons, Guernsey
Phone: 07781 158 006
Email: timstonebridge@hotmail.com
This policy is a general template written to reflect the principles of Guernsey's DPL, not a substitute for legal advice. If the business grows to handle personal data at greater scale or complexity — larger customer databases, marketing lists, or staff records — it's worth having this reviewed by a professional or checked against ODPA guidance.
