Legal

Privacy Policy

Last updated: 14 July 2026

1. Who We Are

This privacy policy is issued by David & Stone Group Ltd (company number 04782620), registered office at China Works, 100 Black Prince Road, London, England, SE1 7SJ ("David & Stone", "we", "us", "our"). We are the data controller for the personal data described in this policy under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this policy or how we handle your personal data, you can contact us at info@davidandstone.co.uk.

2. Information We Collect

We collect personal data that you provide to us directly, in particular when you submit an enquiry through our contact forms. Depending on which form you use, this may include:

  • Your name
  • Email address
  • Phone number
  • Organisation name (where provided)
  • The service or division you are enquiring about
  • Property details (where relevant to a property enquiry)
  • The content of your enquiry message

We also use limited technical data via cookies and similar technologies, described in our Cookie Policy.

3. How We Use Your Information

We use the personal data you provide to us to:

  • Respond to and manage your enquiry
  • Provide information about our services where requested
  • Maintain records of correspondence for our legitimate business purposes
  • Meet our legal and regulatory obligations

4. Our Legal Basis for Processing

We rely on the following legal bases under UK GDPR:

  • Consent — where you tick the consent checkbox on our contact forms before submitting your enquiry.
  • Legitimate interests — to respond to and manage the business enquiry you have raised with us, in a way you would reasonably expect.
  • Legal obligation — where we are required to retain or disclose information to comply with the law.

5. How We Store and Share Your Information

Enquiry submissions are stored securely in a database hosted by our service provider, Supabase, and email notifications relating to your enquiry are sent using our email delivery provider, Resend. These providers act as our data processors and only process your data on our instructions, for the purpose of operating our contact forms and responding to you.

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes. We may disclose personal data where required by law or to protect our legal rights.

Where our service providers process data outside the UK, we ensure appropriate safeguards are in place, such as the UK's International Data Transfer Agreement or an adequacy decision.

6. How Long We Keep Your Information

We retain enquiry data for as long as necessary to respond to your enquiry and for a reasonable period afterwards to handle any follow-up correspondence, or as required to meet our legal, accounting or regulatory obligations. We will delete or anonymise your data when it is no longer needed for these purposes.

7. Your Rights

Under UK GDPR, you have the right to:

  • Request access to the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request erasure of your personal data
  • Request that we restrict or stop processing your data
  • Request a copy of your data in a portable format
  • Object to our processing of your data
  • Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, please contact us at info@davidandstone.co.uk. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data appropriately.

8. Cookies

Our website uses cookies and similar technologies as described in our Cookie Policy, including a cookie consent tool that remembers your preferences.

9. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal or regulatory reasons. The date at the top of this page shows when it was last updated.