How T & T handles enquiry information.

Who we are

T & T Building Solutions is the trading name used by T&T BUILDING SOLUTIONS LTD. The company number is 16961717. The company is registered in England and Wales.

The registered office is Suite 8 2nd Floor, Cragside House, 52 Heaton Road, Newcastle Upon Tyne, United Kingdom, NE6 1SE. This is the company registered office, not a customer showroom, trading counter or service location. Customer-facing work remains based in South-East London, working across London, Kent, Essex and Surrey.

For privacy questions, email hello@tandtbuildingsolutionsltd.co.uk.

What information we collect

If you use the contact form, we collect your name, email address, optional phone number and enquiry message. If you use the quote request form, we collect your name, email address, phone number, postcode, customer type, service required, project description, timing preference and optional preferred contact method.

Quote photos are optional. If you upload photos, the form accepts up to 5 JPEG, PNG or WebP files, up to 8 MB each. Please avoid including unnecessary personal information or identifiable people unless it is relevant and appropriate to the project.

The forms also use a hidden spam-trap field, same-origin request checks and Cloudflare Turnstile verification data to help protect the website from abuse.

Why we use it and our lawful bases

Quote request information is used to assess your project, contact you about the enquiry and take steps at your request before entering into a contract.

General contact enquiries are used to respond to your message. The lawful basis is legitimate interests where the contract basis is not more appropriate: T & T has a legitimate business interest in answering enquiries about its services.

Security and abuse-prevention checks are handled under legitimate interests: protecting the website, forms, systems and business communications from spam, fraud and misuse.

Business and legal records may be kept where required by legal obligations or where T & T has legitimate business or legal-record interests, including handling disputes, accounting records and compliance.

Photos and file storage

Uploaded quote photos are stored in a private Cloudflare R2 bucket. The bucket is not public. Files are saved with random storage keys, and customer names or other personal details are not used in the filenames.

T & T receives admin notification links to view uploaded quote photos through signed links. Signed links expire after 14 days. Uploaded quote photos are set to expire from R2 after 30 days.

Quote photos are not attached to customer acknowledgement emails. The acknowledgement email may mention that photos were received, but it does not include copies of them.

Service providers

The website uses Cloudflare for hosting/runtime infrastructure, security checks, Turnstile verification and private R2 photo storage. Cloudflare may process technical request data such as IP address, browser and device signals, request metadata and uploaded content where needed to provide those services.

The website uses Resend to send transactional form emails, including admin notifications and customer acknowledgements. Admin notifications are delivered to a Google/Gmail mailbox used to manage enquiries. The admin mailbox address is not published on this site.

Turnstile, cookies and local storage

Turnstile is used on the contact and quote forms to reduce spam and automated abuse. When enabled, the widget creates a short-lived verification token in the form field named cf-turnstile-response. The server validates that token with Cloudflare before accepting the submission.

This site currently uses ordinary Turnstile form tokens and does not configure Turnstile pre-clearance. A cookie banner has not been added because the inspected implementation does not add analytics, advertising trackers or optional marketing cookies. Any strictly necessary Cloudflare security processing is used for security and abuse prevention.

International transfers

Cloudflare, Resend and Google are international service providers. This means personal information may be processed outside the UK when those providers deliver their services, support infrastructure, secure systems or handle email routing.

Where required, T & T expects its service providers to use appropriate contractual, technical and organisational safeguards for international processing.

How long we keep information

General enquiries and quote request emails are kept only for as long as needed to respond, manage the relationship, keep business records and handle any follow-up, dispute or legal requirement.

Uploaded quote photos automatically expire from private Cloudflare R2 storage after 30 days. Signed admin links to quote photos expire after 14 days.

Your rights

Depending on the circumstances, you may have rights to access your personal information, ask for inaccurate information to be corrected, ask for deletion, restrict processing, object to processing, and request portability of information you provided.

The right to object applies where processing is based on legitimate interests. To make a request, email hello@tandtbuildingsolutionsltd.co.uk.

Complaints and changes

Please contact T & T first if you have a privacy concern so it can be reviewed. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint/.

This notice may be updated when the website, enquiry handling, service providers or legal requirements change. The last updated date at the top of the page will be changed when the notice is materially updated.