New Level Construction
Privacy and data requests
Updated 22 September 2026. This notice covers enquiries, website analytics, our website assistant, WhatsApp communications and the staff project workspace operated by New Level Construction.
Contact us
For questions about your information, call +44 7549 270594 or use our contact form. Tell us that your request concerns privacy so our team can handle it.
Information we use
We use the contact details, messages, project addresses, measurements, specifications and files you provide when asking about or ordering work. These may include photographs, drawings and voice messages. Staff records also include account details, access permissions, task updates and activity records. The website uses session information and operational records to support sign-in, prevent abuse and keep the service working.
Why we use it
We use enquiry information to respond to your request, prepare quotations and arrange or deliver services. We use project and staff information to coordinate work, record decisions and provide updates. These activities support steps you request before a contract and performance of agreed services. Administration, security and handling queries support our legitimate interests in running the business. Records may also be needed to meet legal obligations. Where we ask for consent to optional communications, you can withdraw it.
Assistants and people
Our assistants help collect information and answer questions. When AI assistance is enabled, relevant messages and supporting information may be processed by OpenAI to prepare a response. Our team can review enquiries and conversations and take over a discussion. Final quotations and commitments require team confirmation. Ask for a person if you need help or believe an answer is incorrect.
Who receives information
When Telegram notifications are enabled, the company owner receives notices of email code requests, new accounts, team access requests and clicks on call, WhatsApp, contact and quote buttons. These notices include the relevant email address where known, button label, public page path and time. With analytics consent, authorised recipients can also view the session analytics described below. Verification codes, session tokens, typed form values and private project links are not included.
Information is available to authorised administrators and team members who need it for their work. Relevant enquiry details may be included in notifications to the responsible managers. We use service providers for website hosting, storage, authentication and communications, including OpenAI Sites, Cloudflare and Supabase. WhatsApp messages pass through Meta/WhatsApp. These providers may process information outside the UK; their applicable data-processing terms and transfer arrangements govern that processing. Contact us for details about the arrangements relevant to your request.
Website opening and contact notifications
When our server serves a public page, we record its path and time and may notify the company owner through Telegram. Without analytics consent, these opening records do not include IP addresses, account details, referrers, query strings or device identifiers. Counts represent page requests, including repeat openings, rather than unique people. After analytics consent, the saved random browser identifier may connect later page openings to the same numbered visitor and show the browser and approximate country. When a visitor selects Call or WhatsApp, we record the selected action, public page path and time so the team can measure direct contact demand and receive a Telegram notification. The contact-action record does not store the visitor’s IP address or form data.
Optional activity analytics
With your consent, we record random browser and analytics session identifiers, IP address, approximate country, region, city and postcode supplied by our hosting network, device and browser information, screen size, language, time zone, referring website without its query string, public page visits, button and gallery interactions, scroll milestones, calculator interactions and form submission attempts. The browser identifier lets us group returning activity from the same browser under a simple visitor number; it does not reveal your name. The session ID groups activity for up to 30 minutes of inactivity. We do not record typed form values, URL query strings, private workspace activity or GPS location. Signed-in staff activity is excluded. The company owner and individually invited, owner-approved team members can view aggregate statistics, recent events and session details through the private Telegram bot and staff workspace. Invited access can be revoked by the owner. Analytics records and browser identifiers are retained on our server for 90 days; delivered Telegram messages remain in the recipient’s chat until deleted. Choose Analytics preferences in the footer to decline or withdraw consent at any time. Withdrawal stops future recording and removes the identifier from your browser; contact us to request deletion of existing information. Your analytics choice is saved on your device.
Keeping information
How long information is needed depends on whether an enquiry becomes a project, whether work or follow-up remains outstanding, and whether records are required for accounting, disputes or other legal obligations. Ask us about the retention of your particular records. Sending STOP in WhatsApp stops optional updates; it does not itself delete your enquiry or project history.
Request access, correction or deletion
Call the number above or use the contact form and say “Privacy request” or “Delete my data”. Include the phone number or email used for your enquiry and, if available, its reference. Describe the records concerned. Do not send passwords or verification codes. We may ask for enough information to verify that the records belong to you.
You can ask for access, correction, deletion or restriction of your information, or object to its use. Portability and withdrawal of consent apply where relevant. Some records may need to be retained for legal obligations or claims; we will explain any applicable exception. We aim to respond within one month and will explain if an extension is permitted and needed.
You can object to processing based on legitimate interests and to direct marketing. Contact us using the details above. You can also raise a concern with the Information Commissioner’s Office.