GDPR statement
This notice outlines how moonstone-form meets the requirements of the General Data Protection Regulation (GDPR).
Lawful bases
We process personal data to respond to enquiries (legitimate interest), to provide services under a contract, and where consent is required for optional website analytics.
Data categories
Typical data includes contact information, project notes, site addresses, and communications relevant to your renovation project.
Processing partners
We share only necessary information with trusted partners such as trades, suppliers, and specialist consultants involved in your project delivery.
Your rights
You can request access to your data, ask for corrections, request erasure, or object to certain processing. We will respond to verified requests promptly.
Data transfers
We keep data within the United Kingdom or the European Economic Area unless a specific project partner requires otherwise, in which case appropriate safeguards are applied.
Retention periods
We retain project records for as long as required for contractual, warranty, or legal obligations, then securely delete or anonymise them.
Contact for GDPR requests
Send GDPR-related requests to [email protected]. Please include a description of your request so we can respond efficiently.
Last updated: April 2026.