Privacy Policy

How we collect, use, store and protect your personal data.

Last updated: 17 September 2026

1. Introduction

Hirsiset Scotland ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit hirsisetscotland.com (the "Website") or engage with our services.

This policy is provided in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

The data controller responsible for your personal data is:

3. What Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identity data: your name.
  • Contact data: your email address, telephone number and postal address.
  • Enquiry data: any information you provide via our contact form or by email, phone or post.
  • Technical data: IP address, browser type and version, time zone, operating system and platform, and other technology identifiers on the device you use to access the Website.
  • Usage data: information about how you use the Website, including pages visited, time spent, and navigation paths.

4. How We Collect Your Data

We obtain personal data through:

  • Direct interactions: when you fill in our contact form, email us, call us, or otherwise correspond with us.
  • Automated technologies: as you navigate the Website, we may automatically collect technical and usage data using cookies, server logs and similar technologies. See our Cookie Policy for details.

5. Lawful Basis for Processing

Under the UK GDPR, we rely on the following lawful bases to process your personal data:

PurposeLawful Basis
Responding to your enquiries and providing quotationsLegitimate interest / Performance of a contract
Sending information you have requestedConsent
Improving our Website and servicesLegitimate interest
Analytical cookies and website analyticsConsent
Complying with legal obligationsLegal obligation

6. How We Use Your Data

We use your personal data to:

  • Respond to enquiries and provide quotations for our log house building services.
  • Communicate with you about projects and services.
  • Improve our Website, products and services.
  • Maintain the security of our Website.
  • Comply with legal and regulatory obligations.

7. Data Sharing

We do not sell, rent or trade your personal data to third parties. We may share your data with:

  • Service providers: trusted third parties who assist us in operating the Website and conducting our business (e.g. hosting providers, email service providers), subject to contractual obligations to keep your data secure and confidential.
  • Legal requirements: if required by law, regulation, court order, or governmental authority.

8. International Transfers

We aim to keep your data within the UK and European Economic Area (EEA). If any data is transferred outside the UK/EEA, we ensure appropriate safeguards are in place in accordance with UK GDPR, such as Standard Contractual Clauses or an adequacy decision.

9. Data Retention

We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements. Typically:

  • Enquiry data: retained for up to 24 months after your last interaction, unless a project proceeds.
  • Project/contract data: retained for 6 years after completion for legal and tax purposes.
  • Website analytics data: retained in accordance with our analytics provider's retention settings (typically up to 26 months).

10. Your Rights

Under the UK GDPR you have the following rights regarding your personal data:

  • Right of access — request a copy of the data we hold about you.
  • Right to rectification — request correction of inaccurate or incomplete data.
  • Right to erasure — request deletion of your data where there is no compelling reason for continued processing.
  • Right to restrict processing — request that we limit the processing of your data.
  • Right to data portability — request a copy of your data in a structured, commonly used format.
  • Right to object — object to processing based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details in Section 2 above.

11. Data Security

We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These include encryption, access controls and regular security reviews.

12. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of every website you visit.

13. Children's Privacy

Our Website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it promptly.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

15. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

16. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: