Introduction
1.1 We are committed to safeguarding the privacy of our website visitors, customers, and enquirers. This policy explains how we handle your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (together, the "Data Protection Legislation").
1.2 This policy applies where we act as a data controller for the personal data of our website visitors, enquirers, and customers - meaning cases where we decide the purposes and means of processing your personal data.
1.3 This policy explains what data we collect, what we do with it, how long we keep it, and how you can exercise your rights, including your choice over whether to receive marketing communications from us.
1.4 In this policy, "we", "us" and "our" refer to Uncommon Projects Ltd. Further details are in section 10.
1.5 We may update this policy from time to time. Check back periodically to stay informed of any changes.
2. How we use your personal data
2.1 This section sets out the categories of personal data we process, the purposes of that processing, and the legal basis in each case.
2.2 Usage data. We collect data about how you use our website, including IP address, approximate location, browser and device type, referral source, and browsing behaviour on our site. This is collected via Google Analytics 4 (GA4) and similar tools. We use this to understand and improve our website and services. We only set analytics cookies with your consent, given via the cookie banner on our site (see section 8). Legal basis: consent.
2.3 Enquiry and brochure request data. When you submit an enquiry form, request a brochure, or contact us by email, telephone, or social media messaging, we collect your name, email address, phone number, postcode, and any details you provide about your project. Telephone enquiries may generate call logs or voicemail messages, though we do not record calls. We use this data to respond to your enquiry and, where relevant, to provide a quote or discuss your project. Legal basis: taking steps at your request prior to entering into a contract, and/or our legitimate interest in responding to enquiries.
2.4 Account and customer data. If you become a customer, we process your name, contact details, and postal address to deliver our goods and services and to communicate with you about your order. Legal basis: performance of a contract, or steps taken at your request before entering into one.
2.5 Marketing data. If you opt in to our newsletter or marketing communications - whether via our website newsletter form, our enquiry form, or a lead form on a platform such as Facebook or Instagram (Meta) - we will use your email address (and, where provided, other contact details) to send you newsletters and marketing about our products and services. We will only do this where you have given clear, opt-in consent, which is always separate from any other form submission. You can withdraw this consent at any time by using the unsubscribe link in any marketing email, or by contacting us using the details in section 10. Legal basis: consent.
2.6 Advertising and audience matching. We run advertising campaigns on platforms including Meta (Facebook/Instagram) and Google Ads. Where you have consented to marketing cookies via our cookie banner, we may share limited data (such as a hashed version of your email address) with these platforms to measure the effectiveness of our advertising and to reach people with similar interests. This does not involve sharing your data in a form that identifies you to the advertising platform beyond what is needed for this matching process. Legal basis: consent.
2.7 Transaction data. Where you purchase goods or services from us, we process your contact details, order details, and payment information (handled by our payment provider - we do not store full card details ourselves) to fulfill your order and keep proper records. Legal basis: performance of a contract, and our legitimate interest in the proper administration of our business.
2.8 Administrative and legal purposes. We may process any personal data described in this policy where necessary for record-keeping, or to establish, exercise, or defend legal claims. Legal basis: our legitimate interests in administrative record-keeping and protecting our legal position.
2.9 If you supply another person's personal data to us, you must have their authority to do so and must comply with the Data Protection Legislation in doing so.
3. Sharing your personal data
We share personal data with the following categories of recipients, only as needed for the purposes described in section 2:
3.1 Our CRM and marketing systems - we use a CRM (currently Pipedrive) to store and manage enquiry, customer, and marketing contact records, and to send email newsletters and marketing campaigns.
3.2 Form and website providers - we use website, form and communication service providers (currently Paperform) for our enquiry and brochure request forms, and Webflow to host our website and newsletter sign-up form.
3.3 Automation tools - we use automation providers (currently Zapier) to connect the above systems and pass data between them.
3.4 Advertising platforms - we use Meta (Facebook/Instagram) and Google Ads to run advertising campaigns, which may involve the audience-matching process described in section 2.6.
3.5 Analytics providers - we use Google Analytics (GA4) to understand website usage.
3.6 Payment providers - financial transactions are handled by third-party payment services providers, to whom we pass transaction data as necessary to process payments and refunds.We may outsource or contract the provision of IT services to third parties. If we do, those third parties may hold and process your personal data. In these circumstances, we will require that the IT supplier only processes your personal data for us, as directed by us, and in accordance with the Data Protection Regulations.
3.7 Professional advisers, contractors, and insurers - where reasonably necessary to obtain advice, manage risk, or maintain insurance cover
3.8 IT and hosting suppliers - where we outsource IT services, those suppliers may process personal data on our behalf, under instructions from us and in accordance with the Data Protection Legislation.
3.9 Legal and regulatory disclosures - we may disclose personal data where necessary to comply with a legal obligation, or to protect our legal rights or those of another person.
3.10 If we sell all or part of our business, we may pass your personal data to the purchaser, who will be required to contact you after completion to explain their identity and intentions regarding your data.
4. International transfers of your personal data
4.1 Some of the third parties listed in section 3 (including Meta and Google) may process personal data outside the UK, including in the United States.
4.2 Where this happens, we rely on legally recognised safeguards, such as the UK's International Data Transfer Addendum, adequacy regulations, or the provider's own certification under an approved transfer mechanism.
5. Retaining and deleting personal data
5.1 We do not keep personal data for longer than necessary for the purpose it was collected.
5.2 As a general rule, we do not keep personal data for more than 6 years after our relationship with you ends, unless we have a legal reason to keep it longer.
5.3 If you unsubscribe from marketing, we will stop sending you marketing communications, but we may keep a minimal record (such as your email address and unsubscribe date) to ensure we don't contact you again by mistake.
5.4 We may retain data for longer where necessary to comply with a legal obligation or to protect our legal rights or those of another person.
6. Amendments
6.1 We may update this policy by publishing a new version on this page.
6.2 Please check this page periodically. We may also notify you of significant changes by email.
7. Your rights
7.1 Under the Data Protection Legislation, you have the following rights, summarised below. Some rights are subject to exceptions - see the ICO's guidance (ico.org.uk) for full detail:
(a) Access - to ask us to confirm what personal data we hold about you and to receive a copy.
(b) Rectification - to have inaccurate or incomplete data corrected.
(c) Erasure - to ask us to delete your data in certain circumstances, including where you withdraw consent or object to processing.
(d) Restriction - to ask us to limit how we use your data in certain circumstances.
(e) Objection - to object to processing based on our legitimate interests, or to object to direct marketing at any time (we will always stop marketing to you if you object).
(f) Portability - to receive data you provided to us in a structured, machine-readable format, where processing is based on consent or contract and carried out by automated means.
(g) Withdraw consent - where processing is based on consent, to withdraw that consent at any time, without affecting the lawfulness of processing before withdrawal.
(h) Complain - to lodge a complaint with the Information Commissioner's Office (ico.org.uk) if you believe we have not handled your data properly.
7.2 To exercise any of these rights, contact us using the details in section 10. We may need to verify your identity before responding.
8. About cookies
8.1 A cookie is a small file placed on your device when you visit our website, used to remember information about your visit or preferences.
8.2 We use a cookie consent management platform (currently ConsentPro) to ask for your permission before setting non-essential cookies. You can change your cookie preferences at any time using the "Preferences" link in our website footer.
8.3 Cookies fall into the following categories on our site:
• Essential - required for the website to function (e.g. remembering your cookie preferences). These do not require consent.
• Analytics - used by Google Analytics (GA4) to understand how visitors use our site. Set only with your consent.
• Marketing/advertising - used by Meta and Google Ads and others to measure and improve our advertising. Set only with your consent.
9. Our details
9.1. This website is owned and operated by Uncommon Projects Ltd.
9.2 We are registered in England and Wales under registration number 07544648, and our registered office is at Unit 3 Delta Wharf, Tunnel Avenue, London, England, SE10 0QE.
9.3 You can contact us:
(a) by post, to the address above;
(b) by telephone, on the number published on our website; or
(c) by email, at enquiries@uncommonprojects.co.uk.
--
Last update: 24th July 2026.
