Privacy Policy

Last updated: October 2026

This privacy policy explains how October Projects Ltd collects, uses and protects personal information when you visit our website, contact us, or work with us. We are committed to handling your information fairly, lawfully and transparently, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

October Projects Ltd is a construction and infrastructure consultancy providing project management, cost management and related professional services. We are the data controller for the personal information described in this policy.

  • Company name: October Projects Ltd
  • Company registration number: 17434827 (registered in England and Wales)
  • Registered office: 33 Wolverhampton Road, Cannock, WS11 1AP
  • Email: enquiries@octoberprojects.co.uk

If you have any questions about this policy or how we handle your information, please contact us at enquiries@octoberprojects.co.uk.

2. The information we collect

Information you give us through our contact form. When you submit an enquiry through our website, we collect your first name, last name, email address, phone number, the service you are interested in, and any details you choose to share about your project.

Information you give us directly. If you email, phone or meet us, we collect the information you provide, such as your name, job title, organisation, contact details and the content of our correspondence.

Information collected in the course of our services. When we work with clients, consultants, contractors and suppliers, we hold business contact details and project-related correspondence, records and documents that may include personal information about individuals involved in a project.

Technical information. When you visit our website, our hosting provider automatically records technical information such as your IP address, browser type and the pages you visit in server logs. This is used for security and to keep the website running properly.

We do not intentionally collect special category data (such as health information) through our website, and we ask that you do not include it in enquiries.

3. How we use your information and our lawful basis

We only use your personal information where the law allows us to. We use it to:

  • Respond to your enquiry and discuss your project with you. Our lawful basis is taking steps at your request before entering into a contract, or our legitimate interest in responding to business enquiries.
  • Provide our services and manage our working relationship with clients, consultants, contractors and suppliers. Our lawful basis is performance of a contract, or our legitimate interest in delivering projects effectively.
  • Meet our legal and regulatory obligations, including accounting, tax and professional regulatory requirements. Our lawful basis is legal obligation.
  • Keep our website secure and working properly. Our lawful basis is our legitimate interest in operating a secure website.
  • Keep in touch about our services where you have agreed to this or where the law otherwise allows us to. You can ask us to stop at any time.

We do not sell your personal information, and we do not use it for automated decision-making or profiling.

4. Who we share your information with

We only share personal information where necessary, and we expect anyone we share it with to protect it appropriately. We may share it with:

  • our website hosting and email service providers, who store and process data on our behalf;
  • professional advisers such as accountants, lawyers and insurers;
  • other members of a project team (such as clients, consultants or contractors) where this is necessary to deliver a project;
  • our professional body and regulators, where required; and
  • law enforcement or other authorities where we are required to do so by law.

Third-party website content. Our website loads fonts from Google Fonts and some images from Unsplash. When your browser loads this content, your IP address is shared with Google and Unsplash so they can deliver it. You can find out more in the Google Privacy Policy and the Unsplash Privacy Policy.

5. International transfers

Some of our service providers may process data outside the UK. Where this happens, we make sure appropriate safeguards are in place, such as transfers to countries the UK has confirmed provide adequate protection, or the use of the UK International Data Transfer Agreement or equivalent contractual protections.

6. How long we keep your information

We keep personal information only for as long as we need it for the purposes described above:

  • Enquiries that do not lead to an appointment: up to two years from our last contact.
  • Client and project records: for the duration of the project and for up to 12 years after completion, reflecting the limitation periods that apply to construction contracts and professional liability.
  • Financial and accounting records: for at least six years, as required by law.

When information is no longer needed, we securely delete or destroy it.

7. Cookies

We do not currently use analytics, advertising or other tracking cookies on our website. Our website may set strictly necessary cookies that are needed for it to function, which do not require your consent. If we introduce any non-essential cookies in future, we will update this policy and ask for your consent before setting them.

8. How we protect your information

We use appropriate technical and organisational measures to protect your personal information against loss, misuse and unauthorised access, including secure (HTTPS) connections to our website and restricted access to our systems.

9. Your rights

Under UK data protection law, you have the right to:

  • access the personal information we hold about you;
  • ask us to correct information that is inaccurate or incomplete;
  • ask us to delete your information;
  • ask us to restrict how we use your information;
  • object to our use of your information where we rely on legitimate interests;
  • ask us to transfer your information to another organisation (data portability); and
  • withdraw your consent at any time, where we rely on consent.

To exercise any of these rights, please email enquiries@octoberprojects.co.uk. We will respond within one month. There is usually no charge.

10. Complaints

If you have concerns about how we handle your personal information, please contact us first so we can try to resolve them. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the date it was last updated shown at the top.