Privacy notice
Last updated 16 September 2026 · CTD Scotland Ltd · Company no. SC513395
This notice explains what CTD Scotland Ltd does with personal information collected through this website. It is written to be read, not to be waved at a regulator.
Who we are
CTD Scotland Ltd is the data controller. We are registered in Scotland, company number SC513395, at Unit 5, 1 Dryden Road, Loanhead, Midlothian, EH20 9LZ.
For anything in this notice, email [email protected] or call 0131 510 0606.
What we collect
Only what you type into the enquiry form, plus a small amount of technical information the site needs to work.
| Information | Why we have it |
|---|---|
| Name and company | So we know who we are replying to |
| Email and phone | To reply to your enquiry |
| Project type, location, budget band, timescale | To work out whether we can help, and to price sensibly |
| Your description of the project | To answer properly rather than asking you to repeat yourself |
| Page address, referring page and time of submission | Sent with the form so we know which page prompted the enquiry |
| Anti-spam signals | A hidden field and a timing check, to stop automated submissions. No tracking is involved |
We do not ask for special category data, and we would rather you did not put any in the message box.
Our lawful basis
- Legitimate interests for replying to an enquiry you sent us, and for keeping a record of quotes and jobs. You asked us a question; answering it is the obvious use.
- Consent for analytics cookies. Nothing non-essential runs until you accept, and you can change your mind at any time.
- Contract once we are working together, for the information needed to deliver and invoice the job.
- Legal obligation where accounting, tax or health and safety law requires us to keep records.
Who else sees it
We do not sell personal data and we do not share it for anybody else's marketing. It reaches the following, and no further:
| Who | What for |
|---|---|
| HighLevel (LeadConnector) | Runs this website and holds enquiry submissions in our CRM |
| Meere Marketing | Builds and maintains the site on our behalf, under contract |
| Google (Analytics and Fonts) | Visitor statistics, only after you accept cookies, and typeface delivery |
| Our accountants and insurers | Where a job requires it |
Some of these providers are based outside the UK. Where that happens, transfers rely on the UK International Data Transfer Agreement or UK Addendum, or on adequacy regulations.
How long we keep it
- Enquiries that do not become jobs: up to 24 months, then deleted. Construction enquiries often come back round a year later.
- Jobs we carried out: six years after completion, which is the period for contractual claims in Scotland, and longer where building or safety records require it.
- Analytics: retained by Google for the period set in our account, currently 14 months.
Your rights
Under UK GDPR you can ask us to give you a copy of what we hold, correct it, delete it, restrict what we do with it, or send it to someone else. You can object to processing based on legitimate interests. Where we rely on consent, you can withdraw it without affecting anything done beforehand.
Ask by emailing [email protected]. We will respond within one month.
If you are not happy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first so we can put it right.
Cookies
Set out separately on our cookie policy.
Changes
If this notice changes we will update the date at the top. This version is dated 16 September 2026.