Privacy Policy
JOSA CONSULTANCY LTD Trading as JOSA BUILD
Company Number: 16210930
Last updated: March 2026
1. Who We Are
JOSA CONSULTANCY LTD, trading as JOSA BUILD ("we", "us", "our"), is a lead generation contractor for building works based in the United Kingdom. We are the data controller of your personal information under UK data protection law.
Contact details:
- Email: support@josabuild.com
- Address: 20 Wenlock Road, London, England, N1 7GU
If you have any questions about this policy or how we handle your personal data, please contact us using the details above.
2. What Personal Data We Collect
When you enquire about or use our lead generation and building contractor referral services, we may collect the following personal data:
Identity & Contact Data
- Full name
- Email address
- Phone number
- Home or property address (including the address of works to be carried out)
Project & Property Data
- Type of building works required
- Project scope, description, and estimated budget
- Property type (residential, commercial, etc.)
- Preferred timescales
Communications Data
- Records of correspondence, enquiries, and quotes submitted to us
- Notes taken during calls or meetings
Technical Data (if collected via our website or digital channels)
- IP address
- Browser type and version
- Device type
- Pages visited and time spent on site
- Cookie data (see Section 9)
Marketing Preferences
- Your preferences for receiving communications from us and our contractor partners
3. How We Collect Your Personal Data
We collect your personal data through the following means:
- Direct interactions – when you complete an enquiry form, call us, email us, or otherwise contact us to request a quote or contractor referral
- Third-party lead platforms – where you have submitted your details via a third-party comparison or referral website and consented to your data being shared with contractors such as us
- Website analytics tools – automatically collected technical data when you visit our website
- Referrals – where another party (e.g. a contractor partner) has referred you to us with your knowledge
4. How We Use Your Personal Data
We use your personal data for the following purposes and on the following legal bases under UK GDPR:
| Purpose | Legal Basis |
|---|---|
| To respond to your enquiry and provide contractor lead generation services | Contract (Article 6(1)(b)) – necessary to take steps at your request prior to entering a contract |
| To match your project requirements with suitable building contractors | Contract (Article 6(1)(b)) / Legitimate Interests (Article 6(1)(f)) |
| To pass your contact and project details to relevant contractor partners | Consent (Article 6(1)(a)) or Contract (Article 6(1)(b)) depending on how your enquiry was submitted |
| To send you quotes, follow-ups, and service-related communications | Contract (Article 6(1)(b)) |
| To send you marketing communications about our services | Legitimate Interests (Article 6(1)(f)) or Consent (Article 6(1)(a)) |
| To comply with legal and regulatory obligations | Legal Obligation (Article 6(1)(c)) |
| To improve our services and website performance | Legitimate Interests (Article 6(1)(f)) |
Our legitimate interests include operating and growing our lead generation business, ensuring the quality of contractor referrals, and maintaining effective communication with prospective customers.
5. Sharing Your Personal Data
We may share your personal data with the following categories of recipients:
- Building contractors and tradespeople – we share your contact details and project information with vetted contractors in our network for the purposes of providing you with quotes and referrals. This is the core purpose of our service
- IT and software service providers – companies that host our website, CRM, or communications platforms, who process data on our behalf as data processors
- Marketing platforms – where we use third-party tools to manage communications
- Professional advisers – solicitors, accountants, or insurers where necessary
- Regulatory or law enforcement authorities – where we are legally required to do so
We do not sell your personal data to third parties.
Where we share your data with contractor partners, we will ensure those partners have been informed of their obligations to handle your data lawfully. By using our service, you acknowledge that your contact and project details will be shared with relevant contractors for the purpose of obtaining quotes.
6. International Transfers
We do not routinely transfer your personal data outside the United Kingdom. If any transfer becomes necessary (for example, via a software platform with servers outside the UK), we will ensure appropriate safeguards are in place in accordance with UK GDPR, such as the ICO's International Data Transfer Agreement (IDTA) or equivalent protections.
7. How Long We Keep Your Data
We retain your personal data only for as long as necessary for the purposes set out in this policy:
| Data Type | Retention Period |
|---|---|
| Enquiry and lead data | 2 years from the date of enquiry, or completion of services |
| Customer and contractor records | 6 years (for contractual and legal compliance purposes) |
| Marketing preferences | Until you withdraw consent or opt out |
| Website analytics data | 13 months (standard analytics cycle) |
After the applicable retention period, your data will be securely deleted or anonymised.
8. Your Rights
Under UK GDPR, you have the following rights in relation to your personal data:
- Right of access – to request a copy of the personal data we hold about you (Subject Access Request)
- Right to rectification – to ask us to correct inaccurate or incomplete data
- Right to erasure ("right to be forgotten") – to ask us to delete your data in certain circumstances
- Right to restrict processing – to ask us to limit how we use your data
- Right to data portability – to receive your data in a structured, machine-readable format
- Right to object – to object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent – where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
To exercise any of these rights, please contact us at: support@josabuild.com
We will respond within one calendar month of receiving your request. We do not charge a fee for handling rights requests unless they are manifestly unfounded or excessive.
9. Cookies
If you visit our website, we may use cookies and similar tracking technologies to improve your experience and analyse site performance. These may include:
- Essential cookies – necessary for the website to function
- Analytics cookies – to understand how visitors use our site (e.g. Google Analytics)
- Marketing cookies – to track the effectiveness of any advertising campaigns
You can manage or withdraw your consent to non-essential cookies at any time through your browser settings or our cookie consent tool (if available on our site).
10. Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include secure data storage, access controls, and working only with reputable third-party processors. However, no method of electronic transmission or storage is entirely secure, and we cannot guarantee absolute security.
If we become aware of a data breach that is likely to affect your rights and freedoms, we will notify the ICO within 72 hours and inform you without undue delay where required.
11. Third-Party Websites
Our website or communications may contain links to third-party websites. This privacy policy does not apply to those sites, and we are not responsible for their privacy practices. We encourage you to read the privacy policies of any websites you visit.
12. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our services, legal obligations, or data practices. The most current version will always be available on our website or on request. The "last updated" date at the top of this document will reflect the most recent revision.
13. How to Complain
If you are unhappy with how we have handled your personal data, please contact us in the first instance at support@josabuild.com and we will do our best to resolve your concern.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator:
- Website: www.ico.org.uk
- Helpline: 0303 123 1113
- Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
This privacy policy applies to personal data collected by JOSA CONSULTANCY LTD (trading as JOSA BUILD), Company Number 16210930, registered at 20 Wenlock Road, London, England, N1 7GU.