Privacy Policy

Last updated: 20 July 2026

1. Who we are

Durkan & Sons Ltd is the data controller responsible for personal information collected through this website.

Durkan & Sons Ltd
The Grove
Roall Lane
Kellington
North Yorkshire
DN14 0NY

Registered in England and Wales: 07339255
Telephone: 0113 252 8044
Email: [email protected]

This policy explains how we collect, use, store and protect personal information when you visit durkans.co.uk, contact us or submit information through the website.

2. Information we collect

Depending on how you use the website, we may collect:

Your name, company name, email address, telephone number and postal address.
Information included in an enquiry, quotation request or other message.
Project details, locations, drawings or documents that you choose to provide.
Job application information, including employment history, qualifications and your CV.
Your IP address, browser type, device information, approximate location and website usage information.
Security information generated when the website detects or prevents suspicious activity.
Your cookie and consent preferences.

Please do not submit confidential, sensitive or special-category personal information through a general website enquiry unless it is necessary for us to deal with your request.

3. How we collect information

We collect information:

Directly from you when you complete a form, email us, telephone us or apply for a vacancy.
Automatically through essential website technologies and, where you consent, analytics cookies.
From third-party services used to operate, secure and monitor the website.

4. How we use your information

We may use your information to:

Respond to enquiries and discuss potential projects.
Prepare quotations, assess requirements and provide requested information.
Manage relationships with customers, suppliers and other business contacts.
Process and assess job applications.
Operate, maintain and improve the website.
Understand how visitors use the website.
Protect the website, our systems and users against fraud, abuse and cyberattacks.
Establish, exercise or defend legal claims.
Comply with legal, regulatory and contractual obligations.

We do not sell personal information. We do not use information submitted through the website for unrelated advertising or automated decision-making.

5. Our lawful bases

Under UK data protection law, we must have a lawful basis for using personal information. Depending on the circumstances, we rely on:

Consent: where you agree to optional analytics cookies or another clearly explained use of your information. You may withdraw consent at any time.
Contract: where processing is necessary to take steps at your request before entering into a contract or to perform an existing contract.
Legitimate interests: where necessary to respond to business enquiries, operate and secure the website, manage business relationships and protect our legal rights, provided those interests do not override your rights.
Legal obligation: where we must process or retain information to comply with the law.

6. Contact forms and enquiries

When you contact us, we use the information supplied to understand and respond to your enquiry. Our lawful basis will normally be legitimate interests or taking steps at your request before entering into a contract.

If an enquiry develops into a commercial relationship, relevant correspondence may become part of our customer, supplier, project or contractual records.

7. Recruitment

If you apply for a vacancy, we use your information to assess your suitability, communicate with you and manage the recruitment process.

The lawful basis will normally be taking steps before entering into an employment contract and our legitimate interests in recruiting suitable personnel. Information required to meet employment-law obligations may be processed under a legal obligation.

Please do not provide health information or other special-category information unless it is requested and necessary for the recruitment process.

8. Cookies and consent

We use essential cookies and similar technologies where necessary to operate, secure and remember preferences on the website.

Optional technologies, including Google Analytics and certain external Google services, are controlled through our consent-management system. They should not be activated until you make the relevant choice.

You can accept, reject or manage optional cookies through the cookie banner. You can subsequently change or withdraw your choice using the Cookie settings control displayed on the website.

Further information about individual cookies, their purposes and retention periods is available in our Cookie Policy.

9. Google Analytics

With your consent, we use Google Analytics 4 to understand how visitors find and use the website. This may involve processing information such as:

Pages visited and actions taken.
Approximate location.
Device and browser information.
Referral source.
Online identifiers and IP-derived information.

Google Analytics information is used for statistical purposes. We do not use Google Analytics for personalised advertising or remarketing.

Google states that IP addresses collected by Google Analytics 4 are not logged or stored in a way that makes them available to website operators. However, online identifiers and usage information may still constitute personal data under UK data protection law.

For more information, see Google’s Privacy Policy.

10. Google Maps and Google Fonts

The website may use Google Maps to display our location and Google Fonts to display typefaces. When these services load, Google may receive information including your IP address, browser information and the page being viewed.

Where required, these services are blocked until you provide the relevant consent. You can still contact us or obtain our address without loading Google Maps.

11. Website security

We use security services and technologies, including Wordfence and Cloudflare-related security measures where applicable, to protect the website against malicious traffic, unauthorised access and cyberattacks.

These services may process IP addresses, request information, browser details and security logs. This processing is based on our legitimate interests in maintaining the security and availability of the website.

12. Who we share information with

Where necessary, we may share information with:

Website hosting, maintenance and IT-support providers.
Email and business-system providers.
Google, where you consent to Google Analytics or external Google content.
Website security and content-delivery providers.
Professional advisers, including legal, insurance and accounting advisers.
Public authorities, regulators or law-enforcement bodies where required by law.
Customers, suppliers or project partners where necessary to deal with your request and where lawful.

Service providers may only process personal information for the agreed purpose and must protect it appropriately.

13. International transfers

Some technology providers may process information outside the United Kingdom, including in the United States or European Economic Area.

Where personal information is transferred internationally, we take reasonable steps to ensure an appropriate legal transfer mechanism is used. This may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses or another lawful safeguard.

14. How long we retain information

We retain information only for as long as reasonably necessary for the purpose for which it was collected.

14. How long we retain information

We retain personal information only for as long as it is reasonably required for the purpose for which it was collected and to meet any legal, contractual or regulatory obligations.

Our normal approach is:

General enquiries: Enquiries are received through our business email system. Enquiries that are irrelevant, unsolicited or of no ongoing use are deleted. Relevant enquiries may be retained while we respond, consider potential work or maintain an associated business record.
Contractual, customer and supplier records: Where an enquiry develops into a quotation, order, project or other commercial relationship, relevant records are normally retained for up to six years after the end of the relationship or transaction, unless a longer period is legally required.
Unsuccessful job applications: Normally deleted when they are no longer required for the recruitment process and generally within six months, unless the applicant consents to longer retention for consideration for future vacancies.
Successful job applications: Relevant information becomes part of the individual’s employment record and is retained in accordance with our employee-retention arrangements.
Analytics information: Retained according to the retention settings applied within Google Analytics.
Security logs: Retained only for as long as reasonably necessary to detect, investigate and prevent security incidents.
Cookie preferences: Retained for the period stated in our Cookie Policy.

Information may be retained for longer where necessary for a legal claim, investigation, regulatory requirement or other legal obligation. Deleted emails or records may remain temporarily in secure backups until those backups are overwritten through the normal backup cycle.

Information may be retained longer where necessary for a legal claim, investigation, regulatory requirement or other legal obligation.

15. How we protect information

We use reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

No internet transmission or storage system is completely secure. You should avoid sending unnecessary sensitive information through standard website forms or unencrypted email.

16. Your data protection rights

Depending on the circumstances, you may have the right to:

Request access to your personal information.
Request correction of inaccurate or incomplete information.
Request deletion of your information.
Request restriction of processing.
Object to processing based on legitimate interests.
Receive certain information in a portable format.
Withdraw consent at any time where processing is based on consent.
Object to direct marketing at any time.
Complain about how your information has been handled.

These rights are not absolute and may not apply in every circumstance. We may need to verify your identity before dealing with a request.

To exercise a right, email [email protected] or write to us using the address above.

17. Data protection complaints

If you have concerns about how we have handled your personal information, please contact us first:

Email: [email protected]
Telephone: 0113 252 8044
Post: Durkan & Sons Ltd, The Grove, Roall Lane, Kellington, North Yorkshire, DN14 0NY

We will acknowledge a data protection complaint within 30 days and investigate it without undue delay.

You also have the right to complain to the Information Commissioner’s Office:

Information Commissioner’s Office
Telephone: 0303 123 1113
Website: ico.org.uk/make-a-complaint

18. Third-party websites

The website contains links to third-party websites and social-media platforms. Following a link takes you to a service controlled by another organisation. Their processing is governed by their own privacy policies, and we are not responsible for their websites or privacy practices.

19. Changes to this policy

We may update this policy when our website, services or legal obligations change. The latest version will be published on this page with a revised update date.