Privacy notice

How we use your enquiry details.

Tarspra is a trading name of Hinchliffe Surfacing Ltd.

Controller and contact

Hinchliffe Surfacing Ltd, trading as Tarspra, is the controller of personal information submitted through this website. Company number 16876490. Registered office: 42 Newtons Crescent, Sandbach, CW11 4TS.

For privacy questions or requests, call 01270 36 1111 or write to the registered office, marked “Privacy request”.

Information collected

The form asks for your name, email, site location and scope. You may also provide organisation, phone, area, programme, deadline, access restrictions, documents and a secure portal link. We record project or tender mode, service requested, receipt date, status and bounded campaign labels where present.

Enquiry security checks use a session token and hashed network and email identifiers. Hashing is a security measure, not a guarantee that these identifiers are anonymous. Only send documents relevant to the enquiry; do not include passwords or unrelated personal information.

Purposes and lawful bases

We use enquiry information to respond, assess the requested work and prepare a quotation or tender response. Steps requested by an individual before entering a contract may fall under UK GDPR Article 6(1)(b). Handling business-contact enquiries and protecting the service from abuse may rely on legitimate interests under Article 6(1)(f), subject to the necessary balancing assessment. Legal obligations may require retention of relevant contractual records under Article 6(1)(c).

The acknowledgement on the form is not consent to marketing. We do not use it to subscribe you to advertising. The application of these bases to company processes requires competent review.

Storage, access and recipients

Enquiries and attachments are stored privately in Lovable Cloud. Access permissions are restricted to the Managing Director and Commercial Manager. A stored receipt does not confirm staff review. Staff email notification is currently not connected.

Hosting and storage providers process data to operate the service. The complete processor and subprocessor list, contractual safeguards, hosting locations and any international-transfer arrangements have not yet been confirmed for this notice. Those details require company verification before the notice is finalised.

Retention

A company-approved retention schedule and automated deletion arrangements have not yet been supplied. Enquiry and attachment records are not automatically deleted by the current submission service. Retention decisions must consider the enquiry outcome, any resulting contract, legal record-keeping duties and the period reasonably necessary for claims or disputes. Security identifiers and campaign information also need defined retention and deletion criteria.

You can contact us to request deletion; applicable legal grounds for retaining information must be assessed when handling the request.

Your rights

Depending on the circumstances, you may request access, correction, erasure, restriction or portability of your personal information, and object to processing based on legitimate interests. Where processing relies on consent, it may be withdrawn. Rights are subject to legal conditions and exceptions.

Contact us using the details above. We may need proportionate information to verify your identity. Requests are normally answered within one month, with extensions permitted in specified circumstances. You may complain to the Information Commissioner’s Office.

Cookies and tracking

The tarspra-enquiry cookie is HttpOnly and SameSite=Strict, expires after one hour, and supports secure form submission. Campaign labels from links may be kept in session storage for the browser session. These labels contain only bounded campaign text, not enquiry contents.

No GA4 or advertising tracker is installed by this public site. The existing event helper does not send analytics without both an existing analytics tag and a granted consent setting. No analytics consent interface is currently configured. Any future analytics or advertising requires a review of consent and this notice before activation.

The host may also use security or delivery cookies. Its current cookie inventory and third-party font delivery arrangements need to be included in the final processor and cookie review.