Privacy Policy

Updated 1 October 2026.

1. Who we are

Castle Property Services (UK) Limited, trading as Castle Property Services (“we”, “us” and “our”), is responsible for personal information collected through https://cpservicesuk.com/ and the enquiries described in this policy. We are the data controller for that information.

Company number: 06437616, registered in England and Wales.
Registered office: 38 Emery Avenue, Newcastle Under Lyne, ST5 2JF.
Business contact address: Unit 33, Newcastle Enterprise Centre, Knutton, Newcastle-under-Lyme, Staffordshire, ST5 6BX, United Kingdom.
Email: enquiries@cpservicesuk.com
Telephone: 01782 616116

This policy covers visitors to our website and people contacting us about our building and property services. If a particular service involves additional uses of personal information, we will explain these when relevant.

2. Information we collect

When you use the contact form in our footer or on our Contact page, we collect the information you provide, such as your name, email address, telephone number and message. We also collect information you provide when you contact us by telephone or email.

Your enquiry and subsequent correspondence may include a property address, project requirements, appointment details or other information needed to assess your request and prepare a quotation.

Our website is hosted on a UK-based server by Enable Business. The forms use Elementor Forms: submissions are saved in the website database and sent to enquiries@cpservicesuk.com through Enable Business’s email infrastructure using WP Mail SMTP. During website testing, copies may also be sent to web@enablebusiness.co.uk to check delivery.

Our website and hosting services may process technical information, such as IP addresses, browser and device details, access times and security logs, to deliver and protect the website.

Our Google Analytics implementation uses Google Consent Mode. Google’s tag loads before you make a cookie choice and may send limited measurement and consent information without analytics cookies when consent is absent or denied. If you allow analytics cookies, Google Analytics also collects information about website use, such as pages visited, interactions, session information, browser and device details, approximate location and cookie identifiers. Analytics identifiers may constitute personal information even when we do not know your name.

Our consent tool stores a randomly generated consent ID, your choices, the notice wording and the time of the choice in the website database. These records help us demonstrate and manage your choices. They do not contain your name or email address, but the ID is a browser identifier and we do not describe the records as fully anonymous.

Please do not include payment card details or unnecessary sensitive personal information in a contact form. We do not collect payments through the website.

3. How and why we use information

We use your information for the following purposes and on the following lawful bases:

Responding to a request for a quotation, arranging an assessment and taking steps towards a contract with you: processing necessary to take steps at your request before entering a contract, or to perform a contract once agreed.
Handling general enquiries, including enquiries made on behalf of someone else: our legitimate interests in communicating with prospective customers and running our business.
Keeping the website secure, preventing misuse and maintaining relevant correspondence or handling disputes: our legitimate interests in protecting our website and business and managing enquiries responsibly.
Meeting applicable legal requirements: compliance with a legal obligation.
Using optional analytics cookies and associated Google Analytics processing to understand and improve website use: your consent.
Keeping cookie preferences and records of choices: our legitimate interests in respecting your choices and managing our consent process, and compliance with applicable legal obligations to demonstrate consent.

Where we rely on legitimate interests, we consider the effect on your rights and interests. You may object to this processing as explained below.

We do not use your contact form details for email marketing. We may contact you to respond to your enquiry or manage a service you have requested.

Providing enquiry details is voluntary, but we need sufficient information and a way to contact you to respond or prepare a quotation. You can contact us by telephone instead of using a form. Declining optional analytics does not prevent you from making an enquiry.

4. Cookies and Google Analytics

Cookies are small files stored on your device. Similar technologies may also store information or access information on your device.

Our custom cookie consent tool lets you accept, reject or customise optional consent settings and change your choices through Manage Cookies. Changes made in the settings panel are applied when you select Confirm Choices. You can withdraw consent at any time; withdrawal does not affect the lawfulness of earlier processing.

Google’s tag loads before a choice is made. When analytics consent is absent or denied, Google Consent Mode may still send limited information without analytics cookies, including consent status and measurement information. Rejecting cookies therefore does not mean that all communication with Google stops. When analytics consent is granted, cookie-based measurement is enabled.

The consent tool includes advertising, functionality and personalisation permissions. These are settings passed to supported Google tags; the presence of a permission does not itself establish that the corresponding service is active. Accepting all grants these permissions; custom choices allow them to be selected separately. The confirmed Google service described in this policy is Google Analytics.

Storage used to remember your choices and maintain consent records is separate from optional analytics storage. Blocking storage in your browser may affect how your choices are remembered.

The consent tool sets the following first-party cookies:

eccp_status — remembers whether your choice was accept, reject or custom; 182 days.
eccp_notice_version — identifies the notice version associated with your choice; 182 days.
eccp_analytics_storage — remembers your analytics permission; 182 days.
eccp_ad_storage, eccp_ad_user_data and eccp_ad_personalization — remember advertising-related permissions; 182 days each.
eccp_functionality_storage and eccp_personalization_storage — remember functionality and personalisation permissions; 182 days each.
eccp_security_storage — records the security storage setting; 182 days.
eccp_consent_id — a randomly generated identifier used to associate consent records with the browser; 730 days.

These expiry periods are set when the cookies are written. Updating your choices writes the preference cookies again. Browser behaviour or deleting cookies may shorten their lifetime.

Google Analytics 4 can set _ga to distinguish browsers and _ga_<container-id> to maintain session information when analytics cookies are allowed. Google’s default expiry is two years, but configured settings and browser restrictions may change it. These lifetimes are different from the two-month Analytics data retention setting described below.

Google’s privacy information: https://policies.google.com/privacy
How Google uses information: https://business.safety.google/privacy/

5. Who receives your information

Authorised Castle Property Services staff use enquiry information to respond and manage requested services. Enable Business provides website hosting, website support and the email delivery infrastructure, and may access information where needed to provide those services. Its testing mailbox may receive form copies while delivery checks are being carried out.

Google and its relevant affiliates and service providers receive information through Google Analytics and Consent Mode as described above. People who administer our Analytics property may access the reports and configuration needed to manage the service.

We may also disclose information where required by law or where necessary to obtain professional advice or establish, exercise or defend legal claims.

6. International processing

Our website server is hosted in the UK. This does not mean that all website-related information stays in the UK: Google uses international infrastructure and may process information outside the UK, including in the United States.

Google describes its international transfer safeguards at https://business.safety.google/adsdatatransfers/. These include applicable adequacy mechanisms, including the UK Extension to the EU-US Data Privacy Framework for covered US transfers, and contractual safeguards for transfers where the applicable framework is not used. The mechanism depends on the transfer and the relevant Google terms. You can contact us for further details of the safeguards relevant to our use of Google Analytics.

7. How long we keep information

We keep personal information only for as long as needed for the relevant purpose. We use the following criteria and settings:

Enquiries that do not become jobs: whether the enquiry is still active, whether follow-up is reasonably expected, and whether a complaint or dispute requires the correspondence to be kept. Once these reasons no longer apply, the information should be deleted from stored submissions and relevant mailboxes.
Customer project information: the duration of the project and any relevant warranty, accounting, legal obligation or period needed to handle possible claims. Unrelated information should not be retained simply because some project records are still needed.
Website and security logs: the period needed to operate the service, investigate faults or security incidents and address misuse.
Google Analytics: the property is set to retain user-level and event-level data for two months. This setting does not apply to all aggregate reports, which may remain available for longer. If the property’s reset-on-new-activity option is enabled, repeat activity can renew the user identifier’s retention period.
Cookie preferences: the browser expiry periods in section 4.
Consent records in WordPress: the period needed to demonstrate and manage the recorded choices, taking account of whether processing based on the choice continues and whether a complaint or legal claim requires the record. Cookie expiry does not automatically delete these database records; they require separate review and deletion.

When information is no longer needed, it should be deleted or anonymised. Backup copies are subject to the hosting backup cycle and should not be used to reintroduce deleted records into active use.

8. Keeping information secure

We use appropriate technical and organisational measures to protect personal information and restrict access to those who need it. No method of internet transmission or storage is completely secure.

9. Your rights

Depending on the circumstances, you may have the right to:

Obtain access to your personal information and a copy of it.
Have inaccurate or incomplete information corrected.
Ask us to erase your information or restrict its use.
Object to processing based on legitimate interests.
Receive information you provided in a portable format, where the legal conditions apply.
Withdraw consent where processing is based on consent.

These rights are subject to legal conditions and exceptions. To make a request, email enquiries@cpservicesuk.com or use the contact details above. We may need information to verify your identity. We normally respond within one month, subject to any lawful extension or adjustment, and will explain any delay.

10. Privacy complaints

If you are concerned about how we handle your information, contact enquiries@cpservicesuk.com, stating that you wish to make a data protection complaint. You can also contact us by telephone or post using the details above.

We will acknowledge your complaint within 30 days, investigate without undue delay, keep you informed and explain the outcome.

You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator. Visit https://ico.org.uk/make-a-complaint/ or call 0303 123 1113.

11. Changes to this policy

We may update this policy as our services or information practices change. The latest version will appear on this page with its update date. Where required, we will bring significant changes to your attention.