Last updated: 28 March 2026

1. Who We Are

Vector Space Modular is a modular and portable building manufacturer based in Scunthorpe, North Lincolnshire. We are the data controller for the personal data we collect through this website (vectorspacemodular.co.uk) and our business operations.

Company: Vector Space Modular
Address: Scunthorpe, North Lincolnshire
Email: admin@vectorspacemodular.co.uk
Phone: 01724 501760

For any privacy-related questions, data subject requests, or concerns about how we handle your personal data, please contact us using the details above. We will endeavour to respond within one calendar month.

2. What Data We Collect

We collect personal data when you interact with us through this website or by other means. The types of data we may collect include:

2.1 Information You Provide Directly

Contact form submissions: Full name, email address, phone number, company name, and your message.
Quote requests: Full name, email address, phone number, company name, sector, project type, building size requirements, timeline, budget range, procurement framework, project location, and project description.
Email correspondence: Any personal data included in emails you send to us.
Phone enquiries: Details you provide during telephone conversations.

2.2 Information Collected Automatically

Technical data: IP address (hashed/pseudonymised for analytics), browser type and version, operating system, device type, screen resolution, and referring URL.
Usage data: Pages visited, time spent on pages, navigation paths, and interactions (collected via analytics cookies only with your consent).
Form submission metadata: IP address, user agent, and referring page (collected for security and anti-spam purposes when you submit a form).

3. How and Why We Use Your Data

We process your personal data for the following specific purposes and lawful bases:

Purpose	Lawful Basis (UK GDPR Article 6)
Responding to contact form enquiries	Legitimate interest (Art. 6(1)(f)) — our interest in responding to prospective and existing client enquiries
Preparing and delivering quotations	Pre-contractual steps (Art. 6(1)(b)) — necessary to take steps at your request before entering into a contract
Fulfilling contracts for building projects	Contractual necessity (Art. 6(1)(b))
Website analytics and performance improvement	Consent (Art. 6(1)(a)) — Google Analytics cookies are only activated after you accept analytics cookies via our consent banner
Website security (CSRF protection, rate limiting, anti-spam)	Legitimate interest (Art. 6(1)(f)) — our interest in protecting the website and its users from abuse and malicious activity
Compliance with legal and regulatory obligations	Legal obligation (Art. 6(1)(c))
Establishing, exercising, or defending legal claims	Legitimate interest (Art. 6(1)(f))

Where we rely on legitimate interest, we have carried out a balancing assessment to ensure our interests do not override your fundamental rights and freedoms. You have the right to object to processing based on legitimate interest at any time (see Section 8).

4. Providing Your Data

You are not under any statutory obligation to provide us with personal data. However, certain information (name, email address, and project details) is necessary for us to respond to your enquiry or prepare a quotation. If you do not provide this information, we will be unable to process your request.

5. Who We Share Your Data With

We do not sell, rent, or trade your personal data. We may share your data with the following categories of recipients:

Web hosting provider: Our website is hosted on UK-based shared hosting infrastructure. The hosting provider processes data on our behalf under a data processing agreement.
Google LLC: We use Google Analytics (GA4) to understand how visitors use our website. Analytics cookies are only set after you provide consent. Google processes this data under its Data Processing Terms.
Professional advisers: Solicitors, accountants, and insurers where necessary for business operations.
Law enforcement and regulatory bodies: Where required by law, court order, or regulation.

All third-party processors with access to personal data operate under appropriate data processing agreements in accordance with UK GDPR Article 28.

6. International Transfers

Your personal data is primarily stored and processed within the United Kingdom.

Where you consent to analytics cookies, data may be transferred to Google LLC in the United States. This transfer is safeguarded by Google's participation in the UK Extension to the EU-US Data Privacy Framework and Google's data processing commitments. A copy of the relevant safeguards can be obtained on request.

We do not otherwise transfer your personal data outside the United Kingdom. Should this change in the future, we will ensure appropriate safeguards are in place (such as UK International Data Transfer Agreements or Standard Contractual Clauses) and update this policy accordingly.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Our specific retention periods are:

Contact form enquiries: 24 months from the date of your last interaction with us, then securely deleted.
Quote requests: 24 months from the date of submission, unless a contract is entered into.
Contractual data: 6 years after the end of the contract, in line with the Limitation Act 1980.
Google Analytics data: 14 months (configured in our GA4 data retention settings).
Session cookies: Expire when you close your browser.
Cookie consent record: 12 months, after which you will be asked for consent again.

8. Your Rights

Under the UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data:

Right of access (Article 15) — You can request a copy of the personal data we hold about you (a Subject Access Request). We will respond within one calendar month.
Right to rectification (Article 16) — You can request correction of inaccurate or incomplete data.
Right to erasure (Article 17) — You can request deletion of your personal data where there is no compelling reason for us to continue processing it.
Right to restrict processing (Article 18) — You can request that we limit how we use your data in certain circumstances.
Right to data portability (Article 20) — Where processing is based on consent or contract and is carried out by automated means, you can request your data in a structured, commonly used, machine-readable format.
Right to object (Article 21) — You have the right to object at any time to processing of your personal data based on our legitimate interests. Upon receiving an objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Right to withdraw consent (Article 7(3)) — Where processing is based on consent (e.g. analytics cookies), you may withdraw consent at any time by adjusting your cookie preferences or contacting us. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at admin@vectorspacemodular.co.uk or write to us at the address above. There is generally no fee for exercising your rights, and we will respond within one calendar month. In exceptional circumstances (complex or numerous requests), we may extend this by a further two months, but we will inform you within the first month if this is necessary.

9. Automated Decision-Making

We do not use your personal data for automated decision-making or profiling that produces legal effects or similarly significant effects concerning you. Our anti-spam system uses automated scoring to filter form submissions, but this does not affect your legal rights and does not prevent you from contacting us by email or telephone.

10. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, in accordance with UK GDPR Article 32. These measures include:

Encrypted data transmission (SSL/TLS) across all pages
IP address pseudonymisation (hashing) for analytics data
Cross-site request forgery (CSRF) protection on all forms
Rate limiting to prevent abuse
Database access controls and parameterised queries to prevent injection attacks
Security headers (Content Security Policy, HSTS, X-Frame-Options)

11. Cookies

Our website uses cookies. A summary of the cookies we set is provided below. For full details, including how to manage and refuse cookies, please see our Cookie Policy.

Cookie	Provider	Purpose	Type	Duration
PHPSESSID	First-party	Session management, CSRF security, rate limiting	Strictly necessary	Session
cookie_consent	First-party	Stores your cookie consent preference	Strictly necessary	12 months
_ga	Google	Distinguishes unique visitors	Analytics (consent required)	2 years
_ga_VM0RH26GK0	Google	Maintains GA4 session state	Analytics (consent required)	2 years
_gid	Google	Distinguishes users for 24-hour period	Analytics (consent required)	24 hours

Strictly necessary cookies are essential for the website to function and do not require your consent. Analytics cookies are only set after you actively accept them via our cookie consent banner.

12. Complaints

We take your privacy seriously and encourage you to contact us first if you have any concerns about how we handle your data. However, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Phone: 0303 123 1113
Website: ico.org.uk/make-a-complaint

13. Children's Privacy

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child under 16, we will take steps to delete it promptly.

14. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. Any changes will be posted on this page with an updated "Last updated" date at the top. For significant changes, we may provide additional notice on our website. We encourage you to review this policy periodically.

15. Contact Us

For any questions, concerns, or requests relating to this privacy policy or our data practices, please contact us:

Email: admin@vectorspacemodular.co.uk
Phone: 01724 501760
Address: Vector Space Modular, Scunthorpe, North Lincolnshire

Privacy Policy