Privacy policy→

Last updated: October 2026

Who we are

This website is run by M&D Foundations & Building Services Ltd (“M&D Foundations”, “we”, “us”), a company registered in England and Wales, number 3717980. Our registered head office is Brooklands Road, Adwick-Le-Street, Doncaster, South Yorkshire, DN6 7BA.

We are the data controller for the personal information described in this policy. That means we decide how and why it is used, and we are responsible for looking after it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this policy or how we handle your information, email enquiries@mdfoundations.com with “Data protection” in the subject line, call 01302 337711, or write to us at the address above.

The information we collect

When you send an enquiry

When you use an enquiry form on this website, email us or call one of our offices, we collect the details you give us. Usually that is your name, phone number, email address, the site postcode, the type of enquiry and any information about your project you choose to include, such as drawings or ground reports.

When you work with us

If we quote for or carry out work for you, we also keep contact details for you and your representatives, site addresses, project correspondence, contract and payment records.

When you apply for a job

If you send us your CV, we keep the information in it and any correspondence about your application.

When you browse this website

With your consent, we use Google Analytics to understand how visitors use the site. It collects information such as the pages you visit, how long you stay, the type of device and browser you use, and your approximate location (city or region level). It does not tell us who you are. See our cookie policy for details.

Our web host also keeps standard server logs, including IP addresses, to keep the site secure and working.

How we use your information, and why we’re allowed to

Under UK GDPR we must have a lawful basis for using personal information. We rely on:

• Taking steps towards a contract, or performing one: to reply to your enquiry, prepare a quote, design and carry out the work, and provide any guarantee.
• Legitimate interests: to run and improve our business, keep records of enquiries and projects, keep our website secure, and deal with claims. We only rely on this where it doesn’t override your rights.
• Legal obligation: to keep financial, health and safety and other records the law requires.
• Consent: for analytics cookies, and to keep your CV on file for future roles. You can withdraw consent at any time.

We do not sell your information, and we do not use it for marketing unless you have asked us to.

Who we share it with

We only share your information when we need to, and only with:

• the M&D office that will handle your enquiry, and our own staff who need it to do their job;
• others involved in your project with your knowledge, such as your engineer, architect, main contractor, building control or warranty provider;
• our insurers and professional advisers, where needed for cover, guarantees or claims;
• service providers that help us run our business and this website, such as our web host, email provider, form handling service and Google (for analytics). They may only use your information on our instructions;
• authorities, where the law requires it.

International transfers

Some of our service providers, including Google, may process information outside the UK. Where they do, we make sure appropriate safeguards are in place, such as the UK’s adequacy regulations or the International Data Transfer Agreement.

How long we keep it

• Enquiries that don’t lead to work: up to 2 years, then deleted.
• Client and project records: 6 years after the contract ends, or longer where a guarantee or legal claim period requires it.
• CVs and applications: up to 12 months, unless you ask us to delete them sooner.
• Analytics data: held by Google for up to 14 months.

Keeping it safe

We use appropriate technical and organisational measures to protect your information, including secure (HTTPS) connections on this website, access controls and staff awareness. We are BSI certified to ISO 9001, ISO 14001 and ISO 45001, and the same disciplined approach applies to how we handle information.

Your rights

You have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your information, where we no longer need it;
• ask us to restrict how we use it, or object to us using it on the basis of legitimate interests;
• ask us to transfer information you gave us to another organisation;
• withdraw your consent at any time, where we rely on consent.

To use any of these rights, contact us using the details above. We will respond within one month. There is normally no charge.

Complaints

If you’re unhappy with how we’ve handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113.

Beware of impersonation

We have been told that someone using the name Ollie Frost is falsely claiming to represent M&D Foundations. We will never ask you for passwords or bank details by unsolicited message. If you receive anything suspicious, contact us directly at enquiries@mdfoundations.com.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.