Our Privacy Policy

Last updated: July 2025

Thomas Heagle is committed to respecting and protecting your privacy. We want to be transparent about the data we collect, how we use it, and the control you have over that information.

The information you share with us enables us to deliver our services. We collect it when you contact us via this website or through electronic or written correspondence. We may request personal details such as your name, telephone number, email address, and private or business address, as well as information related to the product or service you are enquiring about (e.g., project location, scope, budget, timelines).

We will use your personal data solely to provide the information or services you have requested. This website complies with all applicable UK, EU and relevant U.S. data protection laws and requirements for user privacy.

To provide our services, we may need to share your details with trusted third parties—such as consultants, suppliers, or contractors we work with. In these circumstances, we ensure your data is properly protected and used only in accordance with this policy.

Confidentiality & Non‑Disclosure

• We never photograph, publish, or reference your residence, name, or location without your explicit written consent.
  
• All team members and collaborating partners are bound by strict non‑disclosure agreements (NDAs).
  
• Any sensitive documents (plans, budgets, specifications) are shared on a need‑to‑know basis only.
  

Use of Imagery & Testimonials

• Any project imagery or testimonials used for portfolio, press, or digital communications is anonymised and submitted to you for written approval beforehand.
  
• You may revoke that consent at any time; upon written request, we will withdraw the material from future use.
  
• We do not disclose addresses, floor plans, or personally identifiable details without express permission.
  

Data Security

Thomas Heagle operates under applicable data protection laws and takes all reasonable precautions to keep your personal information secure, including restricted access, encrypted storage, and secure transfer protocols.

Amending or Removing Your Details

If you have any questions, comments, or concerns about how we handle your personal information, contact us at contact@thomasheagle.com. You have the right to tell us if you:

• Do not wish to be contacted in the future
  
• Would like us to correct, update, or delete your personal information in our records
  
• Wish to report any misuse of your personal information
  

Marketing Communications & Preference Management

• We will only send you newsletters, invitations, or updates if you have explicitly opted in.
  
• You can choose the type of communications you receive (e.g., press previews, private events, project announcements) and update your preferences at any time.
  
• Every marketing email includes a clear unsubscribe link.
  
• We do not sell or rent your personal information. If U.S. state laws require it (e.g., California), we provide a “Do Not Sell or Share My Personal Information” option.
  

Cookies & Tracking Technologies

• We use essential cookies for site functionality, and (with your consent) analytical and marketing cookies to understand usage and improve your experience.
  
• You can manage or withdraw cookie consent at any time via our cookie banner or your browser settings.
  
• For full details of the cookies we use, their purpose, and retention periods, please refer to our Cookie Policy.

Social Media Platforms

Communication, engagement, and actions taken through external social media platforms that we participate in are subject to the terms and privacy policies of each platform. We will never request sensitive or personal information through social media. For confidential matters, please contact us via email at contact@thomasheagle.com.

Changes to Our Privacy Policy

We may update this Privacy Policy from time to time by posting the new version on this website. We encourage you to visit periodically to stay informed about how we use your personal information.

Cookie Policy

July 2025

What are cookies?
Cookies are small text files placed on your device to make our site work and to help us understand how it is used. We only place strictly necessary cookies without consent; all other categories (analytics, marketing, etc.) require your explicit, informed opt‑in and can be declined without loss of core site functionality.

Types of cookies we use

• Essential cookies – Required for site functionality (security, navigation, form submission).
  
• Performance / Analytics cookies – Measure traffic and usage patterns to improve the experience.
  
• Functional cookies – Remember your preferences (e.g., language).
  
• Marketing / Advertising cookies – Enable personalized content or measure campaign effectiveness.
  
• Social media & embedded content cookies – Set by platforms like Instagram when you view or share our content.
  Only essential cookies are set by default. All others load after you consent via our banner or preference centre.
  
  

Managing cookies from your browser
You can control cookies through your browser settings (blocking, deleting, or setting alerts). Blocking essential cookies may affect site performance.

Retention & detailed list
We keep cookies only as long as necessary for their stated purpose. A live list of cookies (name, provider, purpose, lifespan, type) is available in our Cookie Settings panel.

Updates
We may update this Cookie Policy periodically. Check the “Last updated” date above.

California & U.S. Privacy Addendum

Applies to residents of California and, where noted, other U.S. states with similar privacy laws
Last updated: july 2025

Scope
This Addendum supplements our Privacy Policy for California residents under the CCPA/CPRA and—where applicable—similar state laws.

Categories of Personal Information We Collect

• Identifiers (name, email, phone, postal address)
• Commercial information (project scope, budgets, invoices)
• Internet / device activity (pages viewed, cookie IDs, IP address)
• Professional or employment information (if provided)
• Inferences drawn from the above to tailor our services
  We do not knowingly collect sensitive personal information beyond what is necessary to deliver our services (e.g., precise home location for a project).
  

Sources of Personal Information

Directly from you, from your representatives, and from service providers working on your project.

Purposes for Use

To deliver our services, manage our relationship, process payments, secure our systems, comply with legal obligations, and—only with your consent—send marketing communications.

Disclosure of Personal Information

Shared with trusted service providers strictly for project execution or business operations (IT hosting, artisans, logistics). They are contractually bound to equal confidentiality and security standards.

Sale or Sharing of Personal Information

We do not sell personal information for monetary value. If we ever engage in “sharing” for cross‑context behavioural advertising, you can opt out at any time by contacting us. We honour Global Privacy Control (GPC) signals automatically. We never sell or rent your data outright.

Right to Limit Use of Sensitive Personal Information

If we process sensitive personal information, you may direct us to limit its use and disclosure to what is necessary to provide requested services.

Your Rights (California)

You may:

• Know / Access the categories and specific pieces of personal information we hold about you
  
• Correct inaccuracies
  
• Delete your personal information (subject to legal exceptions)
  
• Opt out of sale or sharing of personal information
  
• Limit the use/disclosure of sensitive personal information
  
• Exercise these rights without discrimination
  

How to Exercise Your Rights

Email us at contact@thomasheagle.com. We will verify your identity to protect your information. You may authorise an agent to act for you; we will require proof of authorisation.

Opt‑Out Preference Signals (GPC)

If your browser sends a recognized opt‑out preference signal, we treat it as a valid opt‑out for that browser or device.

Data Retention

We retain personal information only as long as needed for the purposes described (generally for the duration of the project plus legal retention periods), then securely delete or anonymise it.

Updates to This Addendum

We may amend this Addendum. The “Last updated” date will reflect changes.