Privacy Policy
Bond Conversions Limited
Company number 17112801
Last updated: 4 October 2026
1. Who we are
Bond Conversions Limited is the controller responsible for the personal information described in this Privacy Policy.
You can contact us about privacy or data protection matters at hello@bondconversions.co.uk or by telephone on 07962 706496.
We are based in Devon, UK.
2. What personal information we collect
Depending on how you interact with us, we may collect:
- name and contact details, such as email address and telephone number;
- vehicle details, including registration number, make, model and other information needed to carry out a conversion;
- project information, including specifications, workshop dates, progress, build notes, decisions and communications;
- photographs and other files associated with a project;
- quote, order, invoice and payment information;
- information contained in messages, emails and website enquiries;
- client portal account information and authentication/security records;
- website technical information needed for security, operation and troubleshooting; and
- cookie, analytics and advertising information where you have given the required consent.
3. How we collect information
We normally collect information directly from you, for example when you contact us, request a quotation, become a customer, provide project information or use the client portal.
We may also receive information from service providers used to operate the business, or from publicly available sources where appropriate. Where information is obtained from another source, we will provide the privacy information required by law where applicable.
4. Why we use personal information and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Responding to website enquiries and discussing potential work | Contract or taking steps at your request before entering into a contract |
| Providing campervan conversion services and managing your project | Contract |
| Operating the client portal, including build diaries, project photographs and documents | Contract |
| Preparing quotations and proposals | Contract or taking steps at your request before entering into a contract |
| Invoices, VAT, accounting and financial records | Legal obligation and contract |
| Receiving and reconciling customer payments | Contract and legal obligation |
| Website, portal and information security, fraud prevention, access control and backups | Legitimate interests |
| Google Analytics measurement | Consent |
| Google advertising and conversion measurement | Consent where required |
| Embedded or other third-party content such as Google Maps | Consent where required |
5. Legitimate interests
Where we rely on legitimate interests, our interests include keeping our website and client portal secure, preventing misuse and fraud, maintaining reliable backups, protecting business systems and records, and administering our business effectively. We balance these interests against your privacy rights and expectations.
6. Client portal
Customers may be given access to a secure client portal containing information about their project. This can include project details, build diary entries, photographs, documents, decisions, comments and relevant contact information.
Access is controlled according to the customer's account and project permissions. We use technical and organisational measures designed to prevent unauthorised access, alteration or disclosure.
Customers should not upload information to the portal that they are not entitled to share with us.
7. Project photographs and customer information
Project photographs are normally taken to record and communicate the progress of a vehicle conversion. Photographs may contain vehicle registration numbers or incidental personal information.
We keep private project material separate from material intended for public marketing. If we want to use identifiable customer information, customer testimonials or customer/project photographs publicly for marketing, we will use an appropriate permission or consent process where required.
8. Website enquiries and email
Information submitted through our website enquiry form is used to respond to your enquiry and, where appropriate, to provide quotations or services. Website enquiries are sent to our business email system rather than being stored in a website enquiry database.
Business email is hosted by IONOS and accessed using secure connections.
9. Service providers and who we share information with
We use selected service providers to operate the business. Depending on the service involved, these may include:
- IONOS, for website hosting, client portal hosting, email and backups;
- FreeAgent, for accounting and financial administration;
- Clever Accounts, where they provide accounting support and access to relevant FreeAgent information;
- Virgin Money, for business banking and customer payments;
- Google services, including Google Analytics, Google Search Console, Google Ads and Google Maps, where applicable and subject to the relevant consent settings.
We do not sell personal information to third parties. We only disclose information where necessary for the purposes described in this policy, where we have a legal obligation or where you have otherwise authorised us to do so.
10. International transfers
Some of the service providers we use may process information in countries outside the UK. Where personal information is transferred internationally, we will use the transfer mechanism and safeguards required by applicable data protection law.
Our service-provider arrangements are reviewed as part of our data protection and supplier-management process.
11. Cookies and similar technologies
Our website uses essential technologies needed for the website and privacy controls to operate. We may also use non-essential analytics, advertising and third-party content technologies.
Non-essential technologies such as Google Analytics are not intended to be loaded before the required consent has been given. Where applicable, Google advertising and third-party content such as embedded Google Maps are also controlled through our consent mechanism.
You can change your non-essential cookie choices using the .
We will review our use of cookies and similar technologies when services or website functionality change.
12. Google Analytics and Google advertising
With your consent, we use Google Analytics to understand how visitors use our website and to help us improve it. We have disabled Google Signals.
We may use Google Ads for paid search advertising. Advertising and conversion measurement will be governed by the website consent framework where consent is required.
Google Search Console is used to understand how our website appears in Google search. It is an administrative and search-performance service rather than a mechanism for identifying individual visitors for marketing.
13. Google Maps
Our contact page may include an embedded Google Map showing our business location. Google Maps is a third-party service and may communicate with Google when loaded. We therefore intend to control the embedded map through the website's third-party-content consent setting.
14. Data retention
We keep personal information only for as long as we reasonably need it for the purpose for which it was collected, to provide useful service history, to meet legal or accounting requirements, to resolve disputes or to protect our legitimate interests.
| Information | Working retention approach |
|---|---|
| Website enquiries | Normally around 12 months after the last meaningful contact unless there is an ongoing reason to retain them. |
| Active client accounts and projects | While required to provide and manage the service. |
| Completed projects | Retained for reasonably useful service history, subject to periodic review. |
| Archived projects | Internal access only, with a periodic review, currently envisaged at least every two years. |
| Build diary, comments, decisions, photographs and project documents | Normally retained with the project while reasonably required. |
| Quotes and proposals | Normally retained for up to 6 years where appropriate. |
| Invoices, VAT and accounting records | Normally retained for at least 6 years, or longer where required. |
| Security and login records | Normally retained for up to 12 months, subject to operational and security requirements. |
| Backups | Retained according to the applicable backup cycle and recovery requirements. |
These periods are working retention criteria rather than a promise that every record will be deleted on a particular date. We review retention when the purpose for holding information ends or changes.
15. Security
We use appropriate technical and organisational measures to protect personal information. These include access controls, authenticated user accounts, secure sessions, password protection, encryption in transit, anti-forgery protections, input validation, controlled access to project files, security headers, backups and monitoring of relevant security events.
Access to business systems is limited according to the role required. We do not use shared customer or administrator credentials where individual accounts are available.
16. Your data protection rights
Depending on the circumstances and the lawful basis involved, you may have rights under UK data protection law including:
- the right to be informed about how your information is used;
- the right to request access to your personal information;
- the right to ask us to correct inaccurate or incomplete information;
- the right to ask us to erase information in certain circumstances;
- the right to ask us to restrict processing in certain circumstances;
- the right to object to certain processing, including processing based on legitimate interests;
- the right to data portability in circumstances where it applies; and
- the right to withdraw consent where we rely on consent.
Some rights are subject to conditions and exceptions. For example, information that we are legally required to retain may not be erasable simply because a customer asks us to delete it.
To exercise a right, contact us at hello@bondconversions.co.uk. We may need to verify your identity before responding.
17. Complaints
If you have a concern about how we use your personal information, please contact us first so that we have an opportunity to address it.
You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), if you believe your personal information has been handled unlawfully.
ICO: ico.org.uk
18. Personal data breaches
We maintain procedures for identifying, assessing and responding to personal data breaches. Where applicable, we will notify the ICO and affected individuals within the timescales required by law.
19. Automated decision-making
We do not currently make decisions about customers that produce legal or similarly significant effects based solely on automated processing or profiling.
20. Changes to this Privacy Policy
We may update this policy when our services, systems or data-processing activities change, or when legal or regulatory requirements change. We will update the date at the top of this page and, where appropriate, draw significant changes to customers' attention.
Back to the Bond Conversions website: Home