Aerial view of the Shard skyscraper in London, towering above the cityscape and Thames River.

Privacy Policy

Last updated: 02/02/2026

1. Introduction

Mobius Building Consultancy Ltd (“Mobius”, “we”, “us”, “our”) is a building surveying company based in London, United Kingdom, providing professional surveying services including (but not limited to) building surveys and Energy Performance Certificates (EPCs).

We are committed to protecting your privacy and handling personal data in a transparent, secure, and lawful manner, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website or contact us through it.

2. Who We Are (Data Controller)

Mobius Building Consultancy Ltd is the Data Controller responsible for your personal information.

Registered office:
22 Eastcheap, London EC3M 1EU

Email:
info@mobiusbc.co.uk

3. What Personal Data We Collect

Our website does not automatically collect personal data for marketing or profiling purposes.

We only collect personal data that you voluntarily submit via our website contact form, which may include:

  • Name
  • Email address
  • Telephone number
  • Property address or location
  • Details relating to your enquiry or property

We do not collect payment details via the website.

4. How We Use Your Personal Data

We use the personal data you provide solely for legitimate business purposes, including:

  • Responding to enquiries submitted via the website
  • Providing quotations or information about our services
  • Arranging surveys, inspections, or site visits
  • Communicating with you in relation to your enquiry

We do not use your data for automated decision-making or profiling.

5. Lawful Basis for Processing

Under UK GDPR, our lawful basis for processing your personal data is:

  • Legitimate interests – to respond to enquiries and deliver professional services
  • Consent – where you voluntarily submit your information via our contact form

You may withdraw your consent at any time by contacting us.

6. Data Sharing

We do not sell, rent, or trade personal data.

Your data may be shared only where necessary with:

  • Trusted professional partners or subcontractors directly involved in delivering a requested service (for example, accredited EPC assessors), and only where required
  • Regulatory bodies or legal authorities where required by law

All third parties are required to handle your data securely and in accordance with applicable data protection legislation.

7. Data Storage and Retention

We take appropriate steps to ensure personal data is stored securely.

  • Contact form submissions are accessed only by authorised personnel
  • Personal data is retained only for as long as necessary to respond to your enquiry and meet legal, regulatory, or professional obligations
  • Data that is no longer required is securely deleted

8. Data Security and Cyber Essentials

Mobius takes the security of personal data seriously.

We are Cyber Essentials accredited, demonstrating that we have appropriate technical and organisational measures in place to protect data against common cyber threats.

These measures include, where applicable:

  • Secure systems and access controls
  • Encrypted connections (HTTPS)
  • Device and account security policies
  • Restricted access to personal data on a need-to-know basis

While no system can be guaranteed to be completely secure, we take reasonable and proportionate steps to safeguard personal data.

9. Cookies and Website Analytics

Our website is built and hosted using Webflow, which provides built-in cookie management and consent controls.

  • Essential cookies may be used to ensure the website functions correctly
  • Non-essential cookies (such as analytics) are only used where consent has been given via the website’s cookie controls
  • Any analytics data collected is anonymised and used solely to understand website performance and improve user experience

You can manage or withdraw your cookie preferences at any time using the cookie controls provided on the website or via your browser settings.

10. Your Data Protection Rights

Under UK GDPR, you have the right to:

  • Request access to the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your personal data
  • Object to or request restriction of processing
  • Withdraw consent at any time
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

ICO website:
https://www.ico.org.uk

To exercise any of your rights, please contact us using the details above.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of third-party websites.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page, with the revision date updated accordingly.