Last Updated: 17 September 2026

1. Introduction:

TWO PLUS TWO is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal information when you:

• Visit our website;
• Contact us by email, telephone or online form;
• Engage with our services;
• Apply for employment opportunities with us; or
• Otherwise interact with TWO PLUS TWO.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable data protection legislation.

2. Who We Are

TWO PLUS TWO is a consultancy providing quantity surveying, construction planning and dispute resolution services throughout the United Kingdom.

If you have any questions regarding this Privacy Policy or how we process your personal data, please contact us:

Email: hello@two-plus-two.com

3. Information We Collect

We may collect and process the following categories of personal information.

Information You Provide Directly:

• Name
• Job title
• Company name
• Email address
• Telephone number
• Postal address
• Information contained within enquiries or correspondence
• CVs, cover letters and recruitment information

Information Collected Automatically:

When you visit our website, we may collect:

• IP address
• Browser type and version
• Device information
• Website usage information
• Pages viewed and time spent on our website
• Referral source information

Information From Third Parties:

We may receive information from:

• Recruitment agencies
• Professional networking platforms such as LinkedIn
• Clients, suppliers and business partners
• Publicly available sources

4. How We Use Your Information:

We may use your personal information to:

• Respond to enquiries and requests
• Provide our professional services
• Manage client and supplier relationships
• Administer contracts and projects
• Process job applications
• Maintain our talent pool
• Improve our website, services and user experience
• Comply with legal, regulatory and professional obligations
• Protect our business against fraud, cyber threats and misuse

5. Lawful Basis for Processing:

Under UK GDPR, we rely on one or more of the following lawful bases:

Contract

Where processing is necessary to enter into or perform a contract with you.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, including:

• Providing professional services
• Managing business relationships
• Responding to enquiries
• Recruitment activities
• Website administration
• Business development and marketing

We ensure our legitimate interests do not override your rights and freedoms.

Legal Obligation

Where we are required to process personal data to comply with applicable laws, regulations or professional obligations.

Consent

Where consent is required, we will obtain it before processing, and you may withdraw your consent at any time.

6. Recruitment and Talent Pool:

When you apply for a role with TWO PLUS TWO, we will process the information contained within your application, CV and any supporting documentation.

If you are unsuccessful in securing a role, we may retain your details in our talent pool to consider you for future employment opportunities.

Your recruitment information may be retained for up to 12 months following the conclusion of the recruitment process. You may request removal from our talent pool at any time by contacting us.

Following the retention period, your information will be securely deleted unless we have a lawful reason to retain it for longer.

7. Sharing Your Information:

We do not sell personal information.

We may share personal data where necessary with:

• Professional advisers
• IT service providers
• Website hosting providers
• Cloud service providers
• Contractors and consultants
• Regulatory authorities
• Law enforcement bodies where legally required

All third parties are expected to process personal data securely and only for legitimate purposes.

8. International Transfers:

Where our service providers process information outside the United Kingdom, we will seek to ensure appropriate safeguards are in place to protect personal data, such as:

• The UK International Data Transfer Agreement (IDTA);
• Approved contractual safeguards; or
• Adequacy regulations recognised by the UK Government.

9. Data Security

We take appropriate technical and organisational measures to protect personal information against:

• Unauthorised access;
• Loss;
• Destruction;
• Alteration;
• Misuse; and
• Unlawful disclosure.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

10. Data Retention:

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting and reporting requirements.

Retention periods may vary depending on the type of information and the reason for processing.

11. Your Rights

Under UK GDPR you have the right to:

• Request access to your personal information;
• Request correction of inaccurate data;
• Request erasure of your information in certain circumstances;
• Request restriction of processing;
• Object to certain processing activities;
• Request transfer of your data where applicable;
• Withdraw consent where processing is based on consent.

Requests can be submitted using the contact details contained within this Privacy Policy.

12. Cookies

Our website uses cookies and similar technologies to help provide, improve and protect our website and services.

Cookies may be used to:

• Ensure the website functions properly;
• Remember user preferences;
• Analyse website traffic and usage patterns;
• Improve website performance and user experience;
• Support security and fraud prevention measures.

Where required by law, we will obtain your consent before placing non-essential cookies on your device. You can manage your cookie preferences through our cookie banner or via your browser settings at any time.

For detailed information about the cookies we use, the purposes for which they are used, and how to manage your preferences, please see our Cookie Policy.

13. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the content, privacy practices or security of external websites and encourage users to review their privacy policies.

14. Complaints

If you have concerns regarding how we process your personal information, please contact us first so that we can attempt to resolve the issue.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Information Commissioner’s Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113

15. Related Policies

Please also refer to our Cookie Policy, which explains how cookies and similar technologies are used on our website.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Any updates will be published on this page and take effect from the date of publication.