This Privacy Policy explains how GS Renovation Ltd collects, uses, stores and protects your personal data when you use our website or contact us, in line with the UK GDPR and the Data Protection Act 2018.
Who we are
This website is owned and operated by GS Renovation Ltd (trading as GS Renovation & Home Improvements), a private limited company registered in England and Wales under company number 14611254, with its registered office at 3 Chauncy Avenue, Potters Bar, EN6 5LE.
- Phone: 07472 424 226
- Email: info@gsrenovationltd.co.uk
For the purposes of data protection law, GS Renovation Ltd is the data controller for the personal data we process.
What data we collect
We collect only the data you choose to give us, and basic technical data:
- Enquiry data you submit through our contact and quote forms: your name, phone number, email address, and the project details you provide.
- Communications you send us by phone, email or WhatsApp, including any photos or documents you attach.
- Customer records if you hire us: the address of the work, what we agreed, quotes, invoices and payments, and notes about the job.
- Technical data such as your IP address and browser type, collected automatically by our hosting provider for security and performance.
- How you found us, if you tell us or it is in the link you arrived by: the optional “How did you hear about us?” answer on our forms, any advertising tags in the link (such as utm_source or a Google Ads click ID), the first page you landed on and the website that sent you. These are attached to your enquiry when you send it. The Cookie Policy explains how the site holds them until then.
You do not have to give us any of this, but we need at least a phone number or email address to reply to you.
Our home page shows a Google Map. When the map loads, your browser contacts Google, which receives your IP address and may set cookies under its own privacy policy. The Cookie Policy has the details.
How we use your data, and our lawful basis
- To respond to your enquiry, visit, and give you a quotation, and to follow your enquiry up (lawful basis: taking steps you have asked for before entering into a contract with you).
- To deliver renovation services you engage us for, including your guarantee (lawful basis: performance of a contract).
- To keep records and meet our legal, tax and accounting obligations (lawful basis: legal obligation).
- To protect our forms and website from spam and misuse, which is why your IP address is recorded with a form submission (lawful basis: our legitimate interest in keeping the site secure).
- To understand how people find us, so we know which listings and adverts are worth paying for (lawful basis: our legitimate interest in running our marketing sensibly). We look at this per enquiry and in totals; we do not use it to build a profile of you.
We use your enquiry details to deal with your enquiry and any project that follows. We do not add you to a mailing list, and we do not sell your data. We do not make decisions about you by automated means that have legal or similarly significant effects.
Our forms and enquiry system
Our website forms are processed by Web3Forms, which receives your submission and forwards it to our email inbox. Web3Forms acts as a data processor on our behalf under its data processing agreement.
Once Web3Forms has accepted your submission, our website also saves a copy of the details you entered, together with the page you sent it from and your IP address (used to protect the form against spam), to our own password-protected enquiry management system. Its database is hosted for us by Neon, connected through our website host Vercel. We use it to keep track of your enquiry and follow it up, and, if you hire us, to manage your job.
When a new enquiry arrives, the phones of the staff who handle enquiries receive a notification showing your name, the type of job, the area and your phone number. It is sent encrypted through the notification service of the staff member’s browser (run by Google, Apple or Mozilla, depending on the device), which passes it on but cannot read it.
Staff phones also receive notifications when a job’s dates or status change, when a quote is accepted through the link we send you, and, if we switch it on, a weekly summary of figures. These show the job’s name and area, its dates, the quote reference and the amount, and are sent the same encrypted way.
Many of our pages have a WhatsApp button. It opens WhatsApp with a short message already typed that names the page you were on; you can change or delete it before sending.
If you message us on WhatsApp, we receive your phone number, your WhatsApp profile name and photo as you have set them, and the messages, photos and documents you send. We use them in the same way and on the same lawful basis as any other enquiry: to reply to you and, if you go ahead, to run your project.
WhatsApp is not our processor. It is provided to UK users by WhatsApp LLC, part of Meta, in the United States, under its own terms and privacy policy, which explain what WhatsApp itself collects when you use it. WhatsApp says it uses Meta’s data centres, including in the United States. If you would rather not use WhatsApp, call or email us instead.
Who we share your data with
We do not sell your personal data. We share it only where necessary with: trusted sub-contractors and suppliers involved in delivering your project; the service providers listed in the next section; and professional advisers or authorities where required by law.
Where your data is held, and transfers outside the UK
These are the service providers that handle your data for us, where they are, and what protects your data when it leaves the UK:
- Vercel (Vercel Inc., United States) hosts this website. Pages are delivered from Vercel’s global network, from the location nearest to you, and Vercel keeps technical logs of requests, including IP addresses, for security and performance. Our website’s server code runs in Vercel’s London region, but Vercel says its primary processing facilities are in the United States. Vercel’s data processing agreement includes the UK International Data Transfer Addendum to the EU standard contractual clauses for transfers from the UK.
- Neon (Neon Inc., part of Databricks, United States) hosts the database for our enquiry management system. The database itself is stored in London, on Amazon Web Services. Neon’s data processing agreement covers any transfer of UK data to the United States through the Data Privacy Framework or, where that does not apply, the standard contractual clauses with the UK Addendum.
- Web3Forms (run by Web3Creative, which operates from India) receives what you type into our forms and emails it to us. It runs on Amazon Web Services, Cloudflare and Hetzner infrastructure, which may be in several countries, and it sends submitters’ IP and email addresses to spam-checking services (CleanTalk and Akismet). India does not have a UK adequacy decision, so Web3Forms’ data processing agreement applies the standard contractual clauses with the UK Addendum to transfers from the UK.
- Hostinger (Hostinger International Ltd, Cyprus, and Hostinger UK Ltd) hosts our email, so enquiries forwarded by Web3Forms and emails you send us are held in our Hostinger mailbox. Cyprus is in the European Economic Area, which the UK recognises as giving adequate protection, and Hostinger’s data processing agreement applies the UK Addendum to any transfer to a country that is not recognised in this way.
- Google Maps (Google LLC, United States) provides the map on our home page and acts under its own privacy policy, not as our processor. Google certifies under the UK Extension to the EU-US Data Privacy Framework, which UK law recognises as giving adequate protection, and also uses standard contractual clauses.
WhatsApp is covered in its own section above.
How long we keep it
We keep enquiry records only for as long as we need them to respond to you and follow up your enquiry. If you become a customer, we keep your records for as long as we need them for your guarantee, for tax and accounting, and to deal with any legal claim. After that we delete them.
Our providers delete their copies on their own schedules. For example, Web3Forms says it deletes form submissions automatically within three years.
Your rights
Under UK data protection law you have the right to: access your data; have it corrected or erased; restrict its processing; object to processing we carry out on the basis of our legitimate interests; data portability; and, where we rely on your consent, to withdraw it at any time. To exercise any of these rights, contact us using the details above.
Cookies
We do not use analytics or advertising cookies. Please see our Cookie Policy for details.
Complaints
If you have a concern about how we handle your data, please contact us first and we will do our best to put it right. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Changes to this policy
We may update this policy from time to time. The latest version is always available on this page.