Privacy Policy
Last updated: June 2026
This policy explains how [COMPANY NAME] Ltd (“Renovation Register”, “we”, “us”) collects and uses personal data. We are the data controller. Company no. [COMPANY NUMBER], registered office [REGISTERED OFFICE ADDRESS]. Contact: privacy@renovationregister.co.uk.
1. Who this applies to
- Homeowners who submit a free project enquiry;
- Installers / partners who apply for a Verified Partner subscription; and
- Listed installer businesses we may contact about relevant enquiries.
2. Data we collect and why
Homeowner enquiries
When you submit an enquiry we collect your name, email, phone, postcode and project details. We use this to match you with one relevant MCS-certified installer in your area and to send you a confirmation. Lawful basis: taking steps at your request to put you in touch with an installer (performance of/steps prior to a contract) and our legitimate interest in operating the matching service. We do not sell your data and do not share a single enquiry with multiple installers at once.
Verified Partner applications
When an installer applies through our verification flow we collect the contact name, email, phone and the company selected, plus payment status. We use this to process the application, create an account, take payment and provide the subscription. Lawful basis: performance of a contract. If you ticked the optional marketing box we also use your details to send partner tips and offers (lawful basis: consent, which you may withdraw at any time).
Listed installer businesses (directory & outreach)
Our directory includes installer businesses sourced from public certification registers (e.g. MCS), including business contact details. Where a homeowner enquiry matches no Verified Partner, we may send the relevant enquiry to a nearby, suitably certified installer business as a free introduction, and we may contact listed businesses about becoming a Verified Partner. Lawful basis: our legitimate interest (and yours) in matching local demand to relevant trades (business-to-business). Every such message identifies us and carries a one-click unsubscribe; once you unsubscribe we suppress your address and stop.
Technical & analytics data
We use first-party, privacy-first analytics to understand how our pages and signup flow perform. We store anonymous events (e.g. page views, scroll depth, signup-step progress) with a random session identifier in your browser’s local storage — not advertising cookies, and not sold or shared. We also briefly process IP addresses to rate-limit forms and prevent abuse. Lawful basis: legitimate interest in securing and improving the Service.
3. Who we share data with
- The matched installer — for a homeowner enquiry, the single installer we route it to.
- Stripe — to process subscription payments (we do not store card details).
- Resend — our email delivery provider, to send transactional and (where applicable) outreach email.
- Cloudflare — hosting, security and bot protection.
These providers act as our processors under contract, or as independent controllers for their own services. We do not sell personal data.
4. International transfers
Some providers (e.g. Stripe, Resend, Cloudflare) may process data outside the UK/EEA. Where they do, transfers are protected by appropriate safeguards such as UK/EU Standard Contractual Clauses or an adequacy decision.
5. How long we keep data
We keep enquiry and account data for as long as needed to provide the Service and to meet legal, accounting and dispute requirements, then delete or anonymise it. Suppression-list entries are kept indefinitely so we can continue to honour your unsubscribe. Analytics events are retained in aggregate for trend analysis.
6. Your rights
Under UK GDPR you have the right to access, correct, delete or restrict your data, to object to processing (including direct marketing), to data portability, and to withdraw consent. To exercise any right, email privacy@renovationregister.co.uk. You can also unsubscribe from marketing at any time via the link in any such email. You have the right to complain to the UK Information Commissioner’s Office (ico.org.uk).
7. Children
The Service is intended for adults (18+) and is not directed at children.
8. Changes & contact
We may update this policy from time to time; the current version is always published here. Questions: privacy@renovationregister.co.uk or hello@renovationregister.co.uk.