Privacy Policy

Privacy Policy

Last updated: 26 April 2026

This privacy policy explains how Andy Painting Service collects, uses and protects your personal information when you use our website or contact us about painting and decorating work. We’ve kept the language plain on purpose — if anything is unclear, just get in touch and we’ll explain.


Who We Are

Andy Painting Service is a sole trader business operating from:

Andy Painting Service
81 Rochdale Road
Sunderland
SR5 5NL
United Kingdom

Phone: 0790 8242 036
Email: info@andypaintingservice.co.uk
Website: https://andypaintingservice.co.uk

For the purposes of UK GDPR and the Data Protection Act 2018, Andy Painting Service is the “data controller” of your personal information.


What Information We Collect

We only collect the information we genuinely need to give you a quote, carry out a job, or reply to a question. That includes:

  • Contact details — your name, email address, phone number and address.
  • Job details — information about the work you’d like done, photos you choose to send, and any access arrangements you tell us about.
  • Communications — any messages you send us by contact form, email, phone or text, and our replies.
  • Payment records — for completed jobs, we keep invoice records as required by HMRC.
  • Website usage data — anonymised information about how visitors use the site, collected through cookies (see the Cookies section below).

We do not collect or process any “special category” data (such as health, religion, or biometric information) as part of our service.


How We Collect It

We collect information directly from you when you:

  • Fill in our website contact form
  • Email, phone, text or message us
  • Speak to us in person at a quote or on a job
  • Leave us a review on Google, Checkatrade or Three Best Rated (these platforms collect your details under their own privacy policies)

We also automatically collect limited technical information when you visit the website, such as your IP address, browser type, and pages visited. This is used to keep the site secure and to understand how it’s being used.


Why We Collect It (Legal Basis)

Under UK GDPR, we need a lawful basis to process your personal information. We rely on the following:

  • Contract — when you ask us for a quote or hire us for a job, we process your information to fulfil that agreement.
  • Legitimate interests — replying to enquiries, maintaining business records, and improving our website are all activities we have a legitimate interest in carrying out, balanced against your rights.
  • Legal obligation — we keep certain records (such as invoices and tax-related documents) because UK law requires it.
  • Consent — for non-essential cookies and any future marketing communications, we rely on your explicit consent, which you can withdraw at any time.

How We Use Your Information

We use the information we collect to:

  • Reply to your enquiry and provide a quote
  • Carry out painting and decorating work you’ve hired us for
  • Send you invoices and keep accounting records
  • Communicate with you about a job in progress
  • Maintain a portfolio of completed work (only with your permission for any identifiable photos)
  • Improve our website and services
  • Comply with our legal and tax obligations

We will never sell your personal information to anyone, ever. We don’t run email marketing campaigns, and we won’t add you to a mailing list without your explicit consent.


How Long We Keep It

We only keep your information for as long as we genuinely need it:

  • Quote enquiries that don’t lead to a job — kept for up to 12 months, then deleted.
  • Customer records for completed jobs — kept for 6 years after the job is finished, in line with HMRC requirements for self-employed business records.
  • Email correspondence — kept while it remains relevant to an active or recent project, then archived or deleted.
  • Website analytics data — anonymised and retained according to the analytics platform’s standard settings (typically 14-26 months).

You can ask us to delete your information sooner — see “Your Rights” below.


Who We Share It With

We don’t share your personal information with anyone except where genuinely necessary to run the business or where we’re required to by law. The categories of third parties who may handle your data on our behalf are:

  • Our website hosting provider — to store and serve the website you’re reading.
  • Our email provider — to send and receive emails to and from you.
  • Our accountant or bookkeeping service — to maintain proper financial records.
  • HMRC and other regulatory bodies — where we’re legally required to disclose information.
  • Google — if you’ve consented to analytics cookies, anonymised website usage data is shared with Google Analytics.

All third parties we work with are required to protect your information and use it only for the specific purposes we’ve engaged them for.


Where Your Information Is Stored

Your information is primarily stored on servers located within the UK or European Economic Area (EEA). Some service providers (such as Google) may transfer data outside the UK/EEA — where this happens, we ensure they have appropriate safeguards in place, such as Standard Contractual Clauses or adequacy decisions, in line with UK GDPR.


Your Rights

Under UK GDPR, you have the following rights over your personal information:

  • Right to be informed — about how we use your data (this policy is part of fulfilling that right).
  • Right of access — you can ask for a copy of the personal information we hold about you (a “subject access request”).
  • Right to rectification — if any information we hold is wrong, you can ask us to correct it.
  • Right to erasure — you can ask us to delete your information, subject to any legal obligations we have to retain it.
  • Right to restrict processing — you can ask us to limit how we use your data.
  • Right to data portability — you can ask for a copy of your data in a portable format.
  • Right to object — you can object to certain types of processing, such as processing based on legitimate interests.
  • Rights related to automated decision-making — we don’t use automated decision-making, but you have the right to be protected from it where it does occur.

To exercise any of these rights, email info@andypaintingservice.co.uk or write to us at the address above. We’ll respond within one month.


Cookies

Our website uses cookies — small text files stored on your device — to make the site work properly and to understand how visitors use it.

Essential cookies

These are required for the website to function (for example, remembering you’re logged in if you have an account, or running our caching system). They don’t track you and don’t need consent.

Analytics cookies

If you consent, we use cookies from Google Analytics or similar services to understand which pages are popular, where visitors come from, and how to improve the site. These cookies collect anonymised information.

Third-party cookies

If we embed content from other platforms (such as YouTube videos, Google Maps, or social media) those platforms may set their own cookies. We have no control over these — please refer to the relevant platform’s privacy policy.

Managing cookies

You can refuse non-essential cookies through the cookie banner that appears when you first visit. You can also block or delete cookies through your browser settings — see aboutcookies.org for guidance. Please note that blocking essential cookies may stop parts of the site working properly.


Security

We take reasonable steps to protect your personal information from unauthorised access, loss or misuse. The website is served over HTTPS (encrypted connection), and we limit access to your information to people who genuinely need it to do their job. No system is 100% secure, but we treat your data with the same care we’d want for our own.


Children’s Privacy

Our services are aimed at adults. We don’t knowingly collect personal information from anyone under 16. If you believe a child has provided us with information, please contact us and we’ll delete it.


Changes to This Policy

We may update this policy from time to time — for example, if we change the tools we use or if the law changes. The “Last updated” date at the top will always show when it was most recently revised. For significant changes, we’ll do our best to notify anyone who has an active project with us.


How to Complain

If you’re not happy with how we’ve handled your personal information, please contact us first — most issues can be resolved quickly and informally. Email info@andypaintingservice.co.uk or call 0790 8242 036.

If we can’t resolve the issue between us, you have the right to complain to the Information Commissioner’s Office (ICO), which is the UK’s data protection regulator:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
United Kingdom

Helpline: 0303 123 1113
Website: ico.org.uk


Contact Us

If you have any questions about this privacy policy or how we handle your personal information, please contact:

Andy Painting Service
81 Rochdale Road, Sunderland, SR5 5NL
Email: info@andypaintingservice.co.uk
Phone: 0790 8242 036