Privacy Policy

Effective date: 14 August 2026

Awyar Painting ("we", "our", "us") is committed to protecting and respecting your privacy. This policy explains how we collect, use, disclose and safeguard your personal data in accordance with the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data We Collect

• Contact information: Name, email address, phone number, and postcode provided through our contact forms or quote requests.
• Account information: Username, password (stored as a secure hash), and login timestamps for admin users.
• Technical data: Basic web server logs (IP address, browser type) which are temporarily held for security and abuse prevention purposes only.

2. How We Use Your Data

We use your personal data to:

• Provide painting services quotations and communicate with you about your requests.
• Manage your admin account securely, including authentication and password recovery.
• Improve our website and services through analytics.
• Comply with legal obligations and protect our legitimate interests.

3. Legal Basis for Processing

We rely on the following legal grounds:

• Performance of a contract: When you request a quote or use our services.
• Consent: When you explicitly consent to receive marketing communications (you may withdraw consent at any time).
• Legitimate interests: For website security, fraud prevention, and improving service quality.
• Legal obligations: To comply with tax, accounting, and regulatory requirements.

4. Data Sharing & Transfers

We do not sell your personal data. We may share data with authorized third-party data processors who provide essential services to operate our website securely:

• Cloudflare, Inc.: Used for website hosting, secure database storage, anti-bot telemetry (Cloudflare Turnstile), and privacy-first, cookie-less web analytics.
• Brevo (Sendinblue): Used as our transactional email delivery service to send quote confirmations and admin notifications.
• Authorities if required by law.

All transfers are within the UK or to processors offering equivalent data protection safeguards.

5. Data Retention

We retain personal data only as long as necessary:

• Customer enquiries are kept for 24 months.
• Admin account data is retained until the account is deleted.
• Log files are retained for 30 days for security monitoring.

6. Your Rights

Under the UK GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure (right to be forgotten) where applicable.
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time.
• Lodge a complaint with the ICO: If you believe we are mishandling your data, you have the right to complain to the Information Commissioner's Office (ICO) in the UK (www.ico.org.uk).

To exercise these rights, please contact us at contact@awyarpainting.co.uk.

7. Cookies & Local Storage

We strictly use essential cookies and local storage to keep our website functional and secure. We do not use any tracking, marketing, or analytics cookies.

• Security Cookies: We use an HttpOnly Cross-Site Request Forgery (CSRF) token to protect our public forms, and secure session cookies for our admin portal. These are legally exempt from consent requirements as they are strictly necessary for security.
• Cloudflare Web Analytics: We use Cloudflare Web Analytics to measure website performance. This is a privacy-first analytics tool that does not use any tracking cookies, does not track you across other websites, and does not collect personal data.
• Cloudflare Turnstile: We use Cloudflare Turnstile to prevent spam and automated bot attacks. Turnstile does not use tracking cookies, but it does process anonymized browser telemetry and IP addresses to verify you are a human.
• Local Storage: We use local storage purely to remember your light/dark mode theme preference.

8. Security

We implement strict technical and organisational measures to protect your data, including end-to-end HTTPS encryption, Cloudflare Turnstile bot protection, CSRF token validation on all form submissions, and secure edge-based database storage.

9. Accessibility Statement

Awyar Painting is committed to ensuring digital accessibility for all users, including those with disabilities. We strive to adhere to the Web Content Accessibility Guidelines (WCAG) and regularly audit our codebase. Our website incorporates structural accessibility features such as ARIA labels, semantic HTML, and hidden tags for decorative elements to ensure compatibility with screen readers and assistive technologies.

10. Changes to This Policy

We may update this policy from time to time. The latest version will be posted on this page with an updated effective date.

11. Contact Us

If you have any questions about this privacy policy, please contact us:

Phone: 07769 021160
Email: contact@awyarpainting.co.uk