Privacy Policy

Effective date: 3 July 2026

Awyar Painting ("we", "our", "us") is committed to protecting and respecting your privacy. This policy explains how we collect, use, disclose and safeguard your personal data in accordance with the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data We Collect

• Contact information: Name, email address, phone number, and postcode provided through our contact forms or quote requests.
• Account information: Username, password (stored as a secure hash), and login timestamps for admin users.
• Technical data: Basic web server logs (IP address, browser type) which are temporarily held for security and abuse prevention purposes only.

2. How We Use Your Data

We use your personal data to:

• Provide painting services quotations and communicate with you about your requests.
• Manage your admin account securely, including authentication and password recovery.
• Improve our website and services through analytics.
• Comply with legal obligations and protect our legitimate interests.

3. Legal Basis for Processing

We rely on the following legal grounds:

• Performance of a contract: When you request a quote or use our services.
• Consent: When you explicitly consent to receive marketing communications (you may withdraw consent at any time).
• Legitimate interests: For website security, fraud prevention, and improving service quality.
• Legal obligations: To comply with tax, accounting, and regulatory requirements.

4. Data Sharing & Transfers

We do not sell your personal data. We may share data with:

• Third‑party service providers (e.g., email delivery via SMTP) who process data on our behalf under strict contracts.
• Authorities if required by law.

All transfers are within the UK or to processors offering equivalent data protection safeguards.

5. Data Retention

We retain personal data only as long as necessary:

• Customer enquiries are kept for 24 months.
• Admin account data is retained until the account is deleted.
• Log files are retained for 30 days for security monitoring.

6. Your Rights

Under the UK GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure (right to be forgotten) where applicable.
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time.
• Lodge a complaint with the ICO: If you believe we are mishandling your data, you have the right to complain to the Information Commissioner's Office (ICO) in the UK (www.ico.org.uk).

To exercise these rights, please contact us at awyarpainting@gmail.com.

7. Cookies

We use strictly essential cookies only. These are required for maintaining secure admin sessions and protecting forms against cross-site request forgery (CSRF). No tracking, analytics, or advertising cookies are set.

8. Security

We implement technical and organisational measures such as HTTPS, secure password hashing (scrypt with pepper), and limited file permissions for our SQLite database to protect your data.

9. Changes to This Policy

We may update this policy from time to time. The latest version will be posted on this page with an updated effective date.

10. Contact Us

If you have any questions about this privacy policy, please contact us:

Phone: 07769 021160
Email: awyarpainting@gmail.com