Legal
Privacy Notice
Written to be read. If anything here is unclear, ask and we will explain it in plain terms.
Last reviewed
1. Who we are
Shropshire Plaster Quotes is the trading name of the operator of this website, which is the data controller for the information described in this notice. Full legal identity and registered address are published in the footer of every page.
Contact for anything in this notice: privacy@shropshireplasterquotes.co.uk
Where an independent plastering business receives your enquiry, that business becomes a separate data controller for how it then uses your information. It will have its own privacy notice, and what it does with your details after that point is between you and them.
2. What we collect
When you submit an enquiry
- Job postcode (not your full address)
- The type, size and condition of the work
- Timescale and whether the property is occupied
- Property age and listed status, where relevant to the job
- Photographs you choose to upload
- Your first name, phone number and email address
- Company name, for commercial enquiries
- Preferred contact method and time
- Any notes you write
- Whether you opted in to marketing
Collected automatically
- The page you arrived on, the referring site and any campaign parameters in the link (utm_source, gclid and similar)
- Your browser's user agent string
- A one-way salted hash of your IP address, used solely to rate limit the form against abuse. We do not store the IP address itself
- Timestamp of submission
We do not ask for, and do not want, your date of birth, your full address at the enquiry stage, your financial details or any special category data. If you volunteer something in the notes field that falls into those categories, please do not — it is not needed to price a plastering job.
3. Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Handling your enquiry and acknowledging it | Steps taken at your request prior to entering a contract, and our legitimate interest in operating the enquiry service you asked us to |
| Sharing your enquiry with up to 3 independent plastering businesses | Your explicit request — this is the service you asked for, and it is disclosed before you submit |
| Following up to ask whether anyone contacted you | Legitimate interest in monitoring service quality and removing contractors who ignore enquiries |
| Preventing spam and abuse of the form | Legitimate interest in keeping the service usable |
| Optional marketing emails | Your consent, given separately and withdrawable at any time |
| Analytics | Your consent, given in the cookie banner |
| Keeping records of complaints and disputes | Legitimate interest, and legal obligation where applicable |
4. Who receives your information
- Up to 3 independent plastering businesses covering your area and offering the service you need. This is the purpose of the service and it is disclosed on the form before you submit.
- Cloudflare, which hosts this website and stores the enquiry database and your photographs.
- Resend, which delivers the acknowledgement and alert emails.
- Google, if you accepted analytics cookies. We never send your name, phone number, email address or full postcode to Google — only the postcode district, the service selected and the page.
- Anyone we are legally required to disclose to.
We do not sell your personal data. We do not share it with anyone outside the matching process described above.
5. Your photographs
Photographs you upload are stored privately. There is no public address for them and they cannot be browsed or guessed at. Links provided to a matched contractor are individually signed and stop working after 30 days.
Where your browser supports it, photographs are re-encoded on your own device before upload, which removes embedded metadata such as GPS coordinates. We would still ask you not to photograph anything that identifies your property — a house number, a vehicle registration, or documents in the background.
Your photographs are never published on this website or anywhere else without asking you first and getting a clear yes.
6. How long we keep it
- Enquiries that did not proceed
- 12 months from submission, then deleted.
- Enquiries that led to work
- 6 years from the date of the enquiry, which reflects the limitation period for contract disputes and means we can help if something goes wrong later.
- Photographs
- 12 months, or deleted immediately on request, whichever is sooner.
- Marketing consent records
- For as long as we rely on the consent, plus 2 years, so we can evidence that it was given.
- Rate-limiting hashes
- Retained with the enquiry record and deleted with it.
- Complaint records
- 6 years from resolution.
7. Your rights
Under UK data protection law you have the right to:
- Be told what we hold about you and get a copy of it
- Have inaccurate information corrected
- Have your information deleted, subject to any legal reason we must keep it
- Restrict or object to how we use it
- Receive your information in a portable format
- Withdraw consent at any time, where consent is the basis
To exercise any of these, email privacy@shropshireplasterquotes.co.uk, or simply reply to your confirmation email quoting your reference. We will respond within one month. There is no charge.
Note that once your enquiry has been passed to a plastering business, we can tell them you have withdrawn it and ask them to delete it, and we will — but their obligations as a separate controller are theirs. You can also contact them directly.
8. Complaints
If you are unhappy with how we have handled your information, please tell us first at privacy@shropshireplasterquotes.co.uk so we have a chance to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, or on 0303 123 1113.
9. Cookies
Covered separately in our Cookie Notice. In short: nothing beyond what is strictly necessary is set unless you accept it, and "Reject" is exactly as easy to click as "Accept".
10. International transfers
Our hosting and email providers may process data outside the UK. Where they do, transfers are covered by the appropriate safeguards, such as UK International Data Transfer Agreements or adequacy regulations.
11. Changes to this notice
If we change how we use your information we will update this page and change the review date at the top. Where a change is significant and affects information we already hold, we will contact you about it.