Privacy Policy

Who I am

Thompsons Painting & Decorating is run by Michael James Thompson, a sole trader based in Talke Pits, Staffordshire. I decide how your information is used, which makes me the "controller" under UK data protection law.

What information I collect

When you get in touch or ask for a quote: Your name, phone number, email address, the address of the property, details of the job, any photos you send me and how you'd like to be contacted.
When I carry out work for you: The above, plus quotes, invoices, payment records, notes about the job, and photos of the work before, during and after.
Access details: If you choose to tell me how to get into the property (for example where a key is left), I use this only for your job and delete it once the job is finished.
Health or personal circumstances: If you tell me something like an allergy, a health condition or that someone vulnerable lives in the home, so I can plan around it (for example by using low-odour paint), I'll only use it for that, with your permission, and delete it when the job is finished.
Reviews and case studies: If you agree to it, your first name, town, your comments and photos of the finished work.
Referrals: If someone you referred mentions you, I'll note your name and referral code so I can send your gift card once their job is finished and paid for.
Social media and messaging: If you contact me through Facebook, Instagram or WhatsApp, I'll see your profile name and anything you send.
Website visits: Basic technical information, such as pages viewed and browser type. See the Cookie policy for details.

How I use it and why

UK data protection law says I need a lawful reason (a "lawful basis") for each use.

What I use it for	Lawful basis
Replying to your enquiry and preparing a quote	Taking steps you've asked for before a contract
Booking and carrying out the work, and invoicing	Contract
Keeping tax and accounting records	Legal obligation
Keeping job records afterwards, so I can deal with questions, touch-ups or complaints	Legitimate interests
Sharing photos of the work that don't identify you or your home (for example an interior wall or a door) on my website and social media	Legitimate interests (showing my work). You can object at any time.
Publishing your name, your comments or photos of the outside of your home in a case study or post	Consent
Applying referral discounts and sending referral gift cards	Legitimate interests (running my Refer a friend scheme)
Keeping the website running and secure	Legitimate interests

I don't send marketing emails or newsletters. If that ever changes, I'll only contact you with your permission.

Who I share it with

I never sell your information. I only share it where I need to, with:

Duda, which hosts this website, its contact forms and its visit statistics, and Google, whose reCAPTCHA tool checks contact form messages for spam
Hippo Serve, which hosts my business email
The Thompsons portal, my enquiry and quoting system, which is also hosted by Duda and stores enquiries and quotes
Airtable and Zapier, which the portal uses to collect and organise enquiries, photos and receipts
Stripe, which processes card payments. Stripe handles your card details directly, so I never see or store your full card number
If you've referred someone, the company I use to send your gift card (for example a retailer's e-gift card service), which receives your name and email address so it can deliver the card
Meta (Facebook, Instagram and WhatsApp), if you contact me through those apps
My accountant and HMRC, for tax purposes
Trusted tradespeople I bring in for your job, such as scaffolders, who only get the address and access details they need
My insurer or legal advisers, if there's ever a claim
The police or other authorities, only if the law requires it

Information stored outside the UK

Some of the services above may store information outside the UK, for example in the USA. Where this happens, the transfer is protected by safeguards recognised under UK law, such as the UK-US data bridge or contract terms approved by the ICO.

How long I keep it

Information	How long
Enquiries and quotes that don't go ahead	12 months from the last contact
Job records, quotes and invoices	6 years after the job is finished, to meet tax rules and cover any claims
Access details and health information	Deleted when the job is finished
Photos and case studies you agreed to	Until you ask me to remove them

Your rights

You have the right to:

ask for a copy of the information I hold about you
ask me to correct anything that's wrong
ask me to delete your information
ask me to limit how I use it
object to me using it, including for photos of my work
ask for your information in a format you can take elsewhere
withdraw your consent at any time, for example to a case study

To use any of these rights, email or call me. It's free, and I'll reply within one month. Some information, like invoices, I have to keep by law, and I'll explain if that applies.

Keeping it safe

I keep information on password-protected devices and accounts with two-step sign-in, and I don't leave paperwork with your details lying around. Only I have access, plus the people listed above where they need it.

Complaints

If you're unhappy with how I've handled your information, please tell me first and I'll try to put it right. I'll acknowledge your complaint within 30 days and keep you updated.

You can also complain to the Information Commissioner's Office (ICO):