Privacy Policy

1. Who we are

Pure Rend Limited is a rendering business based in Bude, Cornwall. The directors of Pure Rend Limited are the data controllers responsible for the personal data we hold.

In this policy, “we”, “us” and “our” mean Pure Rend Limited. “You” means anyone whose personal data we process — usually a customer or someone who has asked us for a quote.

2. What data we collect

When you contact us through the website, by phone, or by email, we may collect:

• Your name (required so we know who we're speaking to).
• Your phone number (required so we can call you back about the quote).
• Your email address (optional — only used if you'd like a written quote or follow-up).
• Your postcode or property address (optional — helps us judge travel time and the type of property).
• The content of your message — what work you'd like, photos, anything you tell us.
• Your IP address and basic browser information, captured in our server logs when you submit the contact form. We use this for security and abuse prevention only.

We don't ask for, and don't want, sensitive data such as financial details, ID numbers or health information. Please don't include any in your enquiry.

3. How we use it

We use the information you give us only for these purposes:

• To reply to your enquiry by phone, text, WhatsApp, or email.
• To send you a written quote, if you've given us an email address.
• To keep a record of any work we carry out, so we can stand behind it for warranty claims and answer questions if you contact us later.
• To meet our legal duties — for example, keeping records HMRC requires, or responding to a lawful request from a regulator.

We don't use your details for marketing. We don't add you to a mailing list. We don't sell your data. Ever.

4. Lawful basis for processing

Under Article 6 of the UK GDPR, we rely on these lawful bases:

• Legitimate interests — we need to read and respond to direct enquiries you send us, and to keep records of jobs we've quoted or completed. This is a normal expectation when someone asks a tradesperson for a price.
• Consent — where you've ticked an optional box on the contact form (for example, agreeing to written quotes by email). You can withdraw consent at any time by emailing us.
• Contract — once you've accepted a quote, we process the data needed to do the work and invoice for it.
• Legal obligation — to keep accounting records as required by HMRC and Companies House.

5. Who we share it with

We don't sell your data and we don't share it with marketers. We do use a small number of trusted suppliers (sub-processors) who handle data on our behalf:

• Netlify — hosts the website and processes form submissions. They receive the data you submit and forward it to us by email. Netlify's privacy policy applies to this processing.
• Our website host — runs the server that receives the form submission and writes basic request logs.
• Our accountant — sees invoices and customer names where needed for bookkeeping and tax returns.

We may also share your data where the law requires it — for example, in response to a court order or a request from HMRC.

6. Cookies

By default, we set only strictly necessary cookies — the ones the site needs to work and to remember your cookie choice. These don't require consent under PECR.

Any analytics or marketing cookies are off until you give explicit consent through the cookie banner that appears the first time you visit. You can change your mind at any time.

You can also reopen the banner from the browser console with window.openCookiePreferences().

7. How long we keep it

• Enquiry records (form submissions, message threads): kept for 2 years from the date of contact, then deleted. This covers our legitimate interest in being able to respond to follow-up questions and warranty claims.
• Email correspondence: kept for as long as it's reasonably needed, then archived or deleted.
• Accounting records (invoices, payment confirmations): kept for 6 years to meet HMRC requirements.
• Server logs (IP, request data): rotated within 30 days unless needed for an active security investigation.

8. Your rights

Under UK GDPR Articles 15–22, you have the right to:

• Access — ask for a copy of the personal data we hold about you.
• Rectification — ask us to correct anything that's wrong or incomplete.
• Erasure — ask us to delete your data where we no longer need it.
• Restriction — ask us to stop using your data while a query is resolved.
• Objection — object to us using your data on the basis of legitimate interests.
• Portability — ask for your data in a machine-readable format you can take elsewhere.
• Withdraw consent — for anything we process based on consent.

For full details and the form to make a request, see our Your Data Rights page.

9. How to make a request

To exercise any of the rights above, contact us by:

• Email: b.rplasteringsw@gmail.com
• Phone: 07761 735022

We'll respond within one calendar month, as required by UK GDPR. Requests are free in most cases. If a request is clearly unfounded or excessive, we may charge a reasonable fee or refuse — we'll tell you why if that happens.

We may need to verify your identity before releasing personal data, to make sure we're not handing it to someone else.

10. Complaints

If you're not happy with how we've handled your data, please tell us first so we have a chance to put it right. If you're still not satisfied, you have the right to complain to the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

11. Changes to this policy

When we update this policy, we'll change the “Last updated” date at the top of the page. If a change is material — for example, we add a new sub-processor or start using a new lawful basis — we'll flag it clearly on the website.

12. Contact details