Privacy Policy

Who We Are

Renov8 Consultancy is an independent renovation cost consultancy operating in the United Kingdom. We are the data controller responsible for your personal data under UK GDPR and the Data Protection Act 2018.

What Personal Data We Collect

• Full name, email address and phone number
• Property address and postcode
• Property photographs and images
• Details of proposed renovation works and project budgets
• Contractor quotations and supporting documents
• Any other information submitted via our intake forms or correspondence

• Website usage data, where analytics are enabled
• Device type, browser information and IP address
• Cookie data — see Section 8

• Payment confirmation data from Stripe (we never receive or store your card details)
• Form submission data from Typeform

Why We Collect Your Data and Our Legal Basis

Under UK GDPR we are required to have a lawful basis for processing your data.

How Long We Keep Your Data

• Client project records: 6 years from the date of last service (Limitation Act 1980)
• Payment records: 7 years, in line with HMRC requirements
• Website analytics data: up to 26 months
• Enquiries that did not proceed to a paid service: 12 months from last contact

After the applicable retention period, we will securely delete or anonymise your personal data.

Who We Share Your Data With

We do not sell, rent or trade your personal data. We share data only with the following service providers who process data on our behalf:

• Stripe — payment processing. PCI-DSS compliant. We do not receive or store card details. stripe.com/gb/privacy
• Typeform — intake form collection and storage. typeform.com/help/a/privacy-policy
• Email service provider — for delivery of reports and correspondence
• Cloud storage provider — for secure document storage

We may also disclose data where required by law, court order or a regulatory authority.

International Data Transfers

Some third-party providers may process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR, including standard contractual clauses or ICO-recognised adequacy decisions.

How We Keep Your Data Secure

• Use of reputable, security-certified third-party platforms
• Password protection and two-factor authentication on all accounts holding client data
• Encrypted email and secure file transfer for report delivery
• Regular review of data access and storage practices
• Restricting data access to those who need it to deliver our services

In the event of a data breach likely to affect your rights, we will notify the ICO within 72 hours and inform you without undue delay.

Cookies

• Strictly necessary cookies — required for the site to function. Cannot be disabled.
• Analytics cookies — used to understand visitor behaviour. Only set with your consent.

You can control and delete cookies through your browser settings at any time. For more information visit aboutcookies.org.

Your Rights Under UK GDPR

To exercise any of the rights below, email us at hello@renov8consultancy.co.uk. We will respond within one month.

Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect data from minors. If you believe we have done so inadvertently, please contact us immediately and we will delete it promptly.

Changes to This Policy

We may update this policy from time to time. The current version will always be available at renov8consultancy.co.uk. Where changes are material we will take reasonable steps to notify affected individuals. This policy was last updated January 2025 (Version 1.0).

Contact Us

For any privacy-related questions, requests or concerns: