Privacy Policy

1. Who is responsible for your information

The data controller for enquiries made through this website is Hampstead Renovations Limited, a private limited company registered in England and Wales under company number 16838595, whose registered office is at Unit 3 Palace Court, 250 Finchley Road, London NW3 6DN. Mayfair Painters & Decorators is a trading name of that company. You can contact it about privacy at contact@hampsteadrenovations.co.uk, by telephone on 020 8054 8756.

2. Information this website collects

The contact form asks for your name, email address, telephone number, service and project message. The quote form can also ask for property type, area, services, approximate room count, preferred timeline, an optional budget range and additional project details. When you submit either form, the page URL and page title are included so the enquiry can be understood in context.

Your browser sends the submission to this website's own /api/contactendpoint. The server then sends the relevant contact, project and submission-page details to Web3Forms so the enquiry can be delivered. Provider credentials remain on the server and are not intentionally exposed to browser code.

Cloudflare is configured to host the website. As with any web request, hosting and security infrastructure receives technical request information needed to deliver and protect the service, such as an IP address, request time, requested URL and browser headers. This application does not currently create visitor profiles or collect website analytics.

Please do not include unnecessary confidential or special-category information in a free-text project message.

3. Why the information is used

• Enquiries and quotations: to read your request, contact you, assess the proposed scope and take steps you request before a possible contract. The applicable lawful basis is steps before a contract where you are the prospective customer; otherwise it may be the legitimate interest in responding to a relevant business enquiry.
• Website operation and security: to transmit form requests, prevent misuse, diagnose failures and protect the service, relying on legitimate interests and any applicable legal obligations.
• Project and legal records: if an enquiry leads to work, information may be used to administer that relationship and meet applicable accounting, tax or legal requirements. The exact use should be confirmed in the project documents.

The quote-form wording allowing contact about your quote is not consent to unrelated email marketing. The current site has no newsletter signup or marketing-profiling implementation.

4. Who receives the information

• Web3Forms: receives the server-side form payload and relays the enquiry to the destination configured in its account.
• Cloudflare: provides the deployed website and request infrastructure configured by this repository.
• Authorised enquiry recipients: the people who need to read and respond to the submitted request.
• Authorities or advisers: only where disclosure is required by law or reasonably necessary for a legal claim.

The current application does not mount Google Analytics, Google Tag Manager, Meta advertising tags, Google Maps, Vercel Analytics, Vercel Speed Insights or a payment processor. Installed but unused software packages are not described as active recipients.

If you choose an external telephone, email or WhatsApp link, your device communicates with that service under its own terms. The site does not embed a WhatsApp tracking script.

5. Retention and international transfers

The repository does not define or verify how long Web3Forms, the configured enquiry inbox or Cloudflare logs retain personal information. It also does not contain the account contracts needed to confirm provider establishments, sub-processors or any international-transfer mechanism. The controller must document and configure these matters, keep enquiry information only for a justified period, and provide the details on request.

The ICO explains the current rules for international transfers. No assurance about a particular transfer safeguard is made here without the relevant provider agreement.

6. Your data-protection rights

Depending on the circumstances, you may have rights to access your information, correct inaccurate information, request erasure or restriction, object to certain uses, receive portable information, and withdraw consent where consent is the lawful basis. These rights are not absolute in every case.

Send a request to contact@hampsteadrenovations.co.uk. A response is normally required without undue delay and within one calendar month, subject to the rules on identification, clarification and permitted extensions. See the ICO's current guidance for the public.

7. Data-protection complaints

To complain about how your information has been handled, email contact@hampsteadrenovations.co.uk with the subject “Data protection complaint”. Include what happened, the information involved and the outcome you are seeking. The complaint must be acknowledged within 30 days, investigated without undue delay, kept under review with appropriate updates, and concluded with an outcome.

You can also complain to the Information Commissioner's Office. The ICO recommends first giving the organisation an opportunity to resolve the issue. See how to make a complaint to the ICO.

8. Cookies and changes to this notice

The current application's cookie and browser-storage position is explained in the cookie policy.

This notice must be reviewed whenever the form provider, hosting, tracking, payment, retention or controller arrangements change. The ICO's checklist of privacy information organisations should provide is the current drafting reference.