Privacy Policy

Last updated: September 2026

This policy explains what personal information we collect, why we collect it, how we use it, and what rights you have. It is written in plain English because we believe you should be able to understand how your data is handled without needing a law degree.

Who we are

We are HBF Bathrooms, a bathroom renovation company based in East London. We are the data controller for the personal information described in this policy, which means we decide how and why your data is used.

Company name: [Your registered company name]

Company number: [Your Companies House number]

Registered address: [Your registered address], East London

Email: hello@hbfbathrooms.co.uk

What information we collect

We only collect what we genuinely need to provide our services and communicate with you. Here is what we collect and why.

What we collect	Why we need it
Your name and contact details (phone, email, address)	To discuss your project, arrange visits, send quotes, and keep in touch during the renovation
Your property address and details about your bathroom	To assess the work needed, prepare an accurate quote, and carry out our Behind the Wall Report where applicable
Photos of your bathroom (before, during and after)	To document the project, plan the work, and — with your permission — showcase completed projects on our website and marketing
Payment details	To process deposits and staged payments. We do not store your full card details — payments are handled by our secure payment provider
Feedback and reviews you give us	To improve our service and, with your consent, share genuine customer experiences publicly
Website usage data (cookies and analytics)	To understand how people use our website so we can improve it
Correspondence (emails, messages, call notes)	To keep a clear record of what was discussed and agreed throughout your project

How we collect your information

Most of the information we hold comes directly from you — when you fill in our contact form, call or email us, meet us for a consultation, or leave a review. We also collect some data automatically when you visit our website, through cookies and similar technologies.

We do not buy personal data from third parties or scrape it from other websites.

Our legal basis for using your data

Under UK data protection law (the UK GDPR), we need a lawful reason to use your personal information. Here are the reasons that apply to us.

Contract. When you accept a quote and we begin working together, we need your information to deliver the service you have hired us for — scheduling work, ordering materials, managing payments, and communicating about your project.

Legitimate interest. We have a legitimate business interest in using your data for things like improving our services based on feedback, keeping records of past projects, and maintaining our website. We always balance this against your rights and will never use your data in a way that would be unfair to you.

Consent. For anything that goes beyond delivering your project — such as publishing photos of your bathroom on our website, sending you marketing emails, or sharing your review publicly — we will ask for your clear permission first. You can withdraw that permission at any time.

Legal obligation. Sometimes we need to keep certain records for tax, accounting, or regulatory purposes. In those cases, we are legally required to hold onto the information.

Who we share your data with

We do not sell your personal information to anyone. We do not share it with third parties for their own marketing purposes.

We may share limited information with the following types of organisations, only when necessary to deliver our service to you:

Suppliers and manufacturers — if we need to order specific fittings or materials for your project, we may share your delivery address with the relevant supplier.

Payment processors — to handle transactions securely. They only receive the information needed to process your payment.

Website and IT service providers — companies that host our website, manage our email, or provide analytics tools. They process data on our behalf and are bound by contract to keep it secure.

Accountants and legal advisers — for business accounting, tax compliance, or if we ever need legal advice relating to a project.

Regulatory or legal authorities — only if we are legally required to do so, for example in response to a court order.

How we protect your information

We take reasonable steps to keep your personal data safe. This includes using secure email where appropriate, password-protecting files and systems, limiting access to personal data to team members who need it, and choosing reputable service providers who meet data protection standards.

No system is completely secure, but we treat the protection of your data seriously and review our practices regularly.

How long we keep your data

We do not keep your information for longer than we need to. Here is a general guide.

Type of data	How long we keep it
Project records (quotes, contracts, correspondence)	Six years after project completion, in line with UK limitation periods for contractual claims
Financial and payment records	Six years, as required by HMRC for tax purposes
Photos of completed work	As long as we have your permission to use them, or until you ask us to remove them
Reviews and feedback	As long as they remain relevant and you have not asked for removal
Website enquiries that did not lead to a project	Up to 12 months, then deleted
Marketing consent records	As long as the consent is active, plus a short period after withdrawal for our records

Cookies

Our website uses cookies — small text files placed on your device — to help the site work properly and to understand how visitors use it.

Essential cookies are needed for the website to function. They handle things like keeping the site secure and remembering your cookie preferences. These are always active.

Analytics cookies help us understand which pages are visited most, how people find us, and where we can improve. We use [Google Analytics / your analytics tool] for this purpose. These cookies do not identify you personally. You can opt out of analytics cookies when you first visit the site, and you can change your preferences at any time using the cookie settings link in our website footer.

We do not use advertising or tracking cookies, and we do not run targeted ads based on your browsing behaviour.

Your rights

Under UK data protection law, you have a number of rights over your personal information. You do not need to pay anything to exercise them, and we will respond within one month.

Access. You can ask us for a copy of the personal information we hold about you.

Correction. If anything we hold is wrong or incomplete, you can ask us to put it right.

Deletion. You can ask us to delete your personal information, although we may need to keep some records for legal or contractual reasons.

Restriction. You can ask us to limit how we use your data in certain circumstances — for example, while a complaint is being resolved.

Objection. You can object to us using your data based on our legitimate interests. We will stop unless we have a compelling reason to continue.

Portability. Where we process your data based on consent or contract, you can ask for it in a structured, commonly used format so you can transfer it elsewhere.

Withdraw consent. If we are using your data based on your consent — for example, marketing emails or portfolio photos — you can withdraw that consent at any time. This does not affect anything we did with your data before you withdrew consent.

To exercise any of these rights, email us at hello@hbfbathrooms.co.uk. We will handle your request promptly and with respect.

Marketing

We will only send you marketing emails if you have clearly opted in. Every marketing email we send will include a simple way to unsubscribe. If you unsubscribe, we will stop sending marketing emails promptly — usually within 48 hours.

Unsubscribing from marketing will not affect any project-related communication. If we are working together on a renovation, we will still contact you about your project as normal.

Children’s data

Our services are aimed at homeowners and are not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have collected data from a child, please contact us and we will delete it.

Links to other websites

Our website may contain links to other sites — for example, product suppliers or review platforms. Once you leave our site, we are not responsible for how those other sites handle your data. We encourage you to read their privacy policies.

Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the date at the top of this page. If we make any significant changes to how we use your personal data, we will make reasonable efforts to let you know — for example, by email or a notice on our website.

How to complain

If you are unhappy with how we have handled your personal data, please contact us first so we can try to resolve it. If you are still not satisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection regulator.

ICO website: ico.org.uk

ICO helpline: 0303 123 1113

Questions about your data?

If you have any questions about this policy or how we handle your personal information, get in touch. We are happy to explain.

Email: hello@hbfbathrooms.co.uk

Phone: [your phone number]

Address: [your business address], East London