Privacy Policy

Last updated: January 2025

1. Who We Are

Carvalho Renovations ("we", "us", "our") is a home renovation company based in the United Kingdom. This privacy policy explains how we collect, use, and protect your personal information when you use our website.

2. Information We Collect

We may collect the following personal data:

• Contact form submissions: your name, email address, and message content.
• Quote requests: your name, email address, phone number, project details, address, and any uploaded images.
• Cookie data: analytics identifiers (Google Analytics, Microsoft Clarity) stored only with your consent.
• Technical data: IP address, browser type, and device information collected automatically by our hosting provider.

3. How We Use Your Information

We use your personal data to:

• Respond to your enquiries and provide quotes.
• Communicate with you about your renovation project.
• Improve our website and services through anonymous analytics (with consent).
• Send email notifications related to your enquiry.

We do not sell, trade, or rent your personal information to third parties.

4. Cookies

Our website uses cookies. When you first visit, a cookie consent banner allows you to choose:

• Essential cookies only: required for the website to function. No tracking.
• Accept all cookies: enables Google Analytics and Microsoft Clarity for anonymous usage analytics.

You can change your cookie preferences at any time by clearing your browser cookies and revisiting the site.

5. Third-Party Services

If you consent to analytics cookies, we use:

• Google Analytics: to understand how visitors use our site. Google Privacy Policy
• Microsoft Clarity: to analyse user behaviour through session recordings and heatmaps. Microsoft Privacy Statement

Our website is hosted on Vercel and uses Supabase for data storage. Both providers comply with GDPR.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined above. Contact messages and quote requests are retained for up to 24 months, after which they are deleted.

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict processing of your data.
• Data portability.

To exercise any of these rights, please contact us using the details on our Contact page.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS), secure database access controls, and regular security reviews.

9. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.