01
Who We Are
This Privacy Policy explains how Modernus Decoration Projects LTD ("we", "us", "our") collects, uses, stores, and protects your personal data. We are committed to handling your information responsibly and in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Modernus Decoration Projects LTD is the data controller for personal data collected through this website and in the course of providing our services. Our contact details are:
02
Data We Collect
Depending on how you interact with us, we may collect the following categories of personal data:
- Identity data: first name, last name
- Contact data: email address, telephone number, postal address
- Property data: property address and details relevant to the services requested
- Transaction data: details of quotations, invoices, and payments
- Communication data: records of correspondence between you and us, including emails and messages
- Technical data: IP address, browser type, operating system, and pages visited (collected automatically via our website)
- Usage data: information about how you use our website
We do not collect any special category data (such as health information, ethnicity, or biometric data) and we do not knowingly collect data from children under the age of 16.
03
How We Collect Your Data
We collect personal data through the following means:
- Direct interactions: when you complete our contact form, request a quotation, call or email us, or enter into a contract with us
- Automated technologies: when you visit our website, we may automatically collect technical and usage data via cookies and similar tracking technologies
- Third parties: we may receive data from referral sources such as review platforms or social media, where you have chosen to share information publicly
04
Legal Basis for Processing
Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:
- Contract: processing is necessary to perform a contract with you or to take steps at your request before entering into a contract (e.g. preparing a quotation or delivering our services)
- Legitimate interests: processing is necessary for our legitimate business interests, such as responding to enquiries, improving our services, and maintaining business records — provided these interests are not overridden by your rights
- Legal obligation: processing is necessary to comply with a legal obligation, such as retaining financial records for HMRC purposes
- Consent: where we rely on consent (e.g. for marketing communications), you have the right to withdraw that consent at any time
05
How We Use Your Data
We use your personal data for the following purposes:
- To respond to your enquiries and provide quotations for our services
- To enter into and perform contracts for painting and decorating work
- To issue invoices and process payments
- To communicate with you about your project, including scheduling and updates
- To honour our workmanship guarantee and address any after-care queries
- To maintain our financial and business records in compliance with legal obligations
- To improve and develop our website and services
- To send you information about our services where you have consented to receive it
We will never use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
06
Sharing Your Data
We do not sell, rent, or trade your personal data to third parties. We may share your data in the following limited circumstances:
- Service providers: trusted third-party suppliers who assist us in running our business, such as accountants, payment processors, and IT service providers — all of whom are bound by confidentiality obligations
- Legal compliance: where we are required to disclose information by law, court order, or regulatory authority
- Business transfers: in the event of a merger, acquisition, or sale of our business assets, your data may be transferred to the new entity, subject to the same privacy protections
Where we share data with third-party processors, we ensure that appropriate data processing agreements are in place and that those parties process data only on our documented instructions.
We do not transfer your personal data outside of the United Kingdom or the European Economic Area. If this changes, we will update this policy and ensure appropriate safeguards are in place.
07
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Our standard retention periods are as follows:
- Client records and financial documents: 7 years from the end of the financial year in which the transaction occurred, in accordance with HMRC requirements
- Quotations and project correspondence: 3 years from the date of the quotation or project completion
- Warranty-related records: 2 years from the date of practical completion (in line with our 12-month guarantee plus additional margin)
- Website enquiries not resulting in a contract: 12 months from the date of the enquiry
- Technical/website data: up to 26 months in anonymised or aggregated form
Where data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with you.
08
Your Rights Under UK GDPR
As a data subject under UK GDPR, you have the following rights in relation to your personal data. You may exercise any of these rights by contacting us using the details in Section 12.
Right of Access
Request a copy of the personal data we hold about you (a Subject Access Request).
Right to Rectification
Request correction of inaccurate or incomplete personal data we hold about you.
Right to Erasure
Request deletion of your personal data where there is no lawful reason for us to continue processing it.
Right to Restrict Processing
Request that we suspend processing of your data in certain circumstances.
Right to Data Portability
Request transfer of your data to you or a third party in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Withdraw consent at any time where processing is based on consent, without affecting prior lawful processing.
Right Not to be Profiled
Not be subject to solely automated decisions that significantly affect you.
We will respond to all legitimate requests within one calendar month. Where requests are complex or numerous, we may extend this period by a further two months, and will notify you accordingly.
09
Cookies
Our website uses cookies — small text files placed on your device — to help the website function correctly and to understand how visitors use the site. We use the following types of cookies:
- Strictly necessary cookies: essential for the website to operate. These cannot be disabled and do not require your consent
- Analytical/performance cookies: help us understand how visitors interact with our site so we can improve the user experience. These are only placed with your consent
- Functionality cookies: remember your preferences to provide a more personalised experience
You can control and manage cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website. For more information about cookies, visit www.aboutcookies.org.
10
Security
We take the security of your personal data seriously. We have implemented appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction, or alteration, including:
- Secure, encrypted storage of digital records
- Password-protected access to systems containing personal data
- Restricted access to personal data on a need-to-know basis
- Regular review of our data handling and security procedures
In the unlikely event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours and inform you directly where required by law.
11
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will update the "Last updated" date at the top of this page.
We encourage you to review this policy periodically. Where changes are significant, we will take reasonable steps to notify you directly — for example, by email if we hold your contact details.
Your continued use of our website or services following any update constitutes your acknowledgement of the revised policy.