Privacy policy
This notice explains what personal data I collect when you use this website or get in touch, why I use it, who I share it with, how long I keep it and what your rights are.
On this page 14 sections
- Who is responsible for your data?
- What personal data do I collect?
- What about health information?
- Why do I use your data, and on what lawful basis?
- How does the chat widget and enquiry form work?
- How is Google Analytics used?
- Who do I share your data with?
- Is your data transferred outside the UK?
- How long do I keep your data?
- How do I keep your data safe?
- What are your rights?
- How can you complain?
- What about children?
- Will this notice change?
Who is responsible for your data?
The controller of your personal data is Wojciech Pankowski, trading as aPlastering, a sole trader based in Walsall, West Midlands ("I", "me"). aPlastering was formerly known online as Walsall Wall Experts, and this notice covers aplastering.co.uk and walsallwallexperts.co.uk.
- Postal address: Somerfield Road, Bloxwich, Walsall WS3 2EW
- Email: dj.k1bee@gmail.com
- Phone: 07763 789272
I handle personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended. As a sole trader I don't have a data protection officer; please contact me directly with any question about your data.
What personal data do I collect?
Information you give me:
- Enquiry form: your name, phone number, email address, postcode, how you'd prefer to be contacted, the service you're interested in, the age of your property and a description of the problem.
- Chat widget: the messages you type and any contact details you choose to share.
- Phone, text and WhatsApp: your number, name, messages, and any photos or videos you send of your home.
- Email: your email address and whatever you include in your message.
- If you become a customer: your address, details of your property and the work, notes and photos from the home visit, the quote, invoices and payment records, and correspondence about the job.
Information collected automatically:
- Analytics, only with your consent: Google Analytics 4 records how the website is used, such as pages viewed, approximate location (town or region), device and browser type, and how you arrived. It uses a random identifier stored in a cookie, not your name.
- Server and security logs: my hosting provider automatically records technical information such as your IP address, browser and the pages requested, to keep the website running and secure.
- Your cookie choice: a small cookie remembering whether you accepted or declined analytics.
What about health information?
When people describe a damp or mould problem, they sometimes mention health, for example a child with asthma. Health information is special category data. Please only share it if you want me to take it into account. If you do, I use it only to understand your enquiry and prioritise or plan the work, on the basis of your explicit consent, which you can withdraw at any time by asking me to delete it.
Why do I use your data, and on what lawful basis?
Data protection law requires a lawful basis for each use of your data. Mine are:
| Purpose | Lawful basis |
|---|---|
| Replying to your enquiry, arranging a home visit and preparing a quote | Taking steps at your request before entering into a contract; otherwise my legitimate interests in responding to people who contact me |
| Carrying out the work, handover, aftercare and the follow-up call about four weeks later | Performance of a contract |
| Invoicing, bookkeeping and tax records | Legal obligation |
| Handling complaints, guarantee claims and legal claims | Legitimate interests; legal obligation where applicable |
| Keeping the website secure and preventing spam | Legitimate interests |
| Website analytics with Google Analytics 4 | Consent |
| Health details you choose to share | Explicit consent |
| Using photos of completed work on the website or social media | Consent; photos never show your address or identify you unless you agree |
Where I rely on legitimate interests, I have considered your interests and rights and believe they are not overridden. I don't send marketing emails or newsletters, I don't sell your data, and I don't make decisions about you by automated means.
How does the chat widget and enquiry form work?
So that I can reply quickly, even when I'm on a job, messages sent through the chat widget and the enquiry form are processed on the website server and stored on the website server and sent to me by email. My phone also gets a short alert through ntfy, a push notification service; the alert only says that a new message has arrived (with your first name and area at most), and I open the full message on the website server.
If you would rather not use the form or chat, please phone me on 07763 789272 instead.
How is Google Analytics used?
I use Google Analytics 4, provided by Google, to understand which pages are useful and how people find the site. Analytics cookies are only set if you click accept on the cookie banner. The site uses Google Consent Mode, so Google's tags follow your choice. If you decline, no analytics cookies are stored on your device, although Google tags may send limited, cookieless signals, such as that a page loaded, without an identifier.
IP addresses are not stored in Google Analytics 4, and analytics data is kept for 14 months. You can change your choice at any time using the cookie settings link in the footer. Full details are in the cookie policy.
Who do I share your data with?
I only share what each provider needs to do its job. These providers act on my instructions as processors, or as independent controllers where noted.
| Recipient | What for |
|---|---|
| OVHcloud (OVH SAS, servers in the EU) | Website hosting, the enquiry form and chat server, security logs |
| Elevation Group (Mateusz Kosobucki), my web agency | Running and maintaining the website and its enquiry system |
| Google (Google Ireland Ltd and Google LLC) | Google Analytics 4, only with consent |
| ntfy (ntfy.sh push notifications) | Short alerts to my phone that a new enquiry or chat message has arrived |
| My email provider | Receiving and replying to email enquiries |
| WhatsApp (Meta), if you message me there | Messaging, under WhatsApp's own terms as a separate controller |
| Trades I organise for your job, such as an electrician or plumber | Your name, address and phone number, only if you ask me to manage the project |
| My accountant, HMRC, insurers and legal advisers | Tax, accounts, insurance and legal matters, where needed |
I may also disclose data where the law requires it.
Is your data transferred outside the UK?
Some providers process data outside the UK. Where they do, I make sure the transfer is protected:
- transfers to the European Economic Area are covered by UK adequacy regulations
- Google LLC is certified under the UK Extension to the EU-US Data Privacy Framework, and Google also uses the UK International Data Transfer Addendum to the EU Standard Contractual Clauses
- phone alerts sent through ntfy contain no more than your first name and area, and rely on being necessary to take the steps you have asked for before a contract (UK GDPR Article 49(1)(b)). You can avoid them by phoning me instead
How long do I keep your data?
| Data | How long |
|---|---|
| Enquiries, chat messages and quotes that don't go ahead | 24 months from our last contact, so I can help if you come back later |
| Customer records: quotes, invoices, job notes and photos | 6 years after the end of the tax year in which the job finished, or until the end of any longer guarantee period |
| Health details you shared | Deleted once no longer needed for your enquiry or job, or sooner if you ask |
| Google Analytics data | 14 months |
| Cookie choice | 12 months, then you'll be asked again |
| Server and security logs | A short period set by the hosting provider for security purposes |
After these periods, data is deleted or anonymised.
How do I keep your data safe?
The website uses an encrypted (HTTPS) connection. My devices and accounts are password protected, and customer records are not shared beyond the recipients listed above. No method is completely secure, but I take reasonable steps and would inform you and the ICO of a serious breach where the law requires it.
What are your rights?
You have the right to:
- access the personal data I hold about you
- have inaccurate data corrected
- have your data erased, where there's no good reason to keep it
- restrict how I use it
- object to uses based on legitimate interests
- data portability for data you gave me under consent or contract
- withdraw consent at any time, for example to analytics, without affecting earlier use
To use any of these rights, email dj.k1bee@gmail.com or ring 07763 789272. There's no charge in most cases. I'll respond within one month, and may need to confirm your identity first. Some data, such as invoices, must be kept for tax reasons even if you ask me to delete it.
How can you complain?
Please raise any concern with me first and I'll do my best to put it right. I'll acknowledge your complaint within 30 days. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk, telephone 0303 123 1113, or Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
What about children?
This website is intended for adults arranging work on their homes. I don't knowingly collect personal data from children under 16. If you believe a child has sent me their details, please contact me and I'll delete them.
Will this notice change?
I may update this notice when the website, my services or the law change. The date at the top shows when it was last updated. Significant changes will be highlighted on the website. See also the terms and conditions.
