Legal
Privacy Policy
Last updated: 26 July 2026
This privacy notice explains how Epoxy Guys (“we”, “us”, “our”) collects, uses and protects personal data when you visit www.epoxyguys.co.uk or enquire about our resin and epoxy flooring services. We are the data controller for the personal data described below and comply with the UK GDPR and the Data Protection Act 2018.
1. Who we are
Epoxy Guys, a resin flooring contractor operating across the West Midlands and the UK.
Email: admin@epoxyguys.co.uk
Phone: 07756 971 165
2. Personal data we collect
- Contact details you submit through our enquiry, quote and partnership forms — name, phone number, email address, postcode, company name (where relevant).
- Project details you choose to share — service required, floor size, description of the project and the page you enquired from.
- Technical data collected by cookies and similar technologies — IP address (truncated), device type, browser, referring page and pages viewed. See our Cookie Policy.
- Correspondence you send us by email or phone.
3. Why we use it and our lawful basis
| Purpose | Lawful basis (UK GDPR Art. 6) |
|---|---|
| Respond to enquiries and provide quotations | Steps at your request prior to entering a contract |
| Provide the flooring services you have engaged us for | Performance of a contract |
| Send transactional confirmations (e.g. partnership confirmation) | Legitimate interests — keeping you informed of your own enquiry |
| Analytics to improve the website (Google Analytics) | Consent |
| Comply with tax, accounting and legal obligations | Legal obligation |
| Protect the site from spam and abuse (honeypot, rate limits) | Legitimate interests — site security |
4. How long we keep your data
- Enquiry data: up to 24 months from your last contact, then deleted or anonymised.
- Customer records (quotes, invoices, contracts): 6 years after the end of the financial year, as required by HMRC.
- Analytics data: up to 14 months in Google Analytics 4.
- Consent records: up to 12 months from the last consent action.
5. Who we share it with
We do not sell your data. We share it only with the following processors, under contract:
- Resend — sends transactional emails (enquiry notifications and confirmations).
- Lovable Cloud / Supabase — hosts the site, database and enquiry logs (EU region).
- Cloudflare — provides CDN, DNS and security.
- Google Analytics 4 — anonymised analytics, only if you consent.
- Google Fonts & Google Maps — delivers fonts and the embedded map on the contact page.
- HMRC, insurers or professional advisers where required by law.
6. International transfers
Where a processor transfers data outside the UK/EEA (for example Google Analytics), transfers are protected by the UK International Data Transfer Addendum and Standard Contractual Clauses.
7. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Ask us to correct inaccurate data.
- Ask us to erase your data (right to be forgotten).
- Restrict or object to processing, including direct marketing.
- Data portability.
- Withdraw consent at any time — for cookies, use the “Cookie preferences” link in the footer.
To exercise any right, email admin@epoxyguys.co.uk. We respond within one month.
8. Complaints
If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office (ICO):
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
Helpline: 0303 123 1113 · ico.org.uk
9. Security
We use HTTPS across the site, encrypted databases and access controls. No system is perfectly secure, so we cannot guarantee absolute security of data transmitted over the internet.
10. Changes
We may update this notice from time to time. The “Last updated” date at the top will change when we do.
See also our Cookie Policy and Terms & Conditions.