Legal
Privacy Policy
Last updated: 23 March 2026
1. Who We Are
ColourHaus Decorating Limited (“ColourHaus”, “we”, “us”, “our”) is the data controller responsible for your personal data. We are a specialist kitchen and surface refinishing company based in Yorkshire.
Registered name: ColourHaus Decorating Limited
Registered address: Unit 9 Taverners Walk, Sheepscar, Leeds, LS7 1AH
VAT number: 454 3373 91
Email: info@colourhaus.co.uk
Phone: 07973 106 612
2. What Personal Data We Collect
We collect the following categories of personal data:
- ✓Contact information: your name, email address, telephone number, and home address (for site visits)
- ✓Enquiry details: the nature of your project, preferred colours, kitchen type, and any photographs you provide
- ✓Communication records: emails, phone call logs, and any written correspondence
- ✓Website usage data: IP address, browser type, pages visited, and time spent on the site (via cookies — see our Cookie Policy)
- ✓Financial data: invoice records and payment information (we do not store full card details — payments are processed by third-party providers)
We do not collect special category data (such as health information) unless you voluntarily provide it in connection with a specific request.
3. Lawful Basis for Processing
We process your personal data on the following lawful bases under UK GDPR Article 6:
Contract performance (Article 6(1)(b))
Processing your enquiry, providing quotations, and carrying out refinishing work under an agreed contract.
Legitimate interests (Article 6(1)(f))
Following up on enquiries, improving our services, fraud prevention, and administering our business. We have assessed these interests and determined they do not override your rights and freedoms.
Legal obligation (Article 6(1)(c))
Retaining financial records for HMRC compliance and tax purposes.
Consent (Article 6(1)(a))
Sending marketing communications where you have opted in. You can withdraw consent at any time by contacting us or clicking unsubscribe in any marketing email.
4. How We Use Your Data
We use your personal data to:
- ✓Respond to your enquiries and arrange a free home consultation
- ✓Prepare and send written quotations
- ✓Perform the refinishing work you have contracted us to do
- ✓Issue invoices and process payments
- ✓Send appointment reminders and follow-up communications
- ✓Send service-related notifications and guarantee information
- ✓Send marketing communications (only where you have consented or where we have a legitimate interest in doing so)
- ✓Comply with our legal and regulatory obligations
5. Who We Share Your Data With
We do not sell or rent your personal data. We share it only where necessary, with:
- ✓Payment processors: to handle invoices and payments securely
- ✓Email service providers: to send appointment and follow-up communications
- ✓IT and website service providers: who provide hosting, analytics, and CRM infrastructure under data processing agreements
- ✓Professional advisers: accountants and legal advisers who are bound by professional confidentiality
- ✓HMRC and other government bodies: where required by law
Any third parties we share data with are required to maintain the confidentiality and security of your data and to use it only for the purpose for which it was shared.
6. International Data Transfers
We primarily process your data within the UK. Where any service providers process data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR Chapter V, including adequacy decisions or Standard Contractual Clauses.
7. How Long We Keep Your Data
| Data type | Retention period | Reason |
|---|---|---|
| Customer contact and job records | 7 years after completion | HMRC and legal compliance |
| Enquiries that did not convert | 6 months | Legitimate interest in follow-up |
| Marketing opt-in records | Until withdrawal of consent | Proof of consent |
| Website analytics data | 26 months | Standard analytics retention |
| CCTV footage (where applicable) | 30 days | Security purposes |
8. Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
Right of access
Request a copy of the personal data we hold about you (Subject Access Request).
Right to rectification
Ask us to correct inaccurate or incomplete data.
Right to erasure ("right to be forgotten")
Ask us to delete your data where there is no legitimate reason for us to continue processing it.
Right to restriction
Ask us to restrict processing while a dispute about accuracy or lawful basis is resolved.
Right to data portability
Receive your data in a structured, machine-readable format to transfer to another controller.
Right to object
Object to processing based on legitimate interests or for direct marketing purposes.
Rights related to automated decision-making
We do not carry out solely automated decision-making or profiling that produces legal or similarly significant effects.
To exercise any of these rights, please contact us at info@colourhaus.co.uk or by post to the address above. We will respond within one calendar month of receipt.
9. How to Make a Complaint
If you are unhappy with how we have handled your personal data, please contact us first so we can try to resolve the matter.
You also have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office (ICO):
Website: ico.org.uk/make-a-complaint
Phone: 0303 123 1113
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include secure HTTPS transmission, access controls, and regular security reviews.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours as required by UK GDPR Article 33, and notify you directly where required.
11. Cookies
This website uses cookies. For full details of the cookies we use and how to manage your preferences, please read our Cookie Policy.
12. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated “last updated” date. Where changes are significant, we will notify you by email if you are a current customer.
Questions About This Policy?
Contact our data controller directly. We will respond within one calendar month.