Privacy Notice

Information in an estimate or appointment request

An estimate request can include your name, email, business or trade, services needed, service area, existing website and project message. A cell number is optional and is requested for texts only.

A video appointment request includes your name, email, trade or business, chosen time, time zone and optional note. Do not send payment card data, passwords or sensitive personal information in either form.

How we use it and our lawful bases

We use request details to assess your project, discuss scope, reply and, if you go ahead, prepare a proposal. Appointment details are used to manage the request, confirm or decline the time and send the meeting details. Our lawful bases are taking steps you ask for before a contract and our legitimate interest in answering business inquiries.

The site uses submission timing checks, a hidden spam field and rate limiting to protect the forms, based on our legitimate interest in keeping the service secure. Rate limiting uses a salted hash of the requesting IP address; the hosting provider may separately process network and security logs.

Optional analytics and attribution run only if you allow them, so their lawful basis is your consent, which you can withdraw at any time from Cookie choices.

Project communications are not a sign-up to a marketing mailing list. We do not sell personal information or share it for cross-context behavioral advertising, and we make no automated decisions about you with legal or similarly significant effects.

If we emailed you

We sometimes email businesses, and people who maintain a resource page, library guide or publication. We may suggest one of our free tools or guides, offer an article or, when a business's public website has something we could fix, offer our website services. We find businesses through public business listings, such as Google Maps, which we obtain from a data provider (DataForSEO), and through their own websites. We keep the name, role, organization and work email address shown on the business's or organization's own website, the page where we found it, the public listing details we used (such as city, category and review count), what we noticed about the public website, what we sent and any reply.

We use this only for that contact: one email and at most two follow-ups if there is no answer, and nothing more once you ask us to stop. Our lawful basis is legitimate interests: telling businesses about services and resources that relate to their public website or audience. We do not buy email lists, guess addresses or track email opens. The emails pass through the email services listed below; the system that schedules them runs on a server we rent from IONOS; and the contact records are kept in our own files.

We delete these records within 24 months of our last contact, or within 12 months if we never wrote to you. To object, reply to any of our emails or write to hello@contractorwebsiteshq.com and we will stop. We then keep only your email address and the date you asked, so we never write to you again.

Services involved in running the website

Vercel hosts the website and server endpoints. Neon stores request and booking records in a database located in London. Fasthosts and Zoho Mail handle our email, including request notifications, our replies and the mailboxes we use to contact businesses. Video calls take place on Microsoft Teams; we send the meeting link ourselves after your request, and the website does not pass your details to Microsoft or Google.

If you call or text our US toll-free number, which appears on our business profiles, Twilio handles the call or message. Calls are forwarded to our team's phone, and if we cannot answer, Twilio records your voicemail and transcribes it. Text messages are forwarded to our email through Zoho Mail. Twilio keeps the call log, voicemail recordings, transcripts and messages on our behalf. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.

Each provider processes information on our instructions under its own data-processing terms. Some, including Vercel, may process information in the United States or other countries. Where information leaves the UK, we rely on UK adequacy regulations, including the UK Extension to the EU-US Data Privacy Framework where the provider is certified, or on the provider's approved contractual safeguards.

Optional analytics and browser storage

The site starts with optional analytics denied. If you choose to allow analytics, a configured Google Analytics property can receive page and interaction data. No Analytics property is configured at present, so allowing analytics sends nothing to Google; it does let this browser keep the landing page, referral and campaign details with a request you send.

If booking measurement is enabled and you allow analytics, a booking request can link an encrypted Analytics client identifier to a short-lived permission record. A confirmed appointment with meeting details can send one booking-confirmation event to Google Analytics. The event does not include your name, email, business, message, appointment ID or booking link. Advertising permission stays denied.

Your consent choice is kept in local storage. With analytics permission, session storage can also hold the landing page, referral and campaign parameters for attribution. Local storage retains short-lived booking-measurement withdrawal keys. You can reopen Cookie choices from the footer and change your selection. This browser will try to revoke pending permission records, with failed withdrawals retried on a later visit, focus or reconnection. An event already in transit or received cannot be recalled by this control.

Booking-measurement identifiers are cleared after a dispatch attempt, withdrawal or expiry; permission expires after seven days. Scheduled housekeeping clears expired identifiers and removes expired records after a further seven days. These limits depend on the scheduled worker running. Clearing browser storage or using another device removes this browser's ability to revoke earlier records through Cookie choices.

Security and operational processing can still take place when analytics is denied. Changing analytics permission does not withdraw a project or appointment request.

How long we keep it

Estimate and appointment requests that do not lead to a project are deleted 24 months after our last contact with you. If you become a client, project and billing records are kept for six years after the project or service ends, for tax, accounting and legal claims.

Booking-measurement identifiers follow the shorter limits described above. Hosting and email providers keep their own security and delivery logs for the periods set out in their terms.

Your rights and how to complain

You can ask for a copy of your information, ask us to correct or delete it, restrict or object to how we use it, and ask for a portable copy where that applies. Where we rely on consent you can withdraw it at any time. Email hello@contractorwebsiteshq.com; we may ask you to confirm your identity and we respond within one month.

If you live in a US state with its own consumer privacy law, you can make the same requests by the same route, and we handle them in line with the law that applies to us. We do not treat anyone differently for making a request.

If you are unhappy with how we handle your information, please tell us first. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk or on +44 303 123 1113.

Children

This website is for businesses and is not directed to children under 13. We do not knowingly collect information from children.

Changes to this notice

We update this notice when our services or providers change, and post the new version on this page.