Privacy notice

When you use the quote form, we collect:

• your name
• your phone number
• your email address
• the postcode of the job
• the details you give us about the job
• any photos you upload

To protect the quote form and photo uploads from spam and abuse, the website also processes:

• your IP address, when you send the quote form or upload a photo. We use it to limit how many enquiries and uploads can come from one connection. It is held briefly in our server’s memory and is not saved anywhere else by us.
• signals from your browser and device, collected by Vercel’s BotID bot protection to tell people apart from automated bots. The BotID script loads on every page of the website, and its checks run when you send the quote form or upload a photo.

We use the details you send to respond to your enquiry, to understand the job, to prepare a quotation and to contact you about it. We do not use them for marketing, and we do not sell them or share them with anyone for their own purposes.

We use your IP address and the BotID checks only to keep spam and abuse out of the quote form and photo uploads.

Photos you upload are stored privately in Vercel Blob. They are not public: the email we receive about your enquiry contains links to them that stop working after 7 days. Uploaded photos are deleted automatically after 90 days.

Photos taken on a phone often carry hidden details, such as the location where the photo was taken. We don’t use this information, but it stays in the file. If you’d rather not send it, you can remove it before uploading; many phones let you share a photo without its location.

Photos can also show people, car registrations or the inside of your home. Please avoid including anything you don’t need to send us.

Under UK data protection law (the UK GDPR and the Data Protection Act 2018) we rely on:

• steps taken at your request before entering into a contract, when we prepare a quotation for you;
• our legitimate interests in responding to enquiries and running our business, where your enquiry is more general; and
• our legitimate interests in preventing spam and abuse, for the IP address checks and the BotID bot protection.

We use a small number of service providers to run the website and handle enquiries. They process your information only on our instructions.

Some of these providers are based in, or use servers in, the United States. Where your information is transferred outside the UK, it is protected by the safeguards the provider has in place, such as the UK International Data Transfer Addendum or the UK Extension to the EU–US Data Privacy Framework.

• Vercel: hosts the website, processes form submissions and runs the BotID bot protection.
• Vercel Blob: stores the photos you upload, privately.
• Resend: delivers your enquiry by email to our mailboxes, info@ashandsons.co.uk and office@ashandsons.co.uk.
• Our email provider: hosts those mailboxes, where your enquiry email is kept.

The website does not set any advertising or analytics cookies.

Vercel’s BotID bot protection may set security cookies and use your browser’s storage to carry out its checks. Because the BotID script loads on every page, this can happen whichever page you visit. It is used only to protect the quote form and photo uploads from spam and abuse.

Uploaded photos are deleted automatically 90 days after upload.

Enquiry emails are kept in our mailboxes for 12 months from your last contact with us, then deleted. Resend may keep a copy of each email it delivers for a limited period. If you go ahead with the work, we keep the information we need for the job and our business records for as long as the law requires.

IP addresses used to limit enquiries and uploads are held only briefly in server memory.

You have the right to:

• ask for a copy of the personal information we hold about you
• ask us to correct information that is wrong or incomplete
• ask us to delete your information
• ask us to restrict how we use it
• object to how we use it, where we rely on legitimate interests
• ask for your information in a portable format, where that applies

Email info@ashandsons.co.uk. We’ll respond within one month. There is normally no charge.

If you’re unhappy with how we’ve handled your information, please tell us first so we can try to put it right.

You can also complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection, at ico.org.uk or on 0303 123 1113.