Privacy Policy

1. What we collect, and why

Your account — your email address (to sign you in) and, if you use Google sign-in, your name from that profile. Lawful basis: performing our contract with you.

Your business — the details you enter in Settings (business name, address, contact details, VAT number, rates, bank details for invoices, branding). These exist to appear on your own documents. Lawful basis: contract.

Your customers — names, addresses and contact details you put on quotes. For this data you are the controller and we are your processor: we store and display it only to produce and deliver your documents, and never use it for anything else.

Acceptance records — when a customer accepts or declines a quote we record the name they type, the time, their IP address and browser identifier. This is the audit trail both sides rely on if a job is disputed. Lawful basis: legitimate interests (evidencing agreement).

Billing — subscriptions are processed by Stripe. We hold your Stripe customer reference and subscription status; your card number is held by Stripe, never by us.

2. What we don't do

We don’t sell personal data, run advertising, or use your quotes and prices for anything except showing them back to you. We use only essential cookies — the session that keeps you signed in. There is no third-party analytics or tracking script on customer quote pages.

3. Who we share data with

Only the suppliers needed to run the Service: Vercel (hosting), our database provider, Stripe (payments) and our email delivery provider (sign-in links and notifications). Each acts under contract as a processor. Data may be processed outside the UK by these providers under appropriate safeguards (such as the UK Addendum to Standard Contractual Clauses). We disclose data to authorities only where the law requires.

4. How long we keep it

Account and business data: while your account exists, and deleted on your request. Quotes, invoices and acceptance records: kept while your account exists because they are your commercial records; if you delete your account we delete them, subject to anything we must retain for legal or accounting reasons. Sign-in links and logs expire on short, fixed schedules.

5. Your rights

You can ask for a copy of your personal data, ask us to correct or delete it, object to or restrict processing, and take your data elsewhere. Email support@quotes4you.co.uk and we’ll respond within a month. If you’re unhappy with how we handle your data you can complain to the Information Commissioner’s Office (ico.org.uk).

If you are a customer of a tradesperson who quoted you through Quotes4You, the tradesperson is the controller of your details — contact them first, and we will help them meet any request.

6. Security

Data is encrypted in transit, every business’s records are isolated from every other at the database layer, and quote links use long random tokens that cannot be guessed. No system is perfectly secure; if a breach ever puts your data at risk we will tell you and the ICO as the law requires.

7. Changes

If this policy changes materially we’ll flag it in the app before the change takes effect. The date at the top always shows the current version.