Privacy & cookies policy

This policy explains how Fixed & Fitted Ltd (“we”, “us”) looks after your personal information when you use this website or contact us. We are the “controller” of that information under UK data protection law.

Who we are

Fixed & Fitted Ltd, company number 16236677, registered in England and Wales. Registered office: 5 Acorn Close, Frome, England, BA11 4LR. You can contact us about this policy at hello@fixedandfitted.co.uk.

What information we collect

• Enquiry details. If you use the contact form, we collect your name, phone number, email address (optional), the service you need, your area and anything you tell us about the job.
• WhatsApp, calls and email. If you message or call us, we receive the information you choose to share, including your phone number, photos and messages. WhatsApp is operated by Meta and has its own privacy policy.
• Where you came from. If you click a WhatsApp, call or form button we note the page you were on and which type of source brought you to the site (for example “Google” or “direct”), so we know which pages help people find us. We do not record your IP address in readable form; where we need to limit spam we store a one-way scrambled version of it.
• Basic visit statistics. We use privacy-friendly analytics (Vercel Web Analytics and Speed Insights, and optionally Cloudflare Web Analytics) to count visits and measure site speed. These do not use cookies and do not build a profile of you across other websites.

Why we use it, and our legal basis

• To reply to your enquiry, prepare a quote and, if you go ahead, carry out the work. Legal basis: taking steps at your request before entering a contract, and performing a contract.
• To keep records of enquiries and jobs, and to run and improve our business and website. Legal basis: our legitimate interests in running a small business.
• To protect the site from spam and abuse. Legal basis: our legitimate interests in keeping the site secure.
• To keep accounting and tax records. Legal basis: legal obligation.

We do not sell your information, and we do not use it for automated decision-making.

Who we share it with

We use trusted service providers to run this website and our business. They process information only on our instructions:

• Vercel (website hosting and analytics)
• Convex (database where enquiries are stored)
• Resend (sending enquiry notification and confirmation emails)
• Cloudflare (domain name services, security and spam protection)
• Meta/WhatsApp, if you choose to contact us on WhatsApp

Some of these providers are based outside the UK. Where information is transferred abroad, we rely on appropriate safeguards required by UK data protection law. We may also share information where the law requires it.

How long we keep it

We keep enquiries that do not lead to work for up to 12 months, then delete them. If we carry out work for you, we keep the job and payment records for as long as the law requires for accounting and tax purposes (currently up to six years).

Your rights

You have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your information, or restrict or object to how we use it, in certain circumstances;
• ask for the information you gave us in a portable format.

To use any of these rights, email hello@fixedandfitted.co.uk. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk.

Cookies and similar technologies

We do not use advertising or tracking cookies, so you will not see a cookie banner. This is what the site does use:

• Session storage. Your browser remembers where you arrived from (for example Google) for the length of your visit so that, if you message us, we can tell which page helped. It is deleted when you close the tab and never leaves your device unless you click a contact button or send the form.
• Security. If spam protection (Cloudflare Turnstile) is switched on for our form, it may set a small security cookie or similar token to check that you are a real person.
• Embedded maps. Our maps use OpenStreetMap tiles. When a map loads, your browser requests map images from OpenStreetMap, which will see your IP address. The map only loads when you scroll to it.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.