Legal
Privacy policy.
This policy explains how OneUnity Bathrooms Ltd ("we", "us") collects and uses your personal data when you visit oneunitybathrooms.co.uk, contact us, or engage us for work. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
OneUnity Bathrooms Ltd, a company registered in England and Wales. We are the data controller for personal data you submit through this website.
You can contact us about this policy by emailing oneunitybathroom@outlook.com or by calling 07723 949633.
What we collect
We only collect the data you give us directly:
- Quote enquiry form: name, email address, phone number, area, services of interest, the message you write to us.
- 10% off popup and inline email-only form: email address (and name/phone if you choose to add them).
- Phone or email enquiries: the contact details and information you share with us during the conversation.
- Server logs: anonymised request data (timestamp, page, referrer, anonymised IP) handled by our hosting provider for security and abuse prevention.
We do not run analytics, advertising trackers, fingerprinting, session recording, or any third-party marketing scripts.
Why we collect it, and on what basis
Under UK GDPR, every use of your data has a lawful basis. Ours are:
- To respond to your enquiry and prepare a quote — Article 6(1)(b) UK GDPR, necessary for steps before entering a contract you have requested.
- To deliver your 10% off code by email — Article 6(1)(a), your consent. You can withdraw consent at any time by emailing us.
- To run the business and meet our records duties — Article 6(1)(c) and 6(1)(f), legal obligations (e.g. HMRC invoice records) and our legitimate interest in operating safely.
We do not use your data for automated decision-making or profiling.
Who we share it with
We share your data with the minimum third parties needed to run the site and reply to you:
- Resend (transactional email delivery, US-based with SCCs and UK adequacy in place) — to send enquiry emails to us and confirmation emails to you.
- Vercel (hosting and CDN, US-based with SCCs) — to serve the website.
- HMRC and other UK authorities — only where we are legally required to retain or disclose records (e.g. tax, VAT, insurance).
We do not sell, rent, or share your data for marketing by any other party.
How long we keep it
- Enquiries that do not become jobs: up to 24 months from your last contact with us, then deleted.
- Quote, invoice, and job records: 6 years after the end of the tax year the work was completed in, to meet HMRC requirements.
- Marketing consent (10% off list): until you withdraw consent or unsubscribe.
Your rights under UK GDPR
You have the right to:
- Ask us for a copy of the personal data we hold about you.
- Ask us to correct data that is wrong.
- Ask us to delete your data where we no longer need it (right to erasure).
- Ask us to stop or restrict certain uses of your data.
- Ask us to transfer your data to another provider.
- Object to processing based on legitimate interest.
- Withdraw consent at any time where consent is the basis.
Email us and we will action requests within 30 days. We may need to verify your identity first.
Cookies and local storage
We use only the cookies and local-storage entries strictly needed for the site to work:
ou_popup_seen— remembers if you have already seen the 10% off popup so we do not show it again.ou_offerbar_closed— remembers if you have dismissed the sticky offer bar this session.ou_offer_deadline— stores your countdown deadline so it persists between page loads.ou_cookie_ack— remembers that you have seen this cookie notice.
No advertising cookies, no analytics cookies, no third-party cross-site tracking. Essential cookies do not require consent under PECR, but we still tell you about them.
Security
Submissions are sent over TLS. Hosted on Vercel with industry standard infrastructure controls. Access to enquiry inboxes is restricted to authorised OneUnity staff. We do not store payment card details on this website.
International transfers
Our hosting (Vercel) and email delivery (Resend) providers may process data in the United States. Both rely on the UK Addendum to the EU Standard Contractual Clauses and have certified to the UK Extension of the EU-US Data Privacy Framework where applicable.
Children
This site and our services are aimed at adults. We do not knowingly collect personal data from anyone under 13. If you believe a child has submitted data to us, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. The effective date at the top will change. Material changes will be flagged on the homepage for at least 14 days.
Complaints
We would always rather you raise concerns with us first. Email oneunitybathroom@outlook.com and we will reply within 5 working days.
You also have the right to complain to the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.