Skip to content
Snagwise
Legal

Privacy policy

[NEEDS HUMAN SIGN-OFF]

This is a draft. It accurately describes what the website does with personal data, because it was written alongside the code that handles it, but it needs the data controller's details filled in and a human to confirm the retention period and the ICO registration position before it goes live.

Last updated: [NEEDS HARRY: date on sign-off]

Who we are

Snagwise provides snagging inspections for new build homes across the Midlands. For the purposes of UK data protection law we are the data controller for the information described here.

[NEEDS HARRY: Trading name, legal entity and company number if incorporated. Needed for the footer, Terms, Privacy and the schema graph.]

[NEEDS HARRY: A business address. LocalBusiness schema and ICO registration both want one, even if it is not published.] Also needed: whether the business is registered with the Information Commissioner's Office. Most businesses processing personal data electronically are required to register and pay the data protection fee. [NEEDS HUMAN SIGN-OFF]

What we collect, and when

When you send an enquiry through a form on this site, we collect:

  • your name, phone number and email address, so we can reply;
  • the postcode and size of the property, its developer, and when you are completing or moved in, so we can price the job and book a slot;
  • anything you type into the message box;
  • whether you ticked the box asking for occasional emails from us, the exact wording you were shown, and the time you ticked it;
  • how you arrived at the site: the page you landed on, the site that referred you, and any advertising campaign identifiers in the link you clicked;
  • whether you were on a phone, tablet or desktop, and the country your connection came from. These are worked out from your request rather than asked of you.

We do not ask for payment details through this website and you should never send card details to us by email.

Why we are allowed to use it

  • To answer your enquiry and carry out an inspection. This is necessary to take steps towards, and then perform, a contract with you.
  • To keep a record of the work. We have a legitimate interest in keeping our own records of inspections carried out and reports issued.
  • To send you marketing emails. Only if you ticked the box. That is consent, and you can withdraw it at any time without affecting anything else.
  • To measure how the website performs. Analytics cookies are only set if you agree to them.

Who else handles it

We use a small number of service providers to run the website and manage enquiries. They process data on our instructions and are not permitted to use it for their own purposes.

  • Cloudflare — hosts the website and screens form submissions for automated abuse.
  • Airtable — stores enquiries so we can work through them.
  • Brevo — sends the notification to us and the confirmation to you.
  • Google — website analytics, if you have agreed to analytics cookies.

Some of these providers may process data outside the UK. Where that happens it is done under the safeguards UK data protection law requires. [NEEDS HUMAN SIGN-OFF: confirm the transfer mechanism each provider relies on.]

We do not sell your personal information, and we do not pass your enquiry to any other company.

How long we keep it

[NEEDS HARRY: a real retention period. A defensible starting point is enquiries that go nowhere deleted after 12 months, and records of completed inspections kept for 6 years to cover the limitation period on a contract claim. This needs to be a decision, not a placeholder, and then it needs to actually be done in Airtable.] [NEEDS HUMAN SIGN-OFF]

Cookies and storage

Nothing that measures you is set unless you say yes. Analytics only loads after you accept on the cookie banner, and if you decline, it is never loaded at all. You can change your mind at any time using the cookie link in the footer.

Two things are stored regardless, because the site cannot work without them:

  • a short-lived record of how you arrived, held only for the duration of your visit and never shared;
  • a security token from Cloudflare that tells automated form submissions apart from real ones.

If you start filling in an enquiry form we also keep what you have typed in your own browser, so you do not lose it if you navigate away. It stays on your device, is never sent anywhere until you submit the form, is deleted as soon as you do, and is cleared when you close the tab. The marketing tick box is deliberately never remembered, because agreeing to something has to be an active choice each time.

Your rights

You can ask us for a copy of the information we hold about you, ask us to correct it, ask us to delete it, object to how we are using it, or ask us to restrict what we do with it. If you gave us consent for marketing you can withdraw it at any time. There is no charge, and we will respond within one month.

To make a request, contact us using the details on our contact page. [NEEDS HARRY: a named contact route for data requests. UK GDPR expects a request to reach a real person within one month, so this needs an address that is monitored, not a form nobody reads.]

If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office atico.org.uk. We would rather you came to us first so we can try to put it right.