Last updated: 18 September 2026
Capital Painters & Decorators respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and protect personal information when you visit www.capitalpainters-decorators.co.uk, contact us, request a quotation, become a customer, subscribe to marketing communications or otherwise interact with us.
1. Who we are
For the purposes of UK data protection law, Capital Painters & Decorators is the data controller responsible for the personal information described in this Privacy Policy.
Capital Painters & Decorators
1 Bannerman Way
Edinburgh
EH17 8NF
Email: [email protected]
Telephone: 07517 002241
2. Information we may collect
Depending on how you interact with us, we may collect the following information.
Information you provide to us
This may include:
- your name;
- email address;
- telephone number;
- address or project location;
- information about the painting, decorating, plastering or other work you require;
- photographs or other information you provide in connection with a quotation or project;
- correspondence between you and us;
- marketing preferences; and
- any other information you choose to provide.
We may collect this information when you:
- submit a contact or quotation form;
- contact us by telephone or email;
- communicate with us through another platform;
- request a quotation;
- become a customer;
- subscribe to our mailing list; or
- otherwise communicate with us.
Information collected automatically
When you use our website, certain technical information may be collected automatically, including:
- IP address;
- browser type and version;
- device type and operating system;
- pages visited;
- referring website or source;
- approximate geographic location;
- interactions with our website;
- date and time of visits; and
- website security and server log information.
Some of this information is collected using cookies or similar technologies. Please see our Cookie Policy for more information.
3. How we use your information
We may use your personal information to:
- respond to enquiries;
- provide quotations;
- communicate with prospective and existing customers;
- arrange and carry out our services;
- manage customer relationships and projects;
- provide customer support;
- issue invoices and maintain business and accounting records;
- operate, maintain and secure our website;
- prevent fraud, abuse and malicious activity;
- understand how visitors use our website;
- improve our website, services and marketing;
- measure enquiries and advertising performance;
- send marketing communications where you have requested or agreed to receive them;
- comply with our legal and regulatory obligations; and
- establish, exercise or defend legal claims where necessary.
4. Our lawful bases for using your information
UK data protection law requires us to have a lawful basis for processing personal information.
Depending on the circumstances, we may rely on the following bases.
Contract and steps before entering into a contract
We may process your information where it is necessary to:
- respond to a request for a quotation;
- discuss work you are considering asking us to perform;
- provide agreed services; or
- manage our contractual relationship with you.
Legitimate interests
We may process information where it is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms.
These interests may include:
- communicating with customers and potential customers;
- managing and improving our services;
- maintaining business records;
- protecting our website and systems;
- preventing fraud and abuse;
- understanding the general performance of our website and services; and
- managing our business effectively.
Consent
We rely on consent where required, including for certain:
- analytics technologies;
- advertising and conversion tracking;
- marketing communications; and
- non-essential cookies or similar technologies.
Where processing is based on consent, you may withdraw your consent at any time.
Legal obligations
We may process personal information where necessary to comply with legal obligations, including accounting, taxation, regulatory and record-keeping requirements.
5. Contact forms and enquiries
Our website uses Contact Form 7 to provide contact and enquiry forms.
When you submit a form, the information you enter is sent to us so that we can respond to your enquiry.
Information submitted through the website may be transmitted and stored using our website hosting and email infrastructure.
Please do not include sensitive personal information in an enquiry unless it is genuinely necessary.
6. Email communications
We use business email services, including Microsoft 365, to receive and manage communications.
If you contact us by email or submit a website enquiry which is delivered to us by email, your name, email address, message and associated correspondence may be processed through these services.
We keep correspondence for as long as reasonably necessary to deal with your enquiry, provide our services, maintain appropriate business records and deal with any subsequent queries or disputes.
7. Website analytics
We use Google Analytics 4, including through Google Site Kit, to understand how visitors use our website.
Analytics information may include pages visited, interactions with the website, approximate location, device and browser information and how a visitor reached the website.
Where consent is required, analytics technologies are activated in accordance with your cookie preferences.
We use this information to understand website performance, identify areas for improvement and measure the effectiveness of our online activity.
Google may process information on our behalf in connection with these services.
More information about cookies and analytics can be found in our Cookie Policy.
8. Advertising and conversion measurement
We may use Google Ads and related Google measurement technologies to understand how our advertising performs.
For example, these technologies may help us understand whether someone who interacted with an advertisement later:
- visited our website;
- contacted us;
- clicked a telephone or email link; or
- submitted an enquiry.
Where required, advertising and conversion-measurement technologies will only operate after the appropriate consent has been provided.
We do not use this information to make decisions about individuals that produce legal or similarly significant effects.
9. Google Reviews and Trustindex
Our website may display reviews from our Google Business Profile using Trustindex.
Displaying or interacting with review widgets may involve communication between your browser and Trustindex and/or Google.
These third parties may receive technical information such as your IP address, browser information and information relating to your interaction with their services.
Trustindex operates its own privacy practices in relation to information it processes through its services.
10. Newsletter and email marketing
We use MailerLite to provide mailing-list and email marketing functionality.
If you subscribe to our mailing list, we may process information including:
- your name;
- email address;
- subscription status;
- marketing preferences; and
- information about engagement with emails we send.
We will send marketing communications where we have an appropriate lawful basis to do so.
You can unsubscribe at any time by using the unsubscribe link contained in our marketing emails or by contacting us.
Where you unsubscribe, we may retain limited information necessary to ensure that your preference is respected and that we do not accidentally add you back to a marketing list.
11. Website hosting, security and infrastructure
Our website uses third-party providers to host, protect and operate our online services.
These may include:
Amazon Web Services
Our website is hosted using Amazon Web Services (AWS) infrastructure.
Website data, server logs and information submitted through the site may therefore be processed on AWS infrastructure.
Cloudflare
We use Cloudflare for services including DNS, website performance and security.
Cloudflare may process technical information such as IP addresses and website requests in order to deliver and protect our website.
Wordfence
We use Wordfence to help protect our WordPress website against malicious activity, unauthorised access and other security threats.
Security processing may include IP addresses, request information and other technical data where necessary to identify or prevent malicious behaviour.
Website management and backups
We use website-management and backup tools to maintain, update, monitor and recover the website.
Information stored on the website may therefore be included in secure website backups or processed by service providers involved in maintaining our website infrastructure.
12. Who we may share your information with
We do not sell your personal information.
We may share personal information with trusted service providers where necessary to operate our business or website.
These may include providers of:
- website hosting and infrastructure;
- cloud and security services;
- email services;
- website analytics;
- advertising and conversion measurement;
- email marketing;
- website maintenance and backup services;
- review and reputation-management functionality;
- professional services such as accountants or legal advisers; and
- government, regulatory or law-enforcement authorities where required by law.
Where third parties process information on our behalf, we expect them to process it securely and only for the purposes for which they have been engaged.
13. International transfers
Some of the technology providers we use operate internationally and may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer is permitted under applicable UK data protection law.
Depending on the provider and destination, safeguards may include:
- UK adequacy regulations;
- recognised international data-transfer arrangements;
- the UK International Data Transfer Agreement or UK Addendum to Standard Contractual Clauses; or
- another legally recognised transfer mechanism.
Our service providers may also maintain their own legally recognised safeguards for international transfers.
14. How long we keep your information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to comply with legal, accounting or reporting requirements.
As a general guide:
- general enquiries: normally up to 24 months after the last meaningful communication, unless the enquiry becomes a customer relationship;
- customer and project records: for the duration of our relationship and for an appropriate period afterwards in case they are needed for warranty, contractual, insurance or legal purposes;
- financial and accounting records: generally up to 6 years or for any longer period required by law;
- marketing information: until you unsubscribe, withdraw consent or we determine that the information is no longer required;
- security and server logs: for a limited period appropriate to security and technical requirements;
- website analytics: according to the retention settings used for the relevant analytics service; and
- website backups: according to our backup and recovery schedule.
We may retain information for longer where this is necessary to establish, exercise or defend legal claims or where we are required to do so by law.
15. How we protect your information
We take reasonable technical and organisational measures to protect personal information against:
- unauthorised access;
- accidental loss;
- misuse;
- alteration;
- disclosure; and
- destruction.
These measures include appropriate website security, encrypted HTTPS connections, access controls, security monitoring and backups.
No internet-based system can be guaranteed to be completely secure, but we take reasonable steps to protect the information entrusted to us.
16. Cookies
Our website uses cookies and similar technologies.
Some are necessary for the website to function, while others may be used for analytics, advertising or third-party functionality.
Where consent is required, non-essential technologies are controlled according to the choices you make through our cookie consent system.
Please read our Cookie Policy for further information about the technologies we use and how you can manage your preferences.
17. Your data protection rights
Depending on the circumstances and the lawful basis we rely upon, you may have rights including the right to:
- request access to the personal information we hold about you;
- ask us to correct inaccurate or incomplete information;
- request deletion of your personal information;
- request restriction of how we use your information;
- object to certain processing;
- request transfer of certain information to you or another organisation;
- withdraw consent where we rely on consent; and
- complain about how your personal information is being handled.
Some of these rights are subject to legal conditions and exemptions and therefore may not apply in every situation.
To exercise your rights, contact us at:
We may need to confirm your identity before completing a request.
18. Your right to object
You have the right to object to processing based on our legitimate interests in certain circumstances.
You also have the right to object at any time to the use of your personal information for direct marketing purposes.
If you ask us to stop using your information for direct marketing, we will do so.
19. Complaints
If you are concerned about how we use your personal information, please contact us first and we will try to resolve the issue.
You also have the right to raise a concern with the Information Commissioner’s Office (ICO), the UK’s data protection regulator.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Further information is available at ico.org.uk.
20. Links to other websites
Our website may contain links to websites operated by third parties.
We are not responsible for the privacy practices of websites we do not control. We recommend reading the privacy notice of any third-party website you visit.
21. Children’s privacy
Our website and services are not specifically directed at children and we do not knowingly seek to collect personal information from children through the website.
If you believe that a child has provided personal information to us unnecessarily, please contact us.
22. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or how we process personal information.
The latest version will be published on this page and the date at the top will show when it was last updated.
23. Contact us
If you have any questions about this Privacy Policy or how we handle personal information, please contact:
Capital Painters & Decorators
1 Bannerman Way
Edinburgh
EH17 8NF
Email: [email protected]
Telephone: 07517 002241