Legal

Privacy Policy

Last updated: 20 October 2026

1. Who We Are

Carvalho Renovations ("we", "us", "our") is a home renovation company based in the United Kingdom. This privacy policy explains how we collect, use, and protect your personal information when you use our website.

2. Information We Collect

We may collect the following personal data:

  • Contact form submissions: your name, email address, and message content.
  • Quote requests: your name, email address, phone number, project details, address, and any uploaded images.
  • Website usage: the pages you visit on our website, the website or advert that brought you here (for example a search engine, an AI assistant or a campaign link), your browser type and an approximate location (country, region and town) worked out by our hosting provider from your connection. We do not store your full IP address.
  • Enquiry source: when you send an enquiry or a message, we record how you found us and the pages you viewed in that visit, so we can understand which advertising and content is useful.
  • Optional analytics cookies: Google Analytics and Microsoft Clarity identifiers, stored only if you choose "Accept all".

3. How We Use Your Information

We use your personal data to:

  • Respond to your enquiries and provide quotes.
  • Communicate with you about your renovation project.
  • Understand how visitors find and use our website, and which advertising and content leads to enquiries, using our own website statistics. Optional Google Analytics and Microsoft Clarity are used only with your consent.
  • Send email notifications related to your enquiry.

We do not sell, trade, or rent your personal information to third parties.

4. Cookies

Our website uses cookies. When you first visit, a cookie consent banner allows you to choose:

  • Essential only: the website works normally, and Google Analytics and Microsoft Clarity are not loaded. We still keep our own basic website statistics (described below). They are not shared with advertisers and are not used to identify you across other websites.
  • Accept all: also enables Google Analytics and Microsoft Clarity.

Our own website statistics. To understand how our website is used, we record the pages visited, the website or campaign link that brought each visit, and an approximate location. Your browser keeps a small note of how you first and most recently arrived (up to 180 days), and a random identifier for the current browser tab only. Nothing is used to follow you on other websites or devices. Pages for signed-in customers, invoices, quotes and project updates are never recorded. To object to this, or to ask us to delete what we hold, contact us (see "Your Rights"). You can also clear your browser's site data at any time.

You can change your cookie preferences at any time by clearing your browser cookies and revisiting the site.

5. Third-Party Services

If you consent to analytics cookies, we use:

Our website is hosted on Vercel, which also provides the approximate location described above, and uses Supabase for data storage. We do not use any other service to look up visitors' locations.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined above. Contact messages, quote requests and the records of any work we carry out are kept for as long as we need them to respond to you, to carry out and support that work, and to meet our legal and accounting obligations. We review older records and delete those we no longer need. You can ask us to delete your data at any time (see "Your Rights").

Website statistics are kept for as long as they are useful for understanding how our website and advertising perform, and older records are reviewed and deleted periodically.

7. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data.
  • Object to or restrict processing of your data.
  • Data portability.

To exercise any of these rights, please contact us using the details on our Contact page.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS), secure database access controls, and regular security reviews.

9. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.