Privacy Policy

1. Introduction

Welcome to BathroomMaster York (“we,” “our,” or “us”). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our bathroom renovation services in York and the surrounding areas.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our services.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at ico.org.uk.

2. Information We Collect

We may collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our services. The personal information that we collect depends on the context of your interactions with us and may include:

• Contact Data: Name, email address, phone number, and postal address.
• Project Data: Details about your property, bathroom dimensions, design preferences, and budget.
• Financial Data: Payment details and billing address (processed securely through our payment partners).
• Technical Data: IP address, browser type, operating system, and usage details collected automatically when you visit our website.

3. How We Use Your Information

We use the personal information we collect for various business purposes, including to:

• Provide, operate, and maintain our bathroom renovation services.
• Process your requests, quotations, and transactions.
• Communicate with you regarding your project, including scheduling and updates.
• Respond to your inquiries and offer customer support.
• Improve our website, services, and customer experience.
• Comply with legal obligations and resolve any disputes.

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data under the following lawful bases:

• Contractual Necessity: Processing is necessary for the performance of a contract with you (e.g., carrying out a bathroom installation).
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided those interests do not override your fundamental rights.
• Consent: Where you have given us explicit consent to process your data for a specific purpose.
• Legal Obligation: Processing is necessary for compliance with our legal and regulatory obligations.

5. Data Retention

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Details of our services and warranties require us to keep project records for up to 10 years.

6. Your Rights

Under data protection laws, you have rights in relation to your personal data, including the right to:

• Request access to your personal data.
• Request correction of your personal data.
• Request erasure of your personal data.
• Object to processing of your personal data.
• Request restriction of processing your personal data.
• Request transfer of your personal data.
• Right to withdraw consent.

If you wish to exercise any of these rights, please contact us using the details provided below.

7. Cookies and Analytics

Our website works without any optional cookies. With your consent, we use Google Analytics (provided by Google Ireland Limited) to understand how visitors use the site — for example, which pages are viewed and how people found us. Google Analytics sets cookies whose names begin with _ga and keeps them for up to 2 years. IP addresses are anonymised.

These cookies are only set if you click “Accept” on the cookie banner. If you click “Reject”, Google Analytics is not loaded. Your choice is remembered in your browser’s local storage so we do not ask again on every page. You can change your mind at any time using the “Cookie settings” link at the bottom of every page.

8. Third-Party Services

We share your data only with service providers who help us run our business, and only as much as they need:

• Website enquiries: when you use our contact form, your name, phone number, email address (if given), message and IP address are sent to us by email. Our website and email are hosted by Hostinger, and a copy of each enquiry is delivered to a Google (Gmail) mailbox as a backup so that no enquiry is lost.
• Analytics: Google Analytics, only if you consent (see section 7).
• Messaging: if you contact us on WhatsApp, your messages are handled under WhatsApp’s own privacy policy.
• Project partners: payment processors, IT support, and specialist subcontractors (e.g., electricians or plasterers) working on your specific project.

Some of these providers may process data outside the UK. Where they do, they rely on safeguards recognised under UK data protection law. We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

9. Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

10. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

11. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date at the top of this policy. You are advised to review this Privacy Policy periodically for any changes.