Privacy Policy
Last updated: February 2026
1. Who We Are
Ghuman Flooring UK Ltd (Company No. 15674461), registered at 17 Hanover Square, London W1S 1BN ("Ghuman Flooring", "we", "us"). We are the data controller for your personal data.
2. Data We Collect
- Contact details — name, email, phone, postcode (when you submit a quote request or enquiry)
- Project details — project type, system interest, dimensions, site conditions, budget, timeline
- Device & usage data — anonymised browser fingerprint (SHA-256 hash), pages visited, referral source
- Marketing attribution — UTM parameters, Google Click ID, Meta Pixel events (with consent)
- Photos — site photos you upload during the quote process
3. How We Use Your Data
- To prepare and deliver your quote or project proposal
- To communicate about your project
- To improve our website and services
- For marketing (only with your consent) — retargeting ads, email updates
- For legal compliance and fraud prevention
4. Legal Basis (UK GDPR)
- Contract — processing necessary to fulfil your quote request
- Legitimate interest — website analytics, fraud prevention, service improvement
- Consent — marketing communications, Meta Pixel tracking, non-essential cookies
5. Cookies & Tracking
We use essential cookies for site functionality and optional cookies for analytics and marketing. You can manage preferences via our cookie banner at any time. See our Cookie Policy for full details.
6. Data Sharing
We do not sell your data. We share data only with:
- Service providers — hosting (Supabase/AWS), email delivery (Resend), payment processing
- Meta Platforms — via Meta Pixel (with your marketing consent)
- Professional advisors — accountants, legal counsel as required
- Law enforcement — when legally required
7. Data Retention
We retain personal data for as long as necessary to fulfil the purpose it was collected for, typically:
- Quote enquiries: 3 years from last contact
- Customer project records: 7 years (legal/tax requirements)
- Anonymised analytics: indefinitely
- IP hashes: automatically purged after 90 days
8. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
To exercise these rights, email enquiries@ghumanflooring.co.uk. We will respond within 30 days.
9. Data Security
We use encryption in transit (TLS), row-level security on our database, server-side hashing for device fingerprints, and do not store raw IP addresses.
10. Changes
We may update this policy. Material changes will be communicated via our website.
11. Contact & Complaints
Email: enquiries@ghumanflooring.co.uk
You can also lodge a complaint with the Information Commissioner's Office (ICO).