Privacy policy

This Privacy Policy explains how Mendip Handyman (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you visit our website or contact us through it. We are committed to handling your information responsibly and in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy was last updated on 5 November 2026.

Who we are

Mendip Handyman is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your information, you can contact us at:

Email: contact@mendiphandyman.co.uk

What data we collect

When you submit our contact form, we collect the following personal data that you voluntarily provide:

  • Your name
  • Your email address
  • Your phone number (if you choose to provide it)
  • Details about your property and project, such as its location, the type of work and your preferred timing
  • Your message and any details you include in it

We do not collect any sensitive personal data (also known as special category data) and we do not collect personal data from children under the age of 16.

How we collect your data

We only collect personal data that you actively submit to us via the contact form on our website. We do not use cookies. We do keep anonymous visitor statistics, which are explained under “Cookies and analytics” below and cannot be used to identify you.

Lawful basis for processing

Under UK GDPR Article 6, we rely on the following lawful bases to process your personal data:

  • Legitimate interests (Article 6(1)(f)): To respond to your enquiry and provide information about our services. We have assessed that our legitimate interest in responding to customer enquiries does not override your rights and freedoms.
  • Pre-contractual steps (Article 6(1)(b)): Where your enquiry relates to engaging us to carry out work, processing your data is necessary to take steps at your request before entering into a contract.

How we use your data

We use the personal data you provide solely for the following purposes:

  • To respond to your enquiry and answer any questions you have raised
  • To provide you with information about our property restoration and renovation services
  • To arrange and deliver the services you have requested

We will not use your data for marketing purposes, profiling, or any automated decision-making.

Sharing your data

We do not sell, rent, or trade your personal data. We will never share your data with third parties for their own marketing purposes.

We use Formspree to receive and process contact form submissions on our behalf. Formspree acts as a data processor and handles your submitted data in accordance with our instructions. As Formspree is based in the United States, your data may be transferred to and processed in the US. Formspree relies on appropriate safeguards, including Standard Contractual Clauses, to ensure your data receives a level of protection equivalent to that required under UK law. You can read Formspree’s privacy policy at https://formspree.io/legal/privacy-policy/.

We may disclose your personal data if required to do so by law or in response to a valid request from a law enforcement or regulatory authority.

How long we keep your data

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected. In practice, this means:

  • Enquiries that do not lead to work being carried out will be retained for up to 6 months, after which they will be securely deleted.
  • Where we carry out work for you, we will retain your contact details for up to 6 years in line with our legal and contractual obligations.

Hosting

Our website is hosted by Vercel Inc. When you visit, Vercel processes technical information such as your IP address in order to deliver the site securely and protect it from abuse. Vercel acts as a data processor and may process data outside the UK under appropriate safeguards. You can read Vercel’s privacy policy.

Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Access to your data is limited to those who have a genuine need to process it. While no method of electronic transmission is completely secure, we take our responsibilities seriously and continually review our security practices.

Cookies and analytics

Our website does not use cookies. Our fonts are hosted on our own website rather than loaded from a third party.

We use Vercel Web Analytics to understand how many people visit our website, which pages they view and how they found us. It records each page view anonymously, along with the website you came from, your approximate location and the type of device, operating system and browser you are using. It stores nothing on your device and cannot follow you across other websites. To tell one visit from another, Vercel creates a temporary code from your connection, which is discarded after 24 hours. We see totals only, never individual visitors, and we do not build profiles of website visitors.

We do this on the basis of our legitimate interest in understanding how our website is used. You can read more about how Vercel Web Analytics handles data.

Your rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can ask us to correct any inaccurate or incomplete data we hold.
  • Right to erasure: You can ask us to delete your personal data where there is no longer a lawful reason for us to hold it.
  • Right to restrict processing: You can ask us to limit how we use your data in certain circumstances.
  • Right to data portability: Where processing is based on consent or contract, you can request your data in a structured, commonly used, machine-readable format.
  • Right to object: You have the right to object to processing based on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.

To exercise any of these rights, please contact us at contact@mendiphandyman.co.uk. We will respond to all valid requests within one calendar month. We will not charge a fee for handling your request unless it is manifestly unfounded or excessive.

Right to complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office (ICO):

Website: ico.org.uk
Telephone: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns before you contact the ICO, so please reach out to us in the first instance.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Any changes will be published on this page with a revised “last updated” date. We encourage you to review this policy periodically.

Contact us

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us at contact@mendiphandyman.co.uk.