Last updated: 11 May 2026
This is the bit where we tell you what we do with your data. We’ve tried to write it like a human, because legal pages shouldn’t make your eyes glaze over. If anything here isn’t clear, just email us and we’ll explain it properly.
Brushworq (“we”, “us”, “our”) runs the website at brushworq.com. We’re based in the UK, so this policy follows UK GDPR and the Data Protection Act 2018. For the purposes of that legislation, we’re the data controller for the personal information you share with us.
If you want to ask about your data, or you’d rather we didn’t have it anymore, get in touch at hello@brushworq.com. We’ll come back to you within 30 days, usually much sooner.
We only collect what we actually need. Depending on how you use the site, that might include:
Contact details like your name, email address, phone number, and postal address. You give us these when you fill in a form, book a job, or send us an enquiry.
Job details such as the property address, photos you send us, the work you’d like done, and any access notes. We need this to actually do the work.
Payment information handled through our payment provider. We don’t store full card numbers on our own systems.
Technical data like your IP address, browser type, and the pages you visited. This comes in automatically when you load the site.
We use your information to give you a quote, schedule the work, turn up at the right address, take payment, and stay in touch about the job. We also use it to improve the site, keep it secure, and meet our legal obligations like keeping records for HMRC.
Sometimes we’ll send you an email about a service you’ve already had, if we think it’s relevant. You can tell us to stop at any time and we will.
UK GDPR says we need a lawful reason to use your data. Ours are:
Contract. When we’re doing a job for you, we need your details to deliver it.
Legitimate interests. Things like running the site, replying to enquiries, and basic analytics so we know what’s working. We’ve thought about your rights here and we don’t think we’re overstepping.
Consent. For marketing emails and any non-essential cookies. You can withdraw consent whenever you like.
Legal obligation. Tax records, accounting, and the usual compliance bits.
The site uses a small number of cookies. Some are essential for the site to work. Others help us see how people use the site so we can make it better. You’ll get a banner the first time you visit, and you can change your mind later through your browser settings.
We don’t sell your data. Ever. We do share it with a few trusted providers who help us run the business, like our website host, email provider, payment processor, and accounting software. They only get what they need, and they’re bound by their own data protection obligations.
We’ll also share data if a court or regulator tells us we have to.
Most of our suppliers are based in the UK or EU. If any data goes outside the UK, we make sure it’s protected by approved safeguards like the UK International Data Transfer Agreement or the equivalent standard contractual clauses.
Enquiries that don’t turn into work get deleted within 12 months. Job records and invoices we have to keep for 6 years for tax purposes. Marketing data sticks around until you ask us to remove it, or until you’ve been quiet for a couple of years and we tidy up.
We use sensible security measures. Encrypted connections, access controls, regular updates. No system is 100% bulletproof, but we take it seriously and we’ll tell you and the ICO promptly if something goes wrong that affects your data.
Under UK GDPR you can ask us to:
See a copy of the data we hold about you. Correct anything that’s wrong. Delete it (in most cases). Restrict how we use it. Object to us using it for certain things. Receive it in a portable format so you can take it elsewhere. Withdraw consent where we relied on it.
Email hello@brushworq.com and we’ll sort it. We won’t charge you, unless your request is obviously excessive, and we’ll respond within a month.
If you think we’ve handled your data badly, you can complain to the Information Commissioner’s Office at ico.org.uk. We’d rather you came to us first so we can try to put it right.
The site isn’t aimed at children and we don’t knowingly collect data from anyone under 16. If you think we have, let us know and we’ll delete it.
If we change anything important, we’ll update the date at the top and, where it matters, we’ll let you know directly. The current version is always the one on this page.
