Start Enquiry
Your information

Privacy Policy

This notice explains how P&Y Design LTD collects and uses personal information when you contact us, use our website or work with us on a project.

Last updated: 5 September 2026

1. Who we are

P&Y Design LTD is the controller responsible for the personal information covered by this notice.

Company number: 17420779
Registered office: Bank Mansions, Golders Green Crescent, NW11 8LG
Email: pydesignprojects@gmail.com
Telephone: +44 7346 816296

2. Information we collect

Depending on how you interact with us, we may collect:

  • your name, email address, telephone number, postcode and preferred contact method;
  • your property address and information about the proposed renovation, including measurements, plans, preferences, budgets and photographs;
  • enquiry correspondence and information submitted through our website, email, WhatsApp or Meta Lead Ads;
  • project records, quotations, contracts, signatures, variations, schedules, site updates and documents;
  • payment status and transaction references. Card details are handled by Stripe and are not stored by P&Y Design;
  • customer portal, administrator and trade-access security records, including verification, access and activity information; and
  • basic technical information needed for security and operation, such as IP address, browser or device information and timestamps.

Please do not send us special category information, such as health information, unless it is genuinely necessary for your project.

3. Why and how we use it

PurposeLawful basis
Responding to an enquiry, arranging a visit and preparing a quotationSteps requested before entering into a contract and our legitimate interests in running the business
Delivering and managing your project, contracts, payments and aftercarePerformance of a contract
Keeping financial, contractual, safety and dispute recordsLegal obligation and our legitimate interests in protecting legal rights
Operating secure portals, preventing misuse and improving our servicesOur legitimate interests in keeping our systems and business secure and effective
Sending direct marketingYour consent where required, or another lawful basis permitted by electronic marketing law

We do not use your information to make solely automated decisions that produce legal or similarly significant effects.

4. Meta Lead Ads

If you submit a form through a P&Y Design advertisement on Facebook or Instagram, Meta provides us with the information you choose to enter, together with relevant lead-form and campaign details. We use it to respond to your request, assess your proposed project and keep an enquiry record.

Meta also processes information under its own privacy policy. Providing details in a lead form does not by itself subscribe you to unrelated marketing. Where marketing consent is requested, it will be presented separately and you may withdraw it at any time.

5. Who we may share information with

We share only what is reasonably necessary with service providers and recipients such as:

  • tradespeople, suppliers and professional advisers involved in assessing or delivering a project;
  • Supabase for database, authentication and file storage services;
  • Vercel for website hosting and server functions;
  • Slack for delivery of website enquiries and internal project notifications;
  • Resend for transactional email delivery;
  • Stripe for payment processing;
  • Meta where you use Facebook, Instagram, WhatsApp or Lead Ads; and
  • regulators, courts, law enforcement, insurers or advisers where disclosure is required or necessary.

These organisations may act as our processors or as separate controllers, depending on the service. We do not sell personal information.

6. International transfers

Some technology providers may process information outside the UK. Where this happens, we require an appropriate UK data-transfer safeguard, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses, as applicable.

7. How long we keep information

We keep information only for as long as it is reasonably needed for the relevant purpose:

  • enquiries that do not become projects: normally up to 24 months after the last meaningful contact;
  • project, contract, payment and accounting records: normally six years after the project or relevant financial period ends, unless a longer period is required for a legal claim or obligation;
  • site photographs, plans and project communications: for the project and any applicable warranty or dispute period, then reviewed for deletion or anonymisation;
  • security and access records: for as long as needed to protect the service, investigate an incident and maintain an appropriate audit trail; and
  • marketing information: until you opt out, consent is withdrawn or the information is no longer useful, subject to retaining a minimal suppression record so we can respect your choice.

We may retain information for longer where necessary to comply with law, resolve a dispute or establish, exercise or defend legal claims.

8. Your data protection rights

Depending on the circumstances and lawful basis, you may have rights to be informed, access your information, correct it, have it erased, restrict its use, object to its use and receive certain information in a portable format. Where we rely on consent, you may withdraw it at any time without affecting earlier lawful processing.

Your right to object

You can object at any time to the use of your information for direct marketing. You may also object to processing based on legitimate interests; we will consider your request and stop unless we have compelling legitimate grounds or need the information for legal claims.

To exercise a right, email pydesignprojects@gmail.com. We may need to verify your identity. Rights can be subject to legal exemptions.

9. Complaints

Please contact us first so we can try to resolve your concern. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, through ico.org.uk/make-a-complaint or by calling 0303 123 1113.

10. Security and changes to this notice

We use proportionate organisational and technical measures designed to protect personal information. No online system is completely secure, so please contact us promptly if you believe information has been misused.

We may update this notice when our services, providers or legal obligations change. The latest version and update date will always appear on this page.

Start EnquiryWhatsApp