Privacy notice

Who we are

The data controller for Upholstery Portal is [CONTROLLER NAME — confirm: Valley Upholstery Ltd or Mixture Ltd], registered address [REGISTERED ADDRESS — to be confirmed].

What we collect

• Customers: your name, email address, phone number, postcode, a description of the job, photos you upload, any budget you give, and any fabric visualiser images you create.
• Upholsterers: business and contact details, service areas, membership application documents (insurance certificate, photo ID, references), and payment records. Card payments are handled by Stripe; we never see full card numbers.
• Everyone: basic technical information needed to run and protect the site, such as a one-way scrambled (hashed) copy of your IP address used to stop spam.

Who receives your details

When you send a quote request, member upholsterers who cover your area can see the job, your postcode area and your photos — but not your name or contact details. Leads are exclusive: when one member buys your lead, that member receives your name, email address and phone number so they can contact you about the job. No other member receives them.

We also use service providers to run the site (hosting, database, email delivery and Stripe for payments). They process data only on our instructions.

Enquiries passed on by partner businesses

Some enquiries reach us from partner upholstery businesses, for example Valley Upholstery in Stalybridge, when they can't take the job themselves (for example because you are too far away). A partner may only pass your enquiry to us with your explicit permission. We record the wording you agreed to and when. If we have your email address, we tell you straight away and include a link to remove your details if you didn't ask for this.

Why we use your details (lawful basis)

To arrange the quote you asked for (taking steps at your request before a contract), with your consent for partner referrals, and in our legitimate interests to keep the service secure and free of spam.

How long we keep it

• Quote requests that never lead to work: up to 12 months from last contact, then deleted.
• Payment and transaction records: 6 years from the end of the relevant tax year, as UK tax law requires.
• Backups are kept for up to 90 days for disaster recovery only. Data you ask us to delete may remain in a backup until it rolls off; it is put beyond use in the meantime and is not restored.

Asking for removal and your other rights

You can ask to see, correct or delete your details, or object to how we use them. If your enquiry was passed on by a partner, the "remove my details" link in our email deletes your contact details and photos and closes the enquiry at once. Otherwise reply to any email from us, or write to [CONTROLLER NAME — confirm: Valley Upholstery Ltd or Mixture Ltd] at [REGISTERED ADDRESS — to be confirmed]. Note that a member who has already bought your lead holds their own copy of your contact details; ask them directly too.

You can also complain to the Information Commissioner's Office (ico.org.uk).