YOUR PERSONAL INFORMATION

Privacy policy

Last updated: 1 October 2026

This policy explains how OMINIWORKS Ltd handles personal information when you visit our website, request a quotation, contact us, engage us to carry out work or receive aftercare. It covers information collected online, by telephone, email, messaging and during site visits. We handle personal information under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations (PECR).

1. Who is responsible for your information?

OMINIWORKS Ltd is the data controller for the customer and enquiry information we decide how to use. Company number: 15606101.

Contact us about privacy or to exercise your rights:
Email: info@ominiworks.co
Telephone: 0800 999 1367
Post: OMINIWORKS Ltd, The Exchange, Express Park, Bristol Road, Bridgwater, Somerset, TA6 4RR.

Please mark correspondence “Privacy enquiry”. You do not need to use a particular form or legal wording to make a request.

2. Information we collect and where it comes from

• Contact and identity details: your name, telephone number, email, postal address and project postcode.
• Enquiry and project information: services requested, property access, measurements, plans, material choices, budget information you provide, survey notes and photographs or videos.
• Customer and financial records: accepted quotations, contracts, invoices, payment status, transaction references, warranty information and correspondence. Please do not send payment-card details through enquiry forms or chat.
• Communications: emails, messages, form submissions, complaints, feedback and notes of conversations. Where a call-recording service is used, you must be told at the start of the call; this policy does not mean every call is recorded.
• Website information: IP addresses, browser and device information, pages requested, referral information and security logs processed by our hosting or embedded service providers. Optional analytics or advertising technologies may collect further usage information when enabled with the required permission.

Most information comes directly from you. We may also receive relevant information from someone authorised to act for you, referral or trade-listing platforms, suppliers handling your order, or publicly available business contact sources. If we obtain your information indirectly, we will provide the required privacy information within the applicable period, normally within one month or at our first communication or disclosure if earlier, unless a legal exception applies.

We need enough contact and project information to respond, arrange a survey and perform agreed work. Without it we may be unable to provide those services. Optional photographs, additional details and marketing permissions are not a condition of requesting a quotation.

3. Why we use information and our lawful bases

• Enquiries, surveys and quotations: taking steps at your request before entering a contract. For enquiries made on behalf of a company or another person, our legitimate interest is responding to genuine business enquiries.
• Delivering agreed work and aftercare: performing our contract with you, including scheduling, communicating about the work and administering agreed guarantees.
• Invoices, tax and statutory records: meeting our legal obligations.
• Business administration, service quality, fraud prevention and security: our legitimate interests in running a reliable business, protecting people and systems, and resolving disputes. We consider the necessity of the use and its effect on your rights.
• Claims, complaints and evidence of work: our legitimate interests in investigating issues and establishing, exercising or defending legal claims, and legal obligations where applicable.
• Optional marketing and identifiable promotional images: your consent where required. For limited existing-customer marketing that satisfies every applicable PECR soft-opt-in condition, we may rely on our legitimate interest in promoting similar services, with a clear opt-out.
• Optional tracking: consent where required under PECR and UK GDPR. Necessary security and service-operation processing may rely on legitimate interests or another applicable lawful basis.

Consent to marketing is separate from an enquiry. You can withdraw consent at any time without affecting earlier lawful processing. We do not use “consent” as a blanket justification for every use of customer information.

4. Enquiry forms, messages and chat

Our website offers optional embedded LeadConnector forms, blocked until you choose to enable them, associated with the HighLevel customer-management platform. Information submitted through these forms is passed through that service so we can receive and manage your enquiry. Its operation may involve technical identifiers, service logs and processing outside the UK. See the sections on sharing and international transfers below.

When you choose WhatsApp or a social-media service, that provider also processes information under its own privacy policy. Please review the provider’s terms before sending sensitive information. Information you send to OMINIWORKS through these channels is used to handle your request.

Our LeadConnector / HighLevel live-chat widget loads across the website. The provider receives technical request information, including your IP address and browser information. The messages and contact details you provide through chat may be stored to answer your enquiry and continue the conversation. The embedded-form privacy preference does not disable this chat widget. Please avoid entering medical records, identity documents, passwords or financial account details. Ask to speak with our team if a matter needs personal attention.

5. Sensitive information and children

We do not need detailed health information to quote for most work. You can describe practical requirements, such as a level entrance or wheelchair access, without disclosing a diagnosis. If information about your health or disability is necessary, we must identify an additional UK GDPR special-category condition, such as explicit consent, as well as an ordinary lawful basis, and limit access and retention. Legal-claims conditions may apply where necessary.

Our services are intended for adults arranging property work. We do not intentionally seek children’s personal information or market to children. Contact us if a child has provided information so we can assess and remove it where appropriate.

6. Marketing, reviews and project photographs

We may contact you about the quotation or work you requested without treating those service messages as marketing. Promotional emails, texts and similar messages require the appropriate PECR permission. Where the existing-customer soft opt-in applies, the details must have been collected during a sale or negotiations for a sale, the promotion must concern our own similar services, and an easy opt-out must have been offered at collection and in every message.

To stop marketing, use the unsubscribe option, reply with an opt-out request where offered, or contact us. You have an absolute right to object to processing for direct marketing, including associated profiling. We may keep a minimal suppression record so we respect your choice.

Survey and progress photographs can help plan work, record workmanship and resolve issues. Promotional publication is a separate purpose. We seek permission before publishing material that identifies you or your private property, and avoid unnecessary faces, number plates, house numbers and precise addresses. Withdrawing permission stops future use based on that consent; we can remove material we control but cannot guarantee removal of copies independently shared by others.

7. Who may receive information?

Access is limited to people and organisations who need information for the relevant purpose. Depending on your enquiry or project, recipients may include:

• Authorised OMINIWORKS staff and people helping deliver the agreed work.
• Website hosting and security providers, LeadConnector/HighLevel, email, messaging, telephone and customer-management providers.
• Accounting systems such as Xero, payment and banking providers, accountants, insurers and professional advisers.
• Suppliers, delivery services and specialist trades where necessary for your project, using the relevant contact, address or order details.
• Manufacturers or warranty administrators where needed to register or handle an applicable guarantee.
• Regulators, courts, authorities or other parties when disclosure is legally required or necessary to protect legal rights.

Processors acting on our instructions must be subject to appropriate data-processing terms. Some recipients, such as banks, professional advisers and social-media providers, act as independent controllers for their own purposes. We do not sell your personal information. If the business is transferred, relevant records may be shared with advisers and a successor subject to lawful safeguards and appropriate notice.

8. International transfers

Some service providers may store information, provide support or otherwise process it outside the UK. Where a restricted international transfer occurs, an appropriate UK GDPR transfer mechanism is required: for example, UK adequacy regulations, or approved contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum, with the necessary assessment and additional protections.

Use of a provider does not by itself establish that every destination has adequate protection. You can contact us for information about the destinations and safeguards applicable to your information and how to obtain a copy of relevant safeguards, with confidential information removed where appropriate.

9. How long information is kept

Retention depends on the purpose and type of record, rather than one period for everything:

• Enquiries that do not lead to work: kept while the enquiry and any reasonable follow-up remain active, then reviewed for deletion when no longer needed.
• Contracts, quotations and project records: kept for delivery, applicable aftercare and the period needed to address potential contractual claims. A six-year period after completion is commonly relevant to ordinary contractual claims in England and Wales; different periods may apply to deeds, particular claims or ongoing disputes.
• Tax and accounting records: kept for the statutory period applicable to the record, generally at least six years from the end of the relevant company financial year, and longer where the law requires.
• Warranty records: the minimum information needed to administer the actual agreed guarantee may be kept for its duration and any necessary claims period. This does not require every enquiry, photograph or chat message to be retained for the full guarantee.
• Marketing preferences: kept while relevant; minimal opt-out records may be retained to prevent unwanted contact.
• Technical logs, optional tracking and communication records: kept for the period needed for the specific security, service or consented purpose and subject to the relevant provider’s settings.

Records may be retained longer where a legal obligation, investigation or active claim requires it. Information should then be securely deleted or anonymised when no longer needed. Contact us for the retention period or criteria applicable to a particular record.

10. Cookies and similar technologies

Read our cookie policy for information about website technologies. Embedded forms and external services may use their own cookies or similar storage. Merely visiting this website or submitting an enquiry does not constitute consent to optional advertising or analytics tracking.

Where consent is required, optional technologies must remain off until you make a positive choice. You must be able to refuse or withdraw that permission as easily as you give it. Browser settings can also restrict storage, although this may affect embedded services. The cookie notice and controls must reflect the technologies actually enabled; a privacy policy alone does not provide cookie consent.

11. Security

Personal information requires appropriate technical and organisational protection, including access limited to authorised people, secure accounts and systems, suitable provider arrangements and secure disposal. No internet transmission or storage method can guarantee absolute security. If you suspect your information has been exposed, contact us promptly. Where a personal-data breach occurs, we must assess it and notify the ICO and affected people when the legal thresholds require.

12. Your data-protection rights

Depending on the lawful basis and circumstances, you may have the right to:

• Receive clear information about how your information is used and obtain access to it and a copy.
• Correct inaccurate information and complete incomplete records.
• Request deletion where the legal conditions are met.
• Restrict processing in specified circumstances.
• Object to processing based on legitimate interests and object to direct marketing at any time.
• Receive certain information in a portable format where processing is automated and based on consent or contract.
• Withdraw consent at any time.
• Receive protection from solely automated decisions with legal or similarly significant effects where the applicable rules apply.

These rights are not all absolute: for example, required tax records or information needed for legal claims may have to be retained. We do not use solely automated decision-making to decide whether to accept your project or determine contractual terms. Routine enquiry routing does not replace our team’s assessment.

Send requests to info@ominiworks.co or use the contact details above. We may request proportionate information to verify your identity. We normally respond without undue delay and within one month. Where the law permits an extension for complex or numerous requests, we will explain it within the initial period. Requests are normally free; any lawful exception, refusal or charge will be explained.

13. Complaints

Please contact us if you are unhappy about how we handle your information. You can also complain directly to the Information Commissioner’s Office (ICO), the UK data-protection regulator; you do not have to complain to us first.

Make a complaint to the ICO
Telephone: 0303 123 1113
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

14. Other websites and policy changes

External links lead to services with their own privacy arrangements. This policy explains OMINIWORKS’ processing and does not replace another organisation’s privacy notice.

We update this policy when our services, providers or legal requirements change. The date at the top identifies the latest version. Where a new purpose requires further information or permission, we will provide it before using your information for that purpose.

For any privacy question, contact info@ominiworks.co.