1 Who We Are & Data Controller Identity
Miracle Paint & Construction Ltd is the registered Data Controller responsible for your personal information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).
Registered Office: Mayfair, London W1J 6BD, United Kingdom. We are fully committed to protecting the privacy, confidentiality, and fundamental rights of homeowners, commercial clients, website visitors, and certified trade subcontractors.
2 The Personal Data We Collect
Depending on your interaction with Miracle Paint & Construction, we collect and process the following categories of data:
A. Homeowners & Prospective Clients (Quotation & Booking)
Full name, telephone number (mobile/landline), email address, property address and postcode, room specifications, square meterage, wall condition notes, selected paint brand finishes, and optional reference photos uploaded to facilitate cost estimation and site surveys.
B. Trade Partners & Decorator Applicants (`/partner`)
Registration type (Self-Employed vs Limited Company), full name or registered company name, date of birth or 8-digit company number, primary business address, team size, working cities/boroughs, direct telephone, email address, National Insurance number or UTR, Public Liability Insurance policy details, trade specialties, and secure digital copies of government-issued photo identification (Passport or Driving Licence - Front and Back sides) for Right to Work and identity verification.
C. Website Visitors & Technical Diagnostics
Internet Protocol (IP) address, browser type, operating system, referrer URL, device resolution, approximate geographic location, and interaction logs with our cost calculators and interactive schedule calendar.
3 Lawful Bases for Processing
Under Article 6 of the UK GDPR, we only process personal data when an explicit legal ground applies:
- Performance of a Contract: Generating itemized quotations, reserving decorator schedules, conducting site works, communicating project progress, issuing final invoices, and paying trade subcontractors.
- Legitimate Interests: Managing business operations, maintaining rigorous health and safety standards on site, verifying trade contractor insurance, preventing fraudulent bookings, and optimizing our web performance.
- Legal & Statutory Obligations: Complying with HMRC financial record-keeping, VAT accounting regulations, building control regulations, and UK law enforcement requests.
- Explicit Consent: Sending requested email estimates, newsletters, or customer review requests where explicit opt-in is given. Consent may be withdrawn at any time.
4. Zero Third-Party Sale Policy
We maintain an absolute, zero-tolerance policy against the commercial exploitation of personal information.
Miracle Paint & Construction Ltd does not sell, rent, lease, monetize, trade, or distribute client or trade partner contact records, phone numbers, or email addresses to any third-party lead brokers, data resellers, marketing agencies, or unsolicited telemarketers under any circumstances.
Data is only accessed by vetted internal staff and dedicated operational infrastructure (e.g. secure corporate mail servers and SSL-encrypted cPanel hosting) strictly for the direct delivery of our bespoke decorating services.
5. Trade Partner Job Dispatch Lead Privacy
To safeguard our clients' personal security and privacy during trade project allocation:
- Phone Number Withheld: When an available decorating project is broadcast to vetted trade partners in our network, the client's telephone number and exact building address are strictly withheld.
- General Scope Only: Partner notification emails display only the project scope (e.g. 2 bedrooms painting, ceiling skimming), general neighbourhood/borough (e.g. Richmond, Kensington), start date, and payout figure.
- Exclusive Assignment: Full contact information is provided solely and exclusively to the single Trade Partner who is officially assigned and confirmed for that project.
- Dedicated Trade Channel: All contractor registration dossiers and job acceptance notices are segregated and processed strictly through
partners@miracleconstructionltd.co.uk.
6 Advertising Platforms & Search Engines Compliance
To maintain full compliance with Google Ads, Meta Ads, Microsoft Bing, and search engine privacy benchmarks:
- We do not transmit sensitive personal identifiers (such as national identity numbers or identity document images) to any advertising networks.
- Conversion tracking (e.g. Google Tag Manager, Google Analytics 4) utilizes pseudonymized identifiers to measure ad campaign effectiveness and quote requests.
- Users may opt out of personalized search engine advertising at any time by configuring their Google Ad Settings or utilizing browser privacy controls.
7 Storage, Security & Encryption
We implement robust technical and organizational security measures to protect personal data against accidental loss, unauthorized access, alteration, or disclosure:
- End-to-End SSL/TLS Encryption: All communications between your browser and our website are protected by TLS 1.3 cryptographic protocols with modern cipher suites.
- Secure Server Environment: Our cPanel infrastructure utilizes hardened Apache/LiteSpeed web servers, ModSecurity web application firewalls, and isolated file permissions.
- Identity Document Encryption: Partner ID uploads (Passport / Driving Licence) are stored in access-restricted server directories with direct execution disabled via server configuration.
8 Data Retention Periods
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Invoices & Financial Records: Retained for six (6) statutory years in accordance with UK HM Revenue & Customs (HMRC) accounting requirements.
- Client Quotation Requests: Retained for twelve (12) months to allow client re-engagement and seasonal quote comparisons, after which they are purged or anonymized.
- Trade Partner Identification Records: Retained for the active duration of the subcontractor relationship and deleted twenty-four (24) months after account deactivation.
9 Your Legal Rights Under UK GDPR
As a data subject in the United Kingdom, you have enforceable legal rights regarding your personal information:
We respond to all verified statutory requests within one (1) calendar month at zero administrative fee. You also have the right to lodge a formal complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
10 Cookies & Tracking Technologies
Our website utilizes lightweight cookies to ensure seamless navigation and calculator function:
- Essential Cookies: Required to preserve project selections across our calculator tools and manage administrative sessions.
- Performance & Analytics Cookies: Aggregate anonymized metrics to evaluate page loading speed and user flow.
You can block or delete cookies via your browser settings without impacting the core functionality of calculating project estimates.
11 Data Protection Officer & Contact Channels
To exercise any of your statutory rights, submit a privacy inquiry, or request data deletion, please contact our Data Protection desk:
DATA PRIVACY & COMPLIANCE DESK
MIRACLE PAINT & CONSTRUCTION LTD • Mayfair, London W1J 6BD, UK
Telephone / WhatsApp: +44 7465 801922
Official Social / Messaging Handle: @MiraclePaintConstruction
Dedicated Privacy Email: privacy@miracleconstructionltd.co.uk
General Inquiries: info@miracleconstructionltd.co.uk