Last updated 28 September 2026
Privacy & Cookie Policy
This policy explains what personal data That Paint Guy collects, why, and your rights under UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
1. Who we are
That Paint Guy is run by Kevin, a sole trader, 9 Courtland Close, Worcester, WR3 7RB. Kevin is the data controller. Contact: thatpaintguy@hotmail.com or 07497 790288.
2. What we collect
When you use the contact form, phone, email or WhatsApp we collect what you give us: your name, email address, phone number, the address or area of the job, your message and any photos you attach.
If you accept analytics cookies, Google Analytics records which pages are visited and how the site is used. We don't use advertising cookies and we don't build visitor profiles.
3. Why we use it and our lawful basis
- To reply to your enquiry and prepare a quote — steps at your request before a contract.
- To carry out and invoice the work — performance of a contract.
- To keep records for tax and accounting — legal obligation.
- To keep the site secure and block spam — legitimate interests.
We never sell your data or use it for marketing without your consent.
4. Who we share it with
Only service providers who help run the website, each bound to protect your data:
- Website hosting and database provider (stores the site and admin content).
- Resend — delivers contact-form messages to Kevin's inbox.
- Cloudflare Turnstile — spam and bot protection on the contact form.
- Google Fonts — supplies the website's typefaces; your browser's IP address is sent to Google to load them.
- Google Analytics — counts visits and pages viewed, only if you accept analytics cookies.
Some providers may process data outside the UK; where they do, appropriate safeguards (such as the UK International Data Transfer Addendum or adequacy regulations) apply.
5. How long we keep it
Enquiries that don't become work are deleted within 12 months. Customer and invoice records are kept for 6 years to meet HMRC requirements, then deleted.
6. Your rights
You can ask to access, correct or delete your data, restrict or object to its use, or ask for a copy to move elsewhere. Contact us using the details above — we'll respond within one month.
If you're unhappy, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
7. Cookies and similar technologies
Under PECR, strictly necessary cookies don't need consent; anything else only runs if you opt in. This site uses:
| Name | Set by | Purpose | Duration | Type |
|---|---|---|---|---|
| tpg-cookie-consent-v1 | This website (browser storage) | Remembers your cookie choice | 12 months | Strictly necessary |
| Cloudflare Turnstile (cf_* / __cf*) | Cloudflare | Checks contact form submissions are from a person, not a bot | Session / up to 30 minutes | Strictly necessary |
| Sign-in session | This website (browser storage) | Keeps the site owner signed in to the admin area only — never set for visitors | Until sign-out | Strictly necessary |
| _ga, _ga_* | Google Analytics | Counts visits and pages viewed so we can understand how the site is used | Up to 2 years | Analytics — only with your consent |
Google Analytics sets no cookies until you accept analytics cookies, and you can withdraw that choice at any time using the button below.
You can also block or delete cookies in your browser settings; blocking strictly necessary ones may stop the contact form working.