Privacy policy

Privacy notice draft for review. Before online enquiries are enabled, the retention policy and service-provider arrangements must be confirmed.

Who handles your information

I handle information supplied through enquiries to Thomas Property Services. Contact thomaspropertyservicesuk@gmail.com or telephone 07410 928465 with questions about your information.

What I collect and why

The enquiry forms collect your name, at least one contact method, the enquiry topic and your message or description of the work. Postcode, timeframe and additional details are optional. I use this information to answer your enquiry, discuss suitability and prepare a quotation where requested, including steps you request before entering a contract. This website does not use enquiry details for marketing.

How enquiries are processed

The system is designed to use Cloudflare Pages and Turnstile for hosting and spam protection, Resend for transactional email and the published Gmail mailbox for correspondence. Submission is unavailable until configured. With an email address, an automatic acknowledgement is requested. Telephone-only enquiries do not receive one.

Cloudflare processes technical information for spam protection. The application uses a salted IP-address hash for short-lived attempt counters. D1 stores random request identifiers, salted request fingerprints, processing states and timestamps for duplicate prevention. Names, contact details and enquiry text are not stored in that database.

Retention

Application attempt counters become eligible for deletion within 20 minutes and duplicate-prevention records after seven days. Expired records are removed when the enquiry service is next used; physical deletion may be later if the service is inactive. Provider logs and backups may follow different schedules. Enquiry content is held by the email services and business mailbox. Before activation I must confirm a specific retention period or documented criteria for unsuccessful enquiries and accepted-work records, provider retention and any international-transfer safeguards.

Your choices and rights

You can telephone or email instead. Depending on the circumstances, you may ask for access, correction, erasure or restriction, and may have rights to object or receive information in a portable format. Contact the business using the details above. You can also raise a concern with the Information Commissioner’s Office.

Analytics and external links

Optional first-party usage statistics, when enabled, count page views and call-button clicks only after you choose to allow them in the footer. They do not include enquiry text, contact details, query strings, advertising identifiers or visitor profiles. Your choice is stored on this device for six months and can be withdrawn using the same footer controls. Accepted enquiries can also be counted separately on the server after provider acceptance, without adding their personal details to the aggregate statistics. Daily totals become eligible for deletion after 180 days; deletion occurs when the statistics service is next used. Short-lived salted IP hashes help rate-limit the statistics endpoint. Cloudflare processes these requests; no separate advertising or analytics provider is used. Facebook is linked rather than embedded; external services have their own privacy practices. Additional tracking will need a review before activation.