Privacy Policy
Effective Date: 11 March 2026 | Last Updated: 11 March 2026
RemodelingBox ("we", "us", "our"), operated by Sarah Mitchell, is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect information about you when you visit remodelingbox.com and interact with our content and forms.
This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are (Data Controller)
The data controller responsible for your personal data is:
- Name: Sarah Mitchell (trading as RemodelingBox)
- Website: remodelingbox.com
- Contact: privacy@remodelingbox.com
We will respond to data-related enquiries within 30 days of receipt.
2. What Information We Collect
We may collect the following categories of personal data:
- Contact information: Your name and email address when you complete our quiz lead form or contact form.
- Usage data: IP address, browser type, pages visited, time spent on the site (collected via cookies and analytics tools).
- Communication data: Messages you send us via the contact form.
- Consent records: Records of your consent to receive communications from us.
We do not collect sensitive personal data (such as financial account details, health information, or government ID numbers).
3. Lawful Basis for Processing
Under UK GDPR, we process your data on the following lawful bases:
- Consent — when you submit our lead form or contact form and tick the consent checkbox, you consent to us processing your name and email to send you the requested guide and related information. You may withdraw your consent at any time.
- Legitimate Interests — for analytics and site performance monitoring, where such processing does not override your rights and freedoms.
- Legal Obligation — where we are required to process data to comply with applicable law.
4. How We Use Your Information
We use the information we collect to:
- Send you the personalised guide or resource you requested via our quiz form.
- Respond to enquiries submitted through our contact form.
- Improve the content and performance of our website.
- Comply with our legal and regulatory obligations.
We will not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
5. Sharing Your Information
We may share your data with the following third parties:
- Formspree (form processing): We use Formspree (formspree.io) to process form submissions. Formspree stores submission data on servers which may be located outside the UK. Formspree is subject to appropriate data processing agreements. Please review Formspree's Privacy Policy for details.
- Analytics providers: Anonymised usage data may be shared with analytics services to help us understand site traffic. No personally identifiable information is shared with analytics providers.
We do not sell, rent, or trade your personal data to any third party.
6. International Data Transfers
Some of our third-party service providers (including Formspree) may process data outside the UK or European Economic Area. Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the Information Commissioner's Office (ICO), to maintain the protection of your data.
7. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of Access: You may request a copy of the personal data we hold about you.
- Right to Rectification: You may ask us to correct inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data, subject to certain legal exceptions.
- Right to Restrict Processing: You may ask us to limit how we use your data in certain circumstances.
- Right to Data Portability: You may request that we provide your data in a structured, machine-readable format.
- Right to Object: You may object to processing based on legitimate interests at any time.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at privacy@remodelingbox.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been handled improperly. Visit ico.org.uk for more information.
8. Cookies
We use cookies to improve your experience on our website. Cookies are small text files stored on your device by your browser.
We use the following types of cookies:
- Strictly necessary cookies: Essential for the basic functioning of the website (e.g. session management). These do not require your consent.
- Analytics cookies: Used to understand how visitors interact with our site. These are only placed with your consent.
- Preference cookies: Remember your cookie consent choice.
Under the Privacy and Electronic Communications Regulations (PECR), we will only place non-essential cookies after you have accepted them via our cookie banner. You may decline non-essential cookies at any time.
You can also manage or delete cookies through your browser settings at any time. Note that disabling cookies may affect the functionality of certain parts of the website.
9. Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy:
- Lead form submissions: retained for up to 24 months from the date of submission, or until you withdraw consent, whichever is earlier.
- Contact form messages: retained for up to 12 months.
- Analytics data: retained in anonymised form for up to 26 months.
10. Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All form data is transmitted via HTTPS (encrypted connection). However, no transmission over the internet is 100% secure, and we cannot guarantee absolute security.
11. Children's Privacy
Our website is not directed at children under the age of 13, and we do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.
13. Contact Us
For any questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact:
- Email: privacy@remodelingbox.com
- Response time: Within 30 days of receipt
To lodge a complaint with the UK data protection authority: ico.org.uk/make-a-complaint/