Privacy notice

This notice explains how HYP DESIGN LTD handles personal data when you use this website, send us an enquiry or become a customer. If we start using personal data in a new way, we update this notice first.

Who we are

HYP DESIGN LTD is the controller of your personal data, which means we decide how and why it is used. We are a company registered in England and Wales, company number 12130466.

Registered office: 45 St. James Road, London, E15 1RL. This is the address on the company register. It is not where we work or visit customers.

For privacy questions and requests, email hypdesign19@gmail.com or call 07990 351312.

What we collect

When you send an enquiry: your name, phone number, email address and postcode, the service and type of property, your message, when you would like the work done and how you prefer us to contact you. If you add photographs or use the sketch tool, we also receive the photographs and the sizes and choices you made.

Photographs can carry hidden details from your camera, such as where a picture was taken. We keep your original file with your enquiry and use a copy without those details to view it.

If you become a customer: the address of the job, notes from the site survey, the quotations and invoices we send you, your payments and our messages with you. When you open a quotation or visit link we send you, we record that it was opened and anything you send through it, such as a question about a quotation.

When you visit the site, our server receives your IP address, the page you asked for, the time, your type of browser and device, and the page you came from. Every website server receives this.

We do not use advertising tools, social media plugins, embedded maps or videos, outside font services or visitor statistics.

Why we use it

To reply to your enquiry, arrange a site survey and prepare a quotation. Our legal basis is taking steps at your request before a contract. Ticking the box on the enquiry form confirms you have seen this notice.

To carry out the work, invoice you and keep records of what you paid. Our legal basis is our contract with you, and our legal duty to keep accounting records.

To keep the website secure, stop misuse of the enquiry form, follow up an enquiry or quotation you have not answered, and, after a finished job, ask whether you would like to leave a review. Our legal basis is our legitimate interests in running our business. You can tell us at any time that you do not want follow ups or review requests, and we will stop.

Who helps us

Our website and its database run on a server rented from Hetzner Online GmbH in Nuremberg, Germany. The person who builds and looks after the website for us can reach the data in order to run the site.

We also use service providers to send email, look up postcodes and help us prepare quotations. Our business email is a Gmail mailbox provided by Google. The website's code, and the photographs and reviews it shows, are stored with GitHub.

If you contact us on WhatsApp, WhatsApp (part of Meta) handles your messages under its own terms. A WhatsApp link on this site passes its prepared message to WhatsApp as soon as you open it, before you press Send.

The reviews section shows reviews from our Google Business Profile. When you scroll to it, our server asks Google for them, and the reviewers' profile pictures load straight from Google, so Google receives your IP address and type of browser. We do not store these reviews.

We do not sell your data and we do not share it for anyone else's marketing.

Where your data is handled

The website, its database and its backups are in Germany, which UK law treats as giving adequate protection. Some providers, such as Google and GitHub, may handle data in the United States. Where they do, we rely on the protections UK law requires, such as the UK and US data bridge or approved contract terms.

How long we keep it

Enquiries that do not lead to work: we remove your personal details 24 months after the enquiry is closed.

Photographs added to the enquiry form but never sent are deleted after 24 hours.

Customers: we keep your details while we work for you and while any guarantee on the work applies. Accepted quotations, invoices and payment records are kept for six years after the end of the financial year they belong to, as UK tax rules require.

Records that stop misuse of the enquiry form hold only scrambled copies of your IP address, email and phone number, and are deleted after two days. Server logs are kept for up to 30 days.

Backups: copies of the website's data are kept for up to 30 days, so something we delete can stay in a backup for that long.

Reviews and photographs on the site

The site shows reviews from customers with the name they gave. We show them because they help people decide whether to use us. If you gave us a review and want it changed or taken down, tell us and we will remove it from the site.

Reviews from Google appear with the name and picture the reviewer uses on Google. You can change or delete your own Google review on Google at any time, and the site then shows it as Google does.

The site shows photographs of our finished work. If a photograph shows you or your home and you want it taken down, tell us and we will remove it.

How we protect it

The site uses HTTPS, so what passes between your browser and the site is encrypted. Only the people who need it can reach your data, and the owner's area of the site is protected by a password.

Your rights

You can ask for a copy of the personal data we hold about you, and ask us to correct it, delete it or limit how we use it. You can object to our use of it where we rely on legitimate interests. Where the right applies, you can ask for data you gave us to be passed to another provider. Contact us using the details above. We reply within one month.

If you are unhappy with how we handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would like the chance to put things right first, but you do not have to contact us before you complain.

Changes to this notice

This version took effect on 27 October 2026.