Privacy Policy

Last updated: October 2026

1. Who we are

MouldPros operates the website at www.mouldpros.co.uk. We are the data controller for personal data processed through this website.

For data protection queries, contact us at privacy@mouldpros.co.uk or via our contact form.

2. Data we collect and why

DataPurposeLawful basis
Name, email, phone (optional), property postcode, description of the problemQuote request sent to the 1–3 specialists you choose, and our follow-up emails to you about itConsent — given when you send the request; you can withdraw it at any time (see section 3)
Name, email, business detailsProvider listing applicationContract — necessary to process your application
Name, email, messageContact form submissionLegitimate interests — to respond to your query
Name, review textPublished review of a specialistLegitimate interests — providing accurate public information
Email addressNewsletter subscriptionConsent — you opted in
Payment detailsPromoted listing purchaseContract — to process payment via Stripe
Analytics data: pages viewed, how you arrived, approximate location, browser and device (only if you accept analytics cookies)Understanding how the site is used and which pages lead to quote requestsConsent — you opt in with the cookie banner; withdraw any time via “Cookie settings”
IP address (for quote requests we store only a one-way hash, not the address itself)Security, fraud prevention, limiting repeat or automated requestsLegitimate interests — protecting the site

3. Quote requests and who sees your details

  • You choose. You decide how many specialists (1, 2 or 3) get your request, and you see their names before anything is sent.
  • What each specialist gets. We email each one your first name, postcode and description of the problem. Your full name, email address and phone number are available to them only inside their secure MouldPros dashboard.
  • Our lawful basis is your consent, which you give when you send the request. You can withdraw it at any time from the link in your confirmation email — you can close your request, or withdraw it and have your details deleted.
  • After that, they’re responsible. Once a specialist has your details they are responsible for them under their own privacy policy. If you withdraw, specialists who have already viewed your request may hold their own copy — contact them directly to ask them to delete it.
  • We never sell your data or share it with anyone you didn’t choose.
  • Please don’t include health information in your description. Specialists only need to know about the property.
  • We email you a confirmation and, if you haven’t heard from anyone after two working days, one follow-up asking whether you’d like to close the request or send it to another specialist.

3a. Awaab’s Law updates

  • What you get. If you sign up on one of our Awaab’s Law pages, or tick the box on the quote request form, we email you one briefing when a new phase of Awaab’s Law is about to start and a round-up of new guides once a month. Nothing else.
  • Our lawful basis is your consent. We store your email address, the page or form you used and the wording you saw. Nothing is sent until you press the button in the confirmation email we send to that address (a double opt-in); if you don’t, the address is deleted after 30 days.
  • Unsubscribe at any time with the link at the bottom of every email, your mail app’s own unsubscribe button, or by replying “unsubscribe”. It stops all our marketing email to that address; emails about a quote request you make are part of the service and still arrive.
  • Ticking the box on a quote request is separate from the request itself. It never changes who sees your request, and you can withdraw one without the other.

4. Third-party services

We use the following services which process your personal data on our behalf:

  • Supabase — Database and authentication hosting. Privacy policy.
  • Resend — Sending our emails and receiving replies to them (replies are processed automatically, not read by a person). Privacy policy.
  • Stripe — Payment processing. Privacy policy.
  • Vercel — Website hosting. Privacy policy.
  • Google reCAPTCHA — Bot protection on forms. Privacy policy.
  • Google Analytics — Site analytics, only if you accept analytics cookies. Privacy policy.
  • Vercel Web Analytics — Cookie-free page view counts. Privacy policy.

5. How long we keep your data

  • Quote requests and enquiries — 2 years from submission, unless you delete them sooner using the link in your confirmation email.
  • Provider account data — for as long as your account is active. Deletion removes all associated data.
  • Contact messages — 1 year from submission.
  • Reviews — indefinitely as public record, unless you request removal. If you tell us who you hired after a quote request, your star rating and any comment are published on that specialist’s listing with your first name; withdrawing the request deletes them.
  • Awaab’s Law updates sign-ups — until you unsubscribe. If you never press the link in the confirmation email, we delete the address 30 days after we sent it. After you unsubscribe we keep the address on a list of people we must not email, so we don’t email you again.

6. Cookies and analytics

We use a small number of strictly necessary cookies: one that remembers your cookie choice, and, for specialists and the site administrator only, sign-in cookies. Google reCAPTCHA sets its own cookie on forms to guard against bots — see Google’s privacy policy. We do not use advertising cookies.

Analytics are off unless you accept. If you choose “Accept analytics”, we load Google Analytics 4 (provided by Google Ireland Limited and Google LLC). It sets cookies (_ga and _ga_3YF2RHXQG8) and records the pages you view, how you arrived, your approximate location, and your browser and device type, so we can see which pages are used and which lead to quote requests. If you accept, we also keep the first page you landed on and where you came from in your browser’s session storage and send them with a quote request, so we can see which pages lead to requests; if you don’t accept, that isn’t stored, and a request carries only the page it was sent from and the website you came from.

We do not send Google your name, email, phone number, postcode or message. Google acts as our processor for this data and, under Google’s own terms, also uses some of it for its own purposes as a controller; see how Google uses information from sites that use its services. Our lawful basis is your consent, which you can withdraw at any time using “Cookie settings” in the footer; withdrawing stops Google Analytics and deletes its cookies from your browser.

Separately, and whatever you choose in the cookie banner, we keep our own count of how the quote form is used: which page showed it, whether a postcode was entered and whether a request was sent, with a rough source (search, direct, a link). It uses no cookie and stores nothing on your device, and it never contains your postcode, name or anything you type. To stop one visit being counted twice we keep, for up to two days, a one-way scrambled code made from your connection, your browser and that day’s date; it cannot be linked from one day to the next and is then deleted. The counts are kept for 13 months. We do not record this if your browser sends Do Not Track or Global Privacy Control. Our lawful basis is our legitimate interest in understanding whether the site works.

We also use Vercel Web Analytics, which counts page views without cookies. A full list of every cookie and storage key, with durations, is on our cookie policy.

7. Your rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

  • Access — Request a copy of the personal data we hold about you.
  • Rectification — Ask us to correct inaccurate or incomplete data.
  • Erasure — Ask us to delete your personal data (right to be forgotten).
  • Restriction — Ask us to restrict processing in certain circumstances.
  • Portability — Receive your data in a structured, machine-readable format.
  • Object — Object to processing based on legitimate interests.
  • Withdraw consent — Where processing is consent-based, withdraw at any time.

To exercise any right, email privacy@mouldpros.co.uk. We will respond within 30 days.

8. Complaints

You have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or 0303 123 1113.

9. Changes to this policy

We may update this policy from time to time. The date at the top will reflect any changes. Significant changes will be communicated by email to active users.