Privacy & GDPR

AirConVents Ltd is the data controller for any personal information collected through this website. We arrange professional 7-inch vent installations by connecting customers with local installers.

For privacy questions or to exercise your data rights, email info@airconvents.com.

We collect only the information needed to arrange and record your installation:

• Name, phone number and email address
• Installation address and access notes
• Number of rooms and chosen package
• Payment amount and Stripe transaction reference

We do not collect or store your full payment card details. Card payments are handled by Stripe.

UK GDPR says we must have a lawful basis to process personal data. We rely on:

• Contract — to arrange your installation, contact you about dates, and pass your details to the assigned installer.
• Legal obligation — to keep records for tax and accounting purposes.
• Legitimate interests — to respond to enquiries and improve our service.

We keep booking and payment records for 3 years after your installation is completed, after which they are securely deleted. This supports our accounting, tax and customer-service needs.

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete information
• Ask us to delete your data in certain circumstances
• Object to or restrict how we process your data
• Withdraw consent at any time (where consent is the basis)
• Complain to the Information Commissioner’s Office (ICO)

To make a request, email info@airconvents.com. We will respond within one month.

We use trusted third parties to host the site and process payments. They only access data as needed to provide their services:

• Lovable / Supabase — website hosting, database and backend infrastructure.
• Stripe — payment processing. Stripe acts as a separate data controller for payment data.
• Local installers — we share your name, address, phone number and booking details with the installer assigned to your job.

We do not sell your data or share it for marketing purposes.

We do not use analytics, tracking or non-essential cookies. We only use the essential cookies and local storage required for the site to function and for Stripe to process payments securely.

Security

We use industry-standard hosting and encryption practices to protect your data. Payment information is handled by Stripe under PCI-compliant infrastructure. However, no online service can guarantee absolute security, and we encourage you to use strong passwords and keep your devices secure.

Changes to this notice

We may update this privacy notice from time to time. The latest version will always be available on this page.