This Privacy Policy explains how GlossyQuote ("we", "us", "our") collects, uses, and protects your personal information when you use our mobile application and website at glossyquote.com.
1. Who We Are
GlossyQuote is a trading name operated in England and Wales. We provide a platform that connects customers seeking trade estimate information with local tradespeople (professionals).
Contact: glossyquote@gmail.com | 07378 825257
For the purposes of UK GDPR and the Data Protection Act 2018, we are the data controller for the personal information we collect through our services.
2. Information We Collect
Information you provide directly
- Account information: name, email address, phone number, and password when you register.
- Profile information: trade category, location, portfolio photos, and business details (for professionals).
- Job details: property type, room sizes, job description, and postcode when you request an estimate or post a job.
- Payment information: payment is processed by Apple App Store or Google Play Store. We do not store card details directly.
- Communications: messages you send us via email, phone, or WhatsApp, and in-app messages.
- Feedback: reviews and ratings you submit.
Information collected automatically
- Device information: device type, operating system, app version, and unique device identifiers.
- Usage data: features used, screens viewed, and actions taken within the app.
- Location data: approximate location (postcode/region) to show relevant local tradespeople, if you grant permission.
- Log data: IP address, timestamps, and error reports for technical troubleshooting.
3. How We Use Your Information
- To create and manage your account.
- To provide cost estimates based on your job details.
- To connect customers with relevant local tradespeople.
- To process payments for estimates and credit purchases via the App Store or Google Play.
- To send service-related notifications (new leads, messages, account updates).
- To personalise your experience and improve our service.
- To prevent fraud and abuse, including IP-based trial eligibility checks.
- To comply with our legal obligations under UK law.
- To respond to your enquiries and provide customer support.
Legal bases (UK GDPR)
- Contract performance: providing the service you signed up for.
- Legitimate interests: improving the app, preventing fraud, and sending service updates.
- Legal obligation: complying with applicable UK law.
- Consent: marketing communications (where we ask for your permission).
4. Sharing Your Information
We do not sell your personal data. We share it only in the following circumstances:
- Between users: when a customer posts a job, relevant professionals can see the job location (postcode area) and description. Your full contact details are not shared unless you choose to share them.
- Service providers: we use the following third-party services:
- Supabase – database and authentication hosting (EU data centres).
- RevenueCat – subscription and in-app purchase management.
- Apple / Google – app distribution and payment processing.
- OpenAI / Anthropic – AI-powered estimate generation (job details are processed; no personal identifiers are shared).
- Legal requirements: if required by law, court order, or to protect our rights and safety.
- Business transfer: if GlossyQuote is acquired or merged, your data may transfer to the new entity under the same privacy protections.
5. Data Retention
We retain your personal data for as long as your account is active or as needed to provide our services. Specific retention periods:
- Account data: retained until you close your account, then deleted within 30 days.
- Transaction records: retained for 7 years to comply with UK tax and accounting requirements.
- Job and estimate data: retained for 2 years after creation, then anonymised or deleted.
- Support communications: retained for 2 years.
6. Your Rights
Under UK GDPR, you have the following rights:
- Access: request a copy of the personal data we hold about you.
- Rectification: ask us to correct inaccurate or incomplete data.
- Erasure ("right to be forgotten"): request deletion of your data where there is no legal basis to retain it.
- Restriction: ask us to limit how we use your data in certain circumstances.
- Portability: receive your data in a structured, machine-readable format.
- Object: object to processing based on legitimate interests.
- Withdraw consent: where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, contact us at glossyquote@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
You can also export your data directly from the app: go to Profile → Export My Data.
7. Data Security
We take the security of your data seriously and implement appropriate technical and organisational measures including:
- Encrypted data transmission (HTTPS/TLS).
- Secure authentication via Supabase Auth with hashed passwords.
- Row-level security (RLS) policies to ensure users can only access their own data.
- Rate limiting on all API endpoints to prevent abuse.
- Regular security reviews of our codebase.
While we take every precaution, no system is 100% secure. If you suspect a security issue, please contact us immediately at glossyquote@gmail.com.
8. International Transfers
Our primary infrastructure (Supabase) is hosted within the European Economic Area. Some third-party providers (e.g. RevenueCat, Apple, Google) may process data in the United States. Where data is transferred outside the UK, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions).
9. Children's Privacy
GlossyQuote is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. Cookies and Tracking
Our mobile app does not use cookies. Our website (glossyquote.com) may use essential cookies for basic functionality. We do not currently use advertising or tracking cookies. For more options, see our Privacy Choices page.
11. Push Notifications
We may send push notifications for new leads, messages, and important account updates. You can disable these at any time in your device's notification settings or within the app under Settings → Notifications.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by sending a notification via the app or by email. Continued use of GlossyQuote after changes are posted constitutes acceptance of the updated policy.
13. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
- Email: glossyquote@gmail.com
- Phone / WhatsApp: 07378 825257
- Website: glossyquote.com
Support hours: Monday–Friday 9am–6pm | Saturday 10am–4pm | Sunday Closed