Privacy policy and data protection.

When you use our bathroom designer or request a quote, we collect:

• Your name and email address (required)

• Phone number (optional)

• Isle of Man area/location for survey scheduling

• Project details such as room dimensions, style and fitting choices, notes, and the guide estimate shown

• A bathroom photo if you choose to add one, with separate choices for AI processing and post-enquiry private storage

Before any photo is transferred, your browser resizes it and removes embedded metadata on your device. The server independently validates and re-encodes it. If the optional AI feature is enabled, a photo is sent to the configured AI provider only after you tick the separate AI-processing consent box. The selected provider for this service is OpenAI; the production feature stays off unless it is explicitly enabled.

AI processing does not itself save your input photo in Manx Bathrooms storage. After an enquiry has been accepted into our database, you may separately choose to store the metadata-stripped input photo with that enquiry. The file is encrypted by the application with AES-256-GCM before it enters authenticated private Vercel Blob storage; its object path contains a keyed email hash, not your email address. An AI-generated preview is returned to your browser and is not put into this private-photo store by default.

We also process limited technical and service data:

• IP address and basic request data, used by our hosting provider for security and to deliver the site

• Short-lived pseudonymous rate-limit keys, when distributed abuse protection is configured; site code HMAC-hashes the IP address or email before sending the key to that service

• Enquiry and email-delivery data needed to send your request to the business and, where requested, send a copy to you

• Deposit status and reference data if you choose to pay an optional deposit through Stripe; payment-card details are entered with and processed by Stripe

• With optional analytics consent: page paths with query strings removed, low-cardinality funnel events, web performance measurements, and scrubbed client error diagnostics. Saved-design, admin, and payment-confirmation routes are excluded from optional page analytics.

The lawful basis depends on what you ask us to do:

Consent - We rely on explicit consent before sending your main bathroom photo to the configured AI provider for analysis or generation, and where a form asks for consent to send or follow up an enquiry.

Steps you ask us to take and contracts - We use the details you provide to respond to an enquiry, prepare for a survey or quote, administer an accepted project, and process an optional deposit.

Legitimate interests - We process limited technical data to:

• Operate and improve the website and respond to enquiries

• Prevent fraud and maintain security

• Diagnose server failures using privacy-scrubbed Sentry events. Server monitoring does not depend on the optional browser-analytics choice and is configured not to send default personal identifiers.

Legal obligations - We may need to keep or disclose limited information for accounting, tax, fraud-prevention, or other legal requirements.

We will never share your personal data with third parties for marketing purposes.

We keep enquiry and project information only for as long as reasonably needed to respond, arrange a survey or quote, administer any project you accept, resolve a dispute, and meet accounting or other legal obligations.

Photos and previews - AI processing does not persist the input photo in our photo store. If you separately consent after submitting an enquiry, the sanitized input photo is stored encrypted and privately. Access ends automatically after 30 days. Physical deletion is scheduled daily and retried if a storage provider or retention run is temporarily unavailable. The interface offers an immediate delete control after upload, and you may also request earlier deletion through /contact. OpenAI and the other providers named below may retain limited service or security records under their applicable terms.

Enquiries and email - Contact and project details may pass through Vercel and Resend so the enquiry can be received and, where requested, a copy can be sent to you.

Abuse-prevention keys - When optional distributed protection is enabled, pseudonymous rate-limit counters expire after the configured request window (currently no more than 10 minutes). The site code does not put the raw IP address or email address into those keys.

Deposits - Stripe keeps payment records under its own legal and service requirements. We receive the deposit status and reference information needed to administer the survey request.

The 30-day photo-access limit above is enforced in code, with deletion scheduled and retried separately. Final periods for enquiry, project, email, audit, accounting and legal records are still being reviewed and are not stated here as fixed promises. You can ask us to review or delete eligible personal data through /contact.

Under GDPR and the Isle of Man Data Protection Act, you have the right to:

Access - Request a copy of the personal data we hold about you

Rectification - Ask us to correct any inaccurate information

Erasure - Request deletion of your personal data

Portability - Receive your data in a machine-readable format

Withdraw consent - Stop us processing your data at any time

Object - Object to processing based on legitimate interest

To exercise any of these rights, use our contact page at /contact. We will respond within the period required by applicable law.

If you're not satisfied with how we handle your data, you can lodge a complaint with the Isle of Man Information Commissioner.

We use essential browser storage needed to provide requested features, such as keeping an in-progress or locally saved design on your device.

Optional Vercel Web Analytics, Speed Insights and client-side Sentry monitoring do not activate or transmit until you choose Accept all. The site reloads after a grant or withdrawal so optional listeners cannot remain active from an earlier choice. You can reopen the control at any time with the Privacy choices link in the footer. A choice made in another tab is also applied by reloading this site.

Before sending analytics, the site removes query strings and drops saved-design, admin and payment-confirmation routes. We do not use advertising trackers in this implementation.

Essential storage does not require consent under PECR because it is strictly necessary to provide the service you have requested.

We use a small number of service providers to run this website and respond to your enquiry. We share only the data needed for the stated purpose:

Vercel - Website hosting, request processing, and content delivery. It may process technical request data and the enquiry details that pass through the hosted website and its server functions.

Vercel Blob - Authenticated private object storage for input photos that you separately choose to store after an enquiry. Files are application-encrypted before upload; application access ends after 30 days, and physical deletion is scheduled and retried.

Neon - PostgreSQL database hosting for canonical enquiries, design evidence, consent, delivery, survey, quote and audit records.

Upstash (only when configured) - Short-lived distributed abuse-prevention counters. The site sends an HMAC-pseudonymous key rather than the raw IP address or email address.

Resend - Email delivery. It may process your enquiry details to send the owner's notification and, where you ask for one, a customer email copy.

OpenAI - The selected optional image-analysis and generation provider. Only when the feature is enabled and after explicit photo-processing consent, the main photo and relevant design instructions are sent for analysis or generation; the resulting preview is returned to your browser.

Sentry - Error monitoring in the EU region. Server events are minimized and scrubbed under our security and reliability legitimate interests; client monitoring starts only with optional analytics consent. Default PII, request headers, cookies, bodies, user objects, tags, query strings and sensitive routes are removed before send. Sentry performance tracing is disabled.

Vercel Web Analytics and Speed Insights - Optional, consent-gated page and performance measurement with sensitive routes dropped and query strings removed.

Stripe - Optional deposit processing. Stripe processes the payment details you enter and returns payment status and reference information needed to administer the deposit.

Each provider handles data under the terms and legal obligations that apply to its service. We will never sell your personal data or share it with third parties for their own marketing.