Privacy Policy

Last updated: 23 June 2026.

1. Who We Are

This website is operated by Lovelyflushing (the data controller). We are responsible for deciding how your personal data is held and used.

2. The Data We Collect

We collect only the data needed to respond to you and to operate this website:

• Contact data: the name, email address, and message you provide through the contact form.
• Consent records: a record of the consent you give, including the date and time.
• Technical data: limited information such as cookie preferences stored in your browser, and, where you allow analytics, aggregated usage information.

3. How and Why We Use Your Data

We process personal data for the following purposes and legal bases:

• To respond to enquiries sent through the contact form. Legal basis: your consent and our legitimate interest in answering messages.
• To operate and secure the website. Legal basis: our legitimate interest in providing a safe, functional service.
• To understand site usage through optional analytics. Legal basis: your consent.

4. Cookies

We use strictly necessary cookies to keep the site working, and optional analytics and marketing cookies only where you consent. You can manage your choices at any time through the cookie banner. For full details, please read our Cookie Policy.

5. Sharing Your Data

We do not sell your personal data. We may share it with trusted service providers (such as hosting and email providers) who act on our instructions, and with authorities where required by law. Any providers are bound by appropriate data protection obligations.

6. International Transfers

Where data is transferred outside the United Kingdom or European Economic Area, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses.

7. Retention Periods

We keep personal data only for as long as necessary:

• Contact enquiries: up to 24 months after our last correspondence, then deleted.
• Consent records: for as long as needed to demonstrate compliance, typically up to 24 months.
• Analytics data: retained in aggregated form for up to 14 months.

8. Your Rights

Under the UK GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your data, the right to data portability, and the right to withdraw consent at any time. To exercise any of these rights, please contact us using the details above.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk.

9. How We Protect Your Data

We apply appropriate technical and organisational measures, including encryption in transit (HTTPS), access controls, and regular reviews, to help protect your data against unauthorised access, loss, or disclosure.

10. Changes to This Policy

We may update this policy from time to time. The latest version will always be published on this page with a revised date.