Privacy & Cookies
Painting with Vision · Updated 12 October 2026
1. Who is responsible for your information
The data controller is Vasyl Ilchuk, a sole trader trading as Painting with Vision.
For privacy enquiries and to exercise your rights, contact [email protected].
2. Information we receive
When you contact us by telephone, WhatsApp or email, we may receive your name, contact details, the property address or postcode, a description of the work, photographs and working correspondence. When carrying out an order, we also process information needed to issue invoices and record payments.
Please provide only the information and photographs necessary for your enquiry.
3. How and why we use your information
- To answer enquiries, prepare quotes, agree and carry out work: to take steps towards entering into a contract or to perform a contract.
- To keep tax records: to comply with legal obligations.
- To resolve complaints and disputes and protect our rights: our legitimate interest in running and protecting the business.
We do not sell personal information, create a marketing database or use contact details for advertising messages. We do not carry out profiling or automated decision-making about clients.
Without the necessary contact details and information about the work, we may be unable to prepare a quote or carry out an order.
4. Who has access to information
On the business side, only Painting with Vision has access to clients’ working correspondence and photographs.
Our accountant may receive invoices and information needed for tax reporting, but does not have access to working correspondence or photographs.
We use WhatsApp and Gmail for communication. These service providers process information under their own terms and privacy policies. Information may be provided to HMRC or other authorised bodies where necessary to meet lawful requirements.
5. WhatsApp and retention
We use the standard WhatsApp application and do not use iCloud or Google Drive chat backups.
Working correspondence and photographs are kept only for as long as needed to deal with an enquiry, carry out an order and resolve related questions or claims. We regularly review whether information is still needed and delete information that is no longer necessary.
Invoices and other documents and messages needed for tax records are generally kept for at least five years after the 31 January submission deadline for the relevant tax year. Relevant records may be retained for longer where there is a lawful reason, including an ongoing enquiry or dispute.
6. Hosting, cookies and third-party services
This website is hosted on Cloudflare Pages. Cloudflare provides website hosting, delivery and security services.
Hosting and security providers may process your IP address, browser and device information, request times, requested pages and security signals to deliver the website, diagnose faults and prevent abuse. Our lawful basis for processing technical information for these purposes is our legitimate interest in providing a secure, reliable website. Providers retain technical records according to their service, security and legal requirements, as described in their privacy policies.
We have not added advertising trackers, visitor analytics, contact forms or embedded social-media widgets to this website. Our page code does not set cookies or use local storage. Depending on the security features enabled, Cloudflare may use security cookies and browser checks.
Security cookies
Where the relevant Cloudflare security features are used, these cookies may be issued:
- Security verification cookie (Cloudflare, where issued): records the result of a security check to avoid repeating it unnecessarily. Its expiry depends on the applicable Cloudflare security settings.
These security technologies are used to protect access to the site, rather than for advertising. You can delete or block cookies in your browser, although blocking security cookies may result in repeated checks or prevent access.
Further information is available in Cloudflare’s cookie documentation and the Cloudflare Privacy Policy.
WhatsApp and email links open external services or your chosen application. Those providers’ privacy and cookie policies apply when you use their services.
Our service providers may process information outside the United Kingdom, including in the United States. Depending on the provider and transfer, the safeguards described in their policies include UK adequacy arrangements or contractual safeguards, such as standard contractual clauses with the applicable UK provisions. Details of the safeguards and how to obtain further information or copies are available in the provider policies linked above, the WhatsApp Privacy Policy and Google’s information on international data transfers. You can also contact us using the details in this notice.
7. Your rights
Where legally applicable and within the limits provided by law, depending on the circumstances, you may request access to your personal information, correction, erasure, restriction of processing or portability.
You may also object to processing based on legitimate interests on grounds relating to your particular situation.
These rights are not absolute. For example, we may be required to retain documents for tax purposes.
To make a request, use the contact details above. You also have the right to complain to the UK data protection regulator, the Information Commissioner’s Office (ICO).
8. Changes to this notice
If the way we process information changes, we will update this notice and its revision date.