Privacy Policy

Last updated: 24 September 2026

This notice explains how personal data is handled when you use Interior Painting & Wall Finishing, available at https://1189.neurogena.net. It is written for people in the United Kingdom and should be read alongside the Cookie Policy and any information shown next to a project form at the point data is collected. This notice is intended to provide clear information about privacy practices; it does not replace independent legal advice.

1. Who is responsible for your personal data

The operator of Interior Painting & Wall Finishing is the data controller for personal data covered by this notice. This means the operator decides why and how personal data is processed for the operation of this informational website and for handling information submitted through its project form.

You can contact the website operator by telephone on +44 20 8050 4086 or by post at 41 Coniston Court, Kendal St, London W2 2AN, United Kingdom. Please do not include more personal information than is necessary when making a privacy enquiry.

2. Scope of this notice

This notice applies to visitors to https://1189.neurogena.net, people who submit the project form, and people who contact the operator by telephone or post about the website or a privacy matter. It covers personal data processed in connection with the website and related communications.

The website does not provide user accounts, public comments, newsletters, purchase facilities, advertising integrations or analytics integrations. If the website later introduces a feature that materially changes how personal data is used, this notice will be reviewed and updated before or when that change takes effect, as appropriate.

3. Personal data collected and where it comes from

Most personal data is received directly from you. When you complete the project form, the form collects your name, telephone number, an optional project area or postcode, and project notes. The notes may contain details you choose to provide about an interior space, such as the type of work being considered, room information, timing preferences or access considerations.

When you call or write to the operator, the information you provide may include your name, telephone number, postal address and the content of your communication. If you make a privacy request, information needed to identify you and respond safely to that request may also be processed.

Please avoid entering special category data, such as health information, or personal data about other people in project notes unless it is genuinely necessary and you have a lawful reason to provide it. The website is not designed for the routine collection of sensitive personal data.

4. Why data is used and the lawful bases

Under the UK GDPR, personal data must have a lawful basis for processing. The purpose and basis may differ depending on the context.

• Responding to a project form or direct enquiry: name, telephone number, optional area or postcode, and project notes are used to understand and respond to the enquiry. The usual lawful basis is the operator’s legitimate interests in responding to communications and managing requests initiated by visitors. Where processing is necessary for steps requested by you before entering into an arrangement, the lawful basis may instead be taking steps at your request.
• Operating and protecting the website: limited technical information may be processed where necessary to deliver pages, maintain availability, diagnose faults, prevent misuse and protect systems. This is processed on the basis of legitimate interests in maintaining a secure and functional website.
• Meeting legal obligations and handling disputes: relevant information may be retained or disclosed where necessary to comply with a legal obligation, establish, exercise or defend legal claims, or respond to a valid request from an authority. The lawful basis will depend on the particular requirement, including compliance with a legal obligation or legitimate interests.
• Privacy requests and record keeping: information is used to verify, manage and respond to requests about personal data. This is necessary to comply with UK GDPR obligations and to demonstrate responsible handling of requests.
• Consent-based processing: if the operator asks for consent for a particular optional activity, data will be processed for that activity only after consent has been given. Consent is not assumed merely because you visit the website or submit an enquiry.

The website is not described as using personal data for advertising, behavioural advertising, newsletter distribution or analytics integration.

5. Whether you must provide personal data

Providing information through the project form is voluntary. However, a name, telephone number and enough project information to understand the request are needed to give a meaningful response through that channel. The project area or postcode is optional. If you choose not to provide the required form information, the operator may be unable to respond to the form submission or understand what it concerns.

You may instead choose to raise a general matter by telephone or post. When making contact, provide only the information that is relevant to your question or request.

6. Cookies and similar technologies

Cookies and similar technologies can store or access information on a device. Interior Painting & Wall Finishing does not use advertising or analytics integrations. The website may nevertheless require limited technical storage or processing where it is strictly necessary for a communication requested by a visitor or for the operation of a website function.

The Cookie Policy explains the current approach to cookies and similar technologies. If non-essential cookies or similar technologies are introduced, they should not be placed or accessed unless the required consent has been obtained under the Privacy and Electronic Communications Regulations (PECR), except where an applicable legal exception applies. You can also manage many cookies through your browser settings, although blocking necessary technologies may affect website functionality.

7. Processors, recipients and legally required disclosures

Personal data is not sold. It is not shared for advertising or analytics integration purposes. Access is limited to people who need the information for the purposes described in this notice.

Where the technical operation of the website or form involves a hosting provider or another technology supplier, that organisation may process limited personal data on the operator’s behalf as a processor. Processors should only be permitted to process data under documented instructions and with appropriate confidentiality and security obligations. The operator may also share data with professional advisers where necessary, or with public authorities, courts, regulators, insurers or other recipients where disclosure is required by law or necessary to protect legal rights.

Information is not disclosed simply because someone asks for it. Any disclosure is assessed against the applicable legal basis, the scope of the request and the need to protect personal data.

8. International transfers

The information available for this notice does not identify a routine international transfer of project-form data. However, a transfer outside the United Kingdom can occur if a relevant hosting or technology provider processes information from another country.

If such a transfer applies, the operator should use a transfer mechanism recognised under UK data protection law, such as an adequacy regulation or the UK International Data Transfer Agreement or Addendum, together with any supplementary safeguards that are appropriate to the circumstances. Information about an applicable transfer can be requested using the contact details in this notice.

9. How long information is kept

Personal data is kept only for as long as reasonably necessary for the purpose for which it was collected, including responding to an enquiry, maintaining an appropriate record of communications, resolving a concern, meeting legal obligations or dealing with potential legal claims. The operator does not publish a fixed retention period for every category because the appropriate period depends on the nature of the enquiry, whether further communication is needed, and any legal or record-keeping requirement that applies.

Project-form information should be reviewed when it is no longer needed for the enquiry or a related legitimate purpose. Privacy request records may be kept for as long as necessary to show that the request was handled properly and to meet applicable accountability obligations. Data that is no longer needed should be securely deleted, anonymised or otherwise removed from active use, unless retention is required or justified by law.

10. Security and data minimisation

The operator aims to use organisational and technical measures that are appropriate to the nature of the information and the risks involved. These measures may include limiting access to people with a genuine need to know, using secure administration practices, keeping systems and access arrangements under review, and avoiding collection of information that is not needed for the stated purpose.

No method of transmission or storage can be guaranteed to be completely secure. You should therefore take care not to send unnecessary sensitive information through the project form or during communications. If the operator becomes aware of a personal data breach that is likely to result in a risk to people’s rights and freedoms, it will be assessed and handled in accordance with applicable legal requirements.

11. Your UK data protection rights

Subject to the conditions and exceptions in the UK GDPR, you may have the right to request access to your personal data, ask for inaccurate information to be corrected, request erasure, ask for processing to be restricted, object to certain processing, and receive personal data you provided in a portable format where the right applies. You may also ask for information about the processing of your data.

To exercise a right, call +44 20 8050 4086 or write to 41 Coniston Court, Kendal St, London W2 2AN, United Kingdom. State that your request concerns personal data and describe the action you want taken. The operator may need reasonable information to verify identity before acting, particularly where the request concerns information that could affect another person’s privacy. Verification information will be used only for that purpose.

Requests are normally answered within one month. Where a request is unusually complex or numerous, the response time may be extended where permitted by law; if this happens, you should be told why and informed of the extended timeframe. A request may be refused or limited only where the law allows this, and an explanation will be provided where required.

12. Consent, objections and direct marketing

Where processing relies on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before consent was withdrawn. You can communicate withdrawal by telephone or post using the contact details above.

You have the right to object to processing based on legitimate interests where your particular circumstances give grounds for doing so. You also have an absolute right to object to direct marketing. Interior Painting & Wall Finishing is not described as carrying out direct marketing, but this right remains relevant if such processing were ever introduced.

13. Complaints to the Information Commissioner’s Office

If you are concerned about how your personal data has been handled, you are encouraged to contact the operator first so that the matter can be considered. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection. The ICO can provide information about making a complaint and the circumstances in which it may investigate.

14. Children’s privacy

This website is intended for a general audience and is not designed to knowingly collect personal data from children. A child should not submit personal information through the project form without the involvement of a parent or guardian. If the operator becomes aware that personal data has been collected from a child in circumstances where it should not have been provided, the information will be considered for deletion or other appropriate handling, subject to any legal requirement to retain it.

15. Automated decision-making and profiling

The website does not use personal data to make solely automated decisions, including profiling, that produce legal effects or similarly significant effects on individuals. Project-form information is intended to be considered by a person when a response is made.

16. Changes to this notice

This notice may be updated to reflect changes in website features, personal-data practices or applicable law. The date at the beginning of this page shows when it was last updated. Material changes will be presented through an updated version of this notice on https://1189.neurogena.net. You should review this page from time to time so that you remain informed about how personal data is handled.