How we handle project enquiries and protect this website.
Pre-launch review: the form is not live. Retention arrangements and provider transfer safeguards still need confirmation.
The Home Shop Ltd is the data controller for enquiries made to this business. Company number: 04164274, registered in England and Wales. Our trading address is Marlborough House, 2 Chesil Street, Winchester, SO23 0HU. Our registered office is The Charmwood Centre, Southampton Road, Bartley, Southampton, Hampshire, SO40 2NA. For privacy enquiries, contact andy@thehomeshopltd.co.uk or call 01962 622 633.
Our enquiry form asks for your name, email address, project postcode, project type, current stage, preferred contact method and a description of your plans. A telephone number is optional unless you ask us to contact you by telephone. Please avoid including sensitive personal information or information about other people that is not needed for your enquiry. Our website and security providers may process your IP address, browser and device information, request time and security-check results.
We use your enquiry details to respond, discuss your requirements, arrange a free on-site consultation and, if requested, prepare a quotation. For individuals requesting our services, our lawful basis is taking steps at your request before entering into a contract. For business representatives, we rely on our legitimate interest in responding to relevant business enquiries. We also rely on legitimate interests to protect the website against spam and misuse. Where records must be retained to meet legal duties, we rely on legal obligation. An enquiry does not subscribe you to marketing.
The proposed website setup uses Cloudflare for hosting and Turnstile spam protection, Postmark for sending enquiry notifications and acknowledgements, and Google Workspace for our business email. These providers process information needed to supply their services. Project details are delivered to The Home Shop; the customer acknowledgement contains a reference rather than repeating your project description. We may also disclose information to professional advisers or authorities where necessary to meet legal obligations or establish, exercise or defend legal claims. We do not sell enquiry information.
Our technology providers may process information outside the UK. Before enabling the live form, we will verify the applicable processing locations, provider agreements and international-transfer safeguards, and identify them in this notice. This review is not yet complete. Contact us using the details above if you have questions about the proposed handling of your information.
For an enquiry that does not become a project, we propose keeping the correspondence while the enquiry remains active and afterwards only where needed to address outstanding questions or a complaint. If you become a client, relevant correspondence becomes part of the project record. Retention is then determined by the services provided, legal and accounting obligations, insurance requirements and the need to handle potential claims. Provider message and security logs have their own configured retention settings. The business retention arrangements and provider settings must be confirmed before launch.
Providing enquiry information is voluntary, but we need the required fields to understand and respond to your request. If you prefer, call us rather than using the form. Depending on the applicable lawful basis and circumstances, you can request access, correction, erasure, restriction or portability of your personal information, and object to processing based on legitimate interests. Contact us using the details above. You can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint/. We do not use enquiry information for automated decisions producing legal or similarly significant effects.
This site does not include advertising trackers, embedded maps or analytics scripts. The enquiry form is designed to use Cloudflare Turnstile to distinguish genuine visitors from automated requests. When enabled, Turnstile processes browser and device signals and may use technologies needed for its security function. We do not enable optional tracking or Turnstile pre-clearance in the supplied configuration. The final deployed site and any host-added technologies must be checked before launch; this notice will be updated if additional technologies are introduced.
This notice describes the prepared Cloudflare, Postmark and Google Workspace workflow. The live form is not enabled. When the HTML is opened locally, the form validates sample details in your browser but sends or saves nothing. Provider transfer safeguards and retention arrangements remain subject to confirmation. Last updated: 25 October 2026.