Privacy Policy

Who we are

Sweet Homes is a trading name of Brunon Rogowski Ltd, a residential refurbishment contractor based in Edinburgh, Scotland. We take your privacy seriously and are committed to handling your personal data responsibly.

We are the data controller for the information described in this notice, which means we decide what information is held and why.

If you have any questions about this policy or how we handle your data, please get in touch:

Registered name: Brunon Rogowski Ltd, trading as Sweet Homes
Company number: SC700883, registered in Scotland
Registered office: 15 Calton Road, Edinburgh, EH8 8DL
Email: hello@mysweethomes.co.uk
Phone: 0131 210 0066
Website: mysweethomes.co.uk

What data we collect

When you use the contact or consultation forms on this website, we collect the information you provide, which may include your name, email address, phone number, property address, and details about your project.

If you allow analytics cookies, our own enquiry-source cookies record the pages you visit and a broad source category. These records do not contain your name or contact details. If you submit an enquiry, the route is attached to it and becomes linked to the personal information you provide.

With the same permission, we use Google Analytics 4 to measure visits, whether pricing and FAQ headings appear on screen, clicks on enquiry and contact links, enquiry-form starts, broad form-error categories and received enquiries. Google receives the public page address, the referring website’s origin, browser and device information, approximate location and a randomly generated analytics identifier. Google receives your IP address to provide the service and derive location; Google states that Analytics does not log or store individual IP addresses. If the address you land on carries a Google Ads click reference or campaign tags (including the search phrase an advert was shown for), these are passed to Google Analytics with that page view when analytics is allowed; nothing else from the address is sent.

Section and action events use fixed labels. A section heading appearing on screen does not establish that its content was read, and a contact-link click does not establish that a call or email occurred. We do not send enquiry contents, field values, contact addresses or numbers, uploaded files, filenames, error-message text or enquiry reference numbers to Google Analytics. Analytics stays off until you agree. Rejecting it does not prevent you from using the website or sending an enquiry.

Where you allow analytics, Google Analytics also tells our Google Ads account that an enquiry was received and which advert or search brought you to the website. No enquiry contents or contact details are shared.

If you allow Advertising cookies, Google Ads, Pinterest and Meta receive the address of the page you visit, browser and device information, your IP address and an identifier stored in their cookies. They also learn whether you sent an enquiry, but not what it said. We use this to measure our adverts and to show our adverts to people who have visited this website.

When you send an enquiry, the form also sends how you reached the page you sent it from (for example a search engine, another website or a campaign link, with any campaign tags in that page’s address), so we can see which of our adverts and listings bring enquiries. If that address carries a Google Ads click reference (gclid, gbraid or wbraid), the form sends that too, and if you become a customer we may share it with Google Ads so it can measure which of our adverts lead to work. This does not use cookies: it is read from the page address when you press send and nothing is stored on your device.

Like every website, ours runs on a web server that keeps a record of each page request: the page address, the website that linked to it, your IP address, your browser type and the time. When you send an enquiry, we also look in those records for your visits over the previous 30 days, matched by IP address and browser type, and keep with your enquiry the source of your first and most recent visit (for example a Google advert, a search engine or another website), the page each visit began on, when it happened and any Google Ads click reference, for the same purposes. Separately, we use the same records to count, in totals that do not name or identify anyone, how many enquiries each source brings; every enquiry is included in those totals.

If you reject analytics cookies, none of the enquiry-source details described above is sent with your enquiry or kept with it.

Why we collect it

We use the information you submit through our forms to:

Respond to your enquiry
Prepare and send you a quotation for your project
Manage your project if you go ahead with the work
Keep records required for accounting and legal purposes

Lawful basis for processing
We process your personal data on the following bases:

Contract performance: to prepare your quotation and manage your project if you proceed.
Legal obligation: to keep accounting and tax records as required by HMRC.
Legitimate interests: to respond to enquiries, to see which of our adverts and listings bring enquiries and tell Google Ads which advert clicks led to work, and to maintain records of past projects for up to 12 months where no project results.
Consent: to use optional analytics and advertising cookies, and to send you news or offers where you have given separate, explicit permission.

If you would like to be kept up to date with news or offers from Sweet Homes, we will only do so with your permission.

How we store your data

Form submissions are filed on our website host’s servers in London, in a private area of our hosting account that cannot be reached from the web. A copy of each submission goes to our business mailbox. If the usual route fails, that copy is sent through our host’s own mail server instead, and any copy that could not be sent is tried again automatically.

We take reasonable precautions to keep your data secure, including using an SSL certificate on this website and maintaining access controls on our admin systems.

Cookies

This website uses cookies. A cookie is a small text file stored on your device when you visit a website. Here are the cookies we use:

Enquiry attribution cookies (sh_entry_path, sh_entry_source, sh_first_seen_at, sh_previous_path, sh_last_money_path, sh_last_path and sh_ad_click): If you allow Analytics cookies, these remember the first page, a broad source category, the previous page and the last service page visited for up to 30 days. If you arrived from one of our Google adverts or a tagged link, sh_ad_click also keeps the advert click reference and campaign tags from that first link (including the search phrase the advert was shown for), so we can tell which adverts lead to enquiries and, if you become a customer, report the result back to Google Ads against that click reference. Other query strings and full external referrer addresses are not stored. If you send an enquiry, the route is stored with that enquiry so we can see which pages generated it.
Consent cookie (sh_consent): Remembers the choice you made on the cookie banner for 365 days, so you are not asked again on every page. It is set whichever option you choose, including refusal.
Google Analytics cookies (_ga and _ga_*): Only after you allow analytics, these distinguish browsers and record visits and the section and action events described above for our website stream. We configure them to last up to 30 days without extending their expiry on each visit.

This integration does not enable advertising storage, Google signals or advertising personalisation. We ask for an updated analytics choice before enabling the section and action measurement described here. Withdrawing analytics consent removes accessible optional cookies and stops further measurement by this integration. It does not remove information already received by Google.

This website uses a cookie consent banner to obtain your permission before setting any non-essential cookies. You can change your preferences at any time using the cookie settings link in the site footer. The cookie policy lists every cookie with its purpose and duration.

We may share personal information with trusted third parties where necessary to provide our services or comply with legal obligations. This includes:

Insurance companies
Professional or legal advisors
Financial or fraud investigation authorities
Relevant regulatory authorities
External auditors or inspectors
Warranty and guarantee providers
Professional consultants
Suppliers, subcontractors and tradespeople working on your project
Technology providers, including our email and document storage, website hosting, accounting software, and AI assistant tools
Organisations we are legally required to share information with

Where you allow analytics, Google also processes the visit and event information described above to provide Google Analytics. Google’s data-processing terms and information about Analytics data explain its processing.

We share your information only with the organisations listed above, Google for consented website analytics, and Google, Pinterest and Meta for consented advertising.

Transfers of Personal Information Outside the UK

Some of the organisations that help us run our business are based outside the United Kingdom, or store information on servers outside it. This includes our email and document storage provider, our accounting software, and the AI assistant tools we use to help draft correspondence and organise project records.

Google Analytics may process analytics information outside the United Kingdom, including in the United States. Google describes its applicable transfer safeguards, including adequacy frameworks and standard contractual clauses, in its international data-transfer information.

Google, Pinterest and Meta may process advertising information outside the United Kingdom, including in the United States, under the transfer safeguards each describes in its own terms.

Our website is hosted by a United Kingdom company, and the servers holding it are in London. Where that host’s group companies outside the United Kingdom help support the service, the safeguards set out below apply.

Where we transfer your personal information outside the UK, we make sure it is protected by one of the safeguards recognised under UK data protection law. Depending on the organisation and the country, this will be:

a decision by the UK government that the country provides an adequate level of protection for personal data, or
a contract with the receiving organisation on terms approved by the UK Information Commissioner, being either the International Data Transfer Agreement or the UK Addendum to the European Commission’s standard contractual clauses.

The provider, contractual role and transfer arrangement depend on the particular AI service and account. Google Workspace customer-data processing is covered by the applicable Workspace agreement and Cloud Data Processing Addendum. Personal subscriptions and training opt-outs do not, by themselves, establish equivalent business-processing terms for other services.

You can ask us which of these safeguards applies to any particular transfer, and for a copy of it, by contacting us using the details at the top of this notice.

Artificial Intelligence and Automated Tools

We use Google Workspace, including Gmail and Gemini, and AI software from Anthropic and OpenAI to support our business. The information processed depends on the task, the service and the information supplied to or made accessible through it.

Our rule for personal Claude Max and ChatGPT Pro or Codex workflows is to use public, synthetic or properly anonymised information. Identifiable enquiry or project information requires a separately assessed business workflow, with its purpose, necessary data, account, applicable terms, access and retention recorded. A training opt-out does not by itself establish an agreement for processing personal information on our behalf.

For qualifying Google Workspace use, Google states that customer content is not used for generative AI model training outside the organisation without permission. Our checked business account has Workspace Business Plus. Gemini within Gmail and other Workspace apps permits user-selected conversation-history retention. The separate Gemini app is configured to retain conversation history for 18 months. These histories are separate from emails and documents in which information is saved.

For the accounts checked, Anthropic’s general model-improvement preference is off. OpenAI’s general training setting and Codex’s separate environment-training setting are also off. These settings do not set a deletion deadline for every service record.

OpenAI states that saved Codex chats remain until deleted and that deletion from its systems is normally completed within 30 days, subject to its stated exceptions. Anthropic states that deleted Claude conversations are normally removed from backend storage within 30 days, with separate rules for feedback, safety, legal and dispute records. These statements do not establish the lifecycle of every local coding file or provider service record.

If you would prefer that we do not use AI assistance in handling your enquiry or project, tell us and we will handle it manually instead.

How long we keep your data

When your enquiry leads to a project, we keep your contact and project information for six years after completion under our retention policy. Company accounting records are kept for at least six years from the end of the last company financial year they relate to, and longer where required. Other legal retention needs depend on the record and circumstances.

If your enquiry does not progress to a project, we will keep your information for up to 12 months in case you get in touch again, after which it will be deleted.

If you have given us permission to contact you with news or offers, we will keep your details for marketing purposes until you ask us to stop.

AI conversation histories, local working files, exports and backups can have different retention and deletion arrangements. A cleanup of one location does not erase all copies. Provider-held records follow the applicable service settings and deletion rules described above, including their exceptions. Reviewed information saved into an email or final project record follows that record’s retention policy.

Our Google Analytics property currently has event-data retention set to 2 months and user-data retention set to 14 months. These settings apply to user-level and event-level analytics records; aggregate reporting can have a different retention period. Cookie expiry and analytics retention are separate: the cookies described above last up to 30 days.

Once a retention period ends and we have no other reason to hold the information, we delete it or anonymise it.

Your rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access: You can ask us what data we hold about you and receive a copy of it.
Right to rectification: You can ask us to correct any information that is inaccurate or incomplete.
Right to erasure: You can ask us to delete your personal data. We will do so unless we are required by law to keep it.
Right to portability: You can ask us to provide your personal data in a structured, machine-readable format.
Right to object: You can object to us processing your data for direct marketing purposes at any time.
Right to restriction: You can ask us to restrict how we process your personal data in certain circumstances, for example while a dispute about accuracy is resolved.

Some of these rights are limited where the law requires us to keep a record. We cannot delete a tax or accounting record on request, for example, because HMRC requires us to hold it. Where that is the position we will tell you plainly, say which record it applies to, and say when the period ends.

To exercise any of these rights, please contact us at hello@mysweethomes.co.uk.

How to make a complaint

If you are unhappy with how we have handled your personal data, you have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK regulator for data protection matters.

We are registered with the Information Commissioner’s Office under reference ZB506672.

ICO website: ico.org.uk
ICO helpline: 0303 123 1113

We would appreciate the opportunity to address any concerns before you contact the ICO, so please do get in touch with us first.

Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page. This policy was last updated on 15 October 2026.