Privacy Policy
Last updated: March 2026
1. Data Controller
This website (https://saferathome.co.uk) is operated by Anthony Johnson, trading as DFG Home Adaptations Directory, a sole trader registered in England.
Contact: privacy@saferathome.co.uk
ICO Registration: C1880564
2. What Data We Collect
We collect the following personal data:
- Enquiry data: name, email address, phone number (optional), postcode, service needed, and message — submitted via our enquiry form
- Installer claim data: business email address — submitted when claiming a listing
- Payment data: processed entirely by Stripe; we store only your Stripe customer ID and subscription status, never card details
- Analytics data: anonymised usage data via Google Analytics 4 (only with your consent)
- Cookie preferences: your accept/reject choice stored locally
3. Lawful Basis for Processing
We process your data under the following lawful bases (UK GDPR Article 6):
- Consent (Art. 6(1)(a)): for analytics cookies (Google Analytics 4) and for sharing your enquiry details with the relevant installer
- Contract (Art. 6(1)(b)): for processing installer subscription payments via Stripe
- Legitimate interests (Art. 6(1)(f)): for operating the directory, preventing fraud, and improving our service — balanced against your rights and freedoms
4. How We Use Your Data
- Enquiry data is shared with the relevant installer(s) to connect you with home adaptation services
- We do not sell, rent, or trade your personal data with third parties for marketing purposes
- Analytics data helps us understand how the site is used and improve it
- Installer account data is used to manage listings and process subscription payments
5. Data Processors (Third Parties)
We share data with the following processors who act on our behalf:
- Supabase Inc. (database hosting) — data stored on AWS eu-west-2 (London). Supabase Privacy Policy
- Stripe Inc. (payment processing) — payment data processed in the EEA/UK. Stripe Privacy Policy
- Resend Inc. (email delivery) — used for claim verification emails. Resend Privacy Policy
- Google LLC (analytics) — anonymised analytics via GA4, consent-gated. Google Privacy Policy
- Vercel Inc. (website hosting) — serves web pages and API routes. Vercel Privacy Policy
6. International Data Transfers
Some of our processors (Stripe, Google, Vercel, Resend) may process data outside the UK. These transfers are protected by Standard Contractual Clauses (SCCs) or UK adequacy decisions. Supabase stores data in the AWS London (eu-west-2) region.
7. Data Retention
- Enquiry data: retained for 24 months from submission, then automatically deleted
- Installer account data: retained for the duration of the account plus 12 months after closure
- Subscription/payment records: retained for 7 years as required by HMRC for tax records
- Analytics data: retained for 14 months (GA4 default), then automatically deleted by Google
- Server logs: retained for 30 days by Vercel
8. Your Rights
Under UK GDPR, you have the following rights:
- Right of access — request a copy of the data we hold about you
- Right to rectification — request correction of inaccurate data
- Right to erasure — request deletion of your data (“right to be forgotten”)
- Right to restrict processing — request we limit how we use your data
- Right to data portability — receive your data in a machine-readable format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — withdraw consent at any time (this does not affect the lawfulness of prior processing)
To exercise any of these rights, email privacy@saferathome.co.uk. We will respond within 30 days.
9. Right to Complain
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website: ico.org.uk/make-a-complaint
- Phone: 0303 123 1113
10. Cookies
We use the following cookies:
- dfg_consent (functional, 1 year) — stores your cookie preference choice. This is a strictly necessary cookie and does not require consent.
- _ga, _ga_* (analytics, 14 months) — Google Analytics 4 cookies, set only if you accept analytics cookies via our consent banner.
You can change your cookie preferences at any time by clearing your browser cookies and revisiting the site, which will re-display the consent banner.
11. Changes to This Policy
We may update this policy from time to time. Material changes will be highlighted on the website. The “last updated” date at the top of this page reflects the most recent revision.
12. Contact
For any privacy-related questions or requests, email privacy@saferathome.co.uk.