Homeowner Data Notice

> Reviewed against current UK law; under ongoing internal review. Not formal legal advice.

Last updated: 17 July 2026

This notice is provided in accordance with Article 14 of the UK General Data Protection Regulation (UK GDPR). It explains how OptitechAutomation and the trade business ("Business") whose booking page you have visited handle your personal data.

---

1. Who Receives Your Data

When you make a booking through the OptitechAutomation platform, two organisations receive your personal data:

OptitechAutomation (a UK sole trader — the personal business of Cristian Moise-Putanu, Torquay, Devon, United Kingdom) acts as a data processor on behalf of the Business. We operate the booking technology and store your booking records on the Business's behalf. The Business (the trade business whose page you are booking through) acts as the data controller for your personal data. They determine the purpose of your appointment and have the primary relationship with you as a customer.

---

2. What Personal Data Is Shared

When you submit a booking enquiry or confirm a booking, the following personal data is collected and shared:

• Full name
• Email address
• Phone number
• Property postcode (to verify service area eligibility)
• Appointment date, time, and service type
• Any additional notes you provide in the booking form

Payment card data is processed directly by Stripe and is not shared with the Business or stored on our servers.

---

3. Source of the Data

We collect this data directly from you when you complete the booking form on the Business's booking page.

---

4. Purpose and Lawful Basis

---

5. Retention Period

Your personal data is retained as follows:

• Completed bookings: 7 years from the booking date (HMRC requirement under the Taxes Management Act 1970).
• Cancelled or expired holds: 90 days, then permanently deleted.
• Enquiries not converted to bookings: 30 days.

---

6. Who Else Sees Your Data

Your data may be shared with:

• The assigned worker: name and contact details are shared with the worker attending your appointment so they can confirm the appointment and travel to your property.
• Our sub-processors: Supabase (database), Resend (email), Vercel (hosting), Stripe (payment). All are bound by Data Processing Agreements.

We do not sell your data or use it for advertising purposes.

---

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data held about you.
• Rectify inaccurate data.
• Erase your data, subject to our legal retention obligations.
• Restrict processing in certain circumstances.
• Object to processing based on legitimate interests.
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, contact us at privacy@optitechautomation.co.uk or contact the Business directly.

---

8. International Transfers

Your data is mainly stored in the European Economic Area (Dublin, Ireland). UK law treats the EEA as providing adequate protection (UK adequacy regulations under UK GDPR Article 45), so no extra paperwork is needed for that.

A few of our technology providers are based in the United States. When data goes to them, we use a lawful UK transfer mechanism: the UK Extension to the EU-US Data Privacy Framework (the "UK-US Data Bridge") where the provider is certified, or otherwise the ICO's International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses. The full list of providers and the safeguard used for each is at /legal/sub-processors.

---

9. Contact

OptitechAutomation (processor) — Cristian Moise-Putanu (sole trader)

privacy@optitechautomation.co.uk

Torquay, Devon, United Kingdom

The Business (controller)

Contact details available on their booking page.