Privacy Policy

1. Introduction

Welcome to Havnwright ("we", "us", "our"). We are committed to protecting your privacy and being transparent about how we collect, use, and safeguard your personal information.

Havnwright operates as a renovation planning platform (available as both a website and mobile application) providing cost estimation tools, project management features, quote comparison services, and educational resources to UK homeowners, landlords, and property professionals.

Data Controller

• Company: Havnwright LTD
• Email: privacy@havnwright.com
• ICO Registration: ZC015131

This Privacy Policy explains how we handle your personal information in compliance with:

• UK General Data Protection Regulation (UK GDPR)
• Data Protection Act 2018
• Privacy and Electronic Communications Regulations (PECR)

2. Information We Collect

2.1 Account Information

When you create an account:

• Email address (required)
• Full name (optional)
• Password (encrypted, we never see the plain text)
• Profile preferences

2.2 Project Data

When you use our project management features:

• Project name and description
• Property type (detached, semi-detached, terraced, flat)
• Property location (postcode or region for regional pricing)
• Project scope and requirements
• Budget range
• Timeline preferences
• Photos and documents you upload

2.3 Quote Information

When you use our quote comparison tool:

• Contractor quotes (PDF uploads or manual entry)
• Contractor contact details (name, company, phone, email)
• Quote line items and pricing
• Quote dates and validity

2.4 Calculator Data

When you use our cost calculator:

• Room dimensions and specifications
• Material preferences and quality tier
• Location for regional adjustments
• Generated estimates (saved to your project if logged in)

2.5 Technical Data (Automatic Collection)

• IP address (anonymized for analytics)
• Browser type and version
• Device type and operating system
• Pages visited and time spent
• Referral source
• Session identifiers

2.6 Communication Data

• Email correspondence
• Support inquiries
• Feedback and survey responses

2.7 Mobile Application Data

This Privacy Policy applies to both our website and mobile applications (iOS and Android). When you use the Havnwright mobile app, we may collect additional information:

• Device Information: Device type, operating system version, unique device identifiers, mobile network information
• Push Notification Tokens: To send you project updates, messages, and notifications (you can opt out in app settings)
• Photos and Files: When you choose to upload project photos or documents using your device camera or storage
• Location Data: Approximate location (postcode-level) for contractor matching and regional pricing - we do not collect precise GPS coordinates

Mobile-Specific Services

The mobile app uses the following third-party services:

• Firebase Cloud Messaging (FCM): For push notifications (Google Privacy Policy)
• Supabase: For authentication and data storage (Supabase Privacy Policy)
• Stripe: For payment processing (Stripe Privacy Policy)

App Permissions

The mobile app may request the following permissions:

• Camera: To capture project photos
• Storage/Files: To upload documents and photos
• Notifications: To send you updates and messages (optional)

You can manage app permissions in your device settings at any time.

App Store Data Sharing

When you download our app from the Apple App Store or Google Play Store, those platforms may collect additional information as described in their respective privacy policies. We do not control or have access to data collected by app stores.

3. How We Use Your Information

3.1 Service Delivery

• Generate cost estimates based on your inputs
• Store and manage your renovation projects
• Enable quote comparison and analysis
• Provide personalized recommendations
• Send project reports and exports

3.2 Platform Improvement

• Enhance accuracy of our cost database
• Improve regional pricing data
• Refine our estimation algorithms
• Analyze usage patterns to improve features

3.3 Anonymised & Aggregated Data

To continuously improve the accuracy of our cost estimates for all users, we anonymise and aggregate data from calculator sessions, uploaded quotes, and quote comparisons. Specifically:

• Calculator usage: When you use our cost calculator, inputs such as project type, region, property type, and size category are stored as anonymised pricing signals. These are not linked to your personal identity and are used to improve the accuracy of estimates for all users.
• Quote data: When you upload or enter contractor quotes, the pricing information (amounts, line items, labour/materials breakdown) is anonymised and aggregated to build our regional cost database. Contractor names and your personal details are never included in aggregate data.
• AI quote extraction: When you upload a quote PDF for AI analysis, the extracted pricing data (amounts, line items, project type) is anonymised and may contribute to our cost database. The original PDF is processed only for your personal use and comparison.
• Published reports: We may publish anonymised, aggregated pricing reports (such as regional cost indices or renovation trend data). These reports contain only statistical summaries and can never be traced back to any individual user, project, or contractor.

Important: Aggregated data is fully anonymised and cannot identify you. You can still exercise your right to delete your account and personal data at any time (see Section 6), though previously anonymised data that has already been aggregated into statistical summaries cannot be individually extracted or deleted as it is no longer personal data under GDPR.

3.3 Communications

• Send transaction confirmations
• Deliver newsletters (with your consent)
• Respond to support requests
• Notify you of service updates

3.5 Legal Basis for Processing

4. Data Sharing & Disclosure

4.1 Service Providers

We work with trusted third-party providers:

• Supabase: Database and authentication (EU servers)
• Vercel: Website hosting and CDN
• Stripe: Payment processing (PCI-DSS compliant), for future features
• Resend: Transactional email delivery (account confirmations, notifications)
• Anthropic: AI processing for quote extraction and chat assistance
• Google Firebase: Push notifications for mobile apps (Firebase Cloud Messaging)

4.2 What We Do NOT Do

• ❌ Sell your personal data to third parties
• ❌ Share your data for third-party marketing
• ❌ Disclose your project details publicly
• ❌ Provide your contact details to unsolicited marketers

4.3 Contractor Sharing (With Your Consent)

When our ContractorMatch feature launches, if you request quotes from contractors, we will share your project details with your explicit consent only.

5. Data Retention

6. Data Security

6.1 Technical Measures

• Encryption: TLS/SSL in transit, AES-256 at rest
• Authentication: Secure password hashing, session management
• Infrastructure: Enterprise-grade cloud hosting with DDoS protection
• Access Controls: Role-based access, MFA for team members
• Monitoring: Real-time security alerts and logging

6.2 Your Responsibility

• Use a strong, unique password
• Don't share your login credentials
• Log out on shared devices
• Report suspicious activity immediately

7. Your Rights (UK GDPR)

You have the following rights:

• Right to Access: Request a copy of your data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Export your data in machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

How to Exercise Your Rights

Account deletion: You can request account deletion directly from your account settings page.

Other requests:
Email: privacy@havnwright.com
Subject: Data Subject Request - [Your Request Type]
Response time: Within 30 days

Complaints

If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies & Tracking

We use cookies to improve your experience. See our full Cookie Policy for details.

Cookie Categories

• Essential: Required for site functionality (no consent needed)
• Analytics: Help us understand usage (consent required)
• Functionality: Remember your preferences (consent required)

9. AI Data Processing

We use AI technology to enhance our services:

9.1 Quote Extraction

When you upload a PDF quote for AI extraction, the document is processed by our AI partner (Anthropic/Claude) to extract structured data. The extracted information is used only to populate your quote comparison tool.

9.2 AI Safeguards

• PDFs are processed in real-time and not stored by the AI provider
• We do not use your data to train AI models
• AI processing is optional - you can always enter quotes manually
• Extracted data is stored securely in your account

9.3 Future AI Features

As we develop features like RenovationBuddy (AI chat), we will update this policy to explain how your data is used and protected.

10. Children's Privacy

Our services are not intended for users under 18. We do not knowingly collect data from children. If you believe a child has provided us with personal information, contact us immediately at privacy@havnwright.com.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, services, or legal requirements.

• We'll update the "Last Updated" date
• Material changes will be notified via email
• Continued use after changes constitutes acceptance

12. Contact Us

For privacy questions or data requests:

• Email: privacy@havnwright.com
• Response Time: Within 5 business days (data requests within 30 days)