Privacy Policy

Last updated: 27 July 2026

1. Who we are

Nottingham Homes operates an online directory that helps visitors find and contact
local businesses and tradespeople in Nottingham and the surrounding areas.

Our website address is:
https://nottinghamhomes.co.uk.

For the purposes of UK data protection law, the organisation responsible for your
personal information is:

Nottingham Homes
[Insert the legal business or company name]
[Insert the registered or business address]
Email:
info@nottinghamhomes.co.uk

2. Information we collect

The information we collect depends on how you use the website.

Enquiries, callback requests and quote requests

When you request a callback or quote, we may collect:

  • Your name
  • Your telephone number
  • Your email address
  • Your postcode
  • Your preferred callback time
  • Details of the work or service you require
  • The business you contacted
  • The date and time of your request
  • Your acknowledgement of this Privacy Policy

Business directory profiles

When a business applies to join or is added to our directory, we may collect:

  • The business name and trading category
  • The name and contact details of the business owner or representative
  • Business telephone and WhatsApp numbers
  • Business email address
  • Business address, service area and postcode
  • Opening hours and availability information
  • Business descriptions, services, photographs and profile information
  • Insurance, qualification and accreditation information
  • Business statistics, including years in business and jobs completed
  • Customer reviews and ratings

Information published on an active business profile will be visible to visitors
and search engines. Businesses should only provide contact information that they
are authorised and comfortable making public.

Business portal accounts

Active businesses may receive an account that allows them to access the Nottingham
Homes Business Portal. For these accounts, we process:

  • The account username
  • The account email address
  • Password credentials securely managed and encrypted by WordPress
  • The business profile connected to the account
  • Profile amendments submitted for approval
  • Account and security information needed to protect the portal

We do not store or email passwords in readable form. New accounts and password
resets use a secure, one-time password setup or reset link.

Changes submitted through the Business Portal are held for administrative review.
They will not appear on the public business profile unless they are approved by a
Nottingham Homes administrator.

Technical and security information

When you access the website, our hosting provider, security systems or website
software may process technical information such as:

  • Your IP address
  • Your browser type and user-agent information
  • Your device type and operating system
  • The pages you visit and the time of your visit
  • Login attempts, password-reset requests and security events
  • Referring pages and requested website addresses

We may use short-lived, one-way identifiers derived from login details and network
information to limit repeated login or password-reset attempts. These controls help
us prevent automated attacks and misuse.

3. How we use your information

We may use personal information to:

  • Provide and operate the Nottingham Homes business directory
  • Send an enquiry to the business selected by a visitor
  • Allow a business to respond to a callback or quote request
  • Create and administer business profiles and portal accounts
  • Review and approve proposed business-profile changes
  • Send account setup and password-reset emails
  • Verify information supplied by listed businesses
  • Administer customer reviews and ratings
  • Respond to questions, complaints and data-protection requests
  • Detect spam, fraud, automated submissions and unauthorised access
  • Maintain, secure and improve the website
  • Comply with our legal and regulatory obligations

We will not use enquiry information for unrelated marketing unless we have provided
appropriate information and obtained any permission required by law.

4. Our lawful bases

Under UK data protection law, we must have a lawful basis for processing personal
information. Depending on the circumstances, we rely on:

  • Contract and steps before entering into a contract:
    where processing is necessary to provide requested directory, account or
    enquiry services.
  • Legitimate interests:
    to operate and improve the directory, administer business profiles, moderate
    submitted information, respond to enquiries, prevent misuse, protect the
    website and manage disputes.
  • Legal obligation:
    where we must keep, use or disclose information to comply with the law.
  • Consent:
    where we ask for specific permission, such as for optional non-essential
    cookies or particular marketing communications.

Where we rely on legitimate interests, we consider whether the processing is
necessary and balance our interests against the rights and reasonable expectations
of the people affected.

5. Who we share information with

We may share personal information with:

  • The business selected by a visitor when submitting a callback or quote request
  • Website hosting, database, security, backup and email-delivery providers
  • Professional advisers where reasonably necessary
  • Regulators, law-enforcement bodies or other authorities where required by law
  • A purchaser or successor if the website or its operating business is sold or
    reorganised

Businesses listed on Nottingham Homes are generally independent organisations.
Once an enquiry has been passed to a business, that business may become responsible
for how it uses the information it receives. The business may provide its own
privacy information when responding.

We do not sell personal information.

6. Comments and reviews

If visitors can leave comments or reviews, we collect the information entered into
the relevant form. We may also process the visitor’s IP address and browser
user-agent information to help detect spam, fraud and misuse.

An anonymised string created from an email address, sometimes called a hash, may
be provided to the Gravatar service to determine whether the person uses that
service. You can read the

Automattic Privacy Policy
.

If Gravatar is enabled and a comment is approved, the commenter’s profile image
may be visible publicly alongside the comment.

Reviews submitted or provided for publication may display the reviewer’s name or
chosen display name, general area, rating and review text.

7. Images and media

If you upload images to the website, you should avoid uploading files containing
embedded location information, such as EXIF GPS data. Visitors may be able to
download publicly displayed images and extract embedded information from them.

Please ensure you have permission to upload and publish any image you provide,
particularly where the image identifies another person.

8. Cookies

Cookies are small files stored on your device. We may use cookies needed for
website operation, account security, login sessions and user preferences.

Comments

If comments are enabled and you leave a comment, you may be offered the option to
save your name, email address and website in cookies. These are convenience cookies
that prevent you from having to re-enter the same information. They may remain for
up to one year.

Login and account cookies

When you visit a login page, WordPress may set a temporary cookie to determine
whether your browser accepts cookies. It contains no directly identifying
information and is normally removed when you close your browser.

When you log in, cookies are used to remember your authenticated session and
display preferences. Login cookies normally last for two days. If you select
“Remember Me”, your login may remain active for up to two weeks. Logging out
removes the login-session cookies.

Non-essential cookies

If we use analytics, advertising or other non-essential cookies, we will provide
appropriate information and request consent before placing them, where required.
You can withdraw or change that consent through the website’s cookie controls.

You can also control cookies through your browser settings. Blocking necessary
cookies may prevent login or other parts of the website from working correctly.

9. Embedded content and external websites

Pages on this website may contain embedded content, including videos, maps, images
or articles supplied by another website. Embedded content may behave as though you
visited the provider’s website directly.

Those providers may collect information about you, use cookies and monitor your
interaction with their content. This may include tracking your interaction when
you are logged into an account held with that provider.

Our website may also contain links to websites operated by listed businesses and
other third parties. We are not responsible for the privacy practices of external
websites.

10. International transfers

Some service providers may process information outside the United Kingdom. Where
personal information is transferred internationally, we will use an appropriate
legal safeguard where required, such as UK adequacy regulations or approved
contractual protections.

You may contact us if you would like more information about the safeguards relevant
to your personal information.

11. How long we retain information

  • Callback and quote enquiries:
    enquiries stored by our directory are normally retained for no longer than
    12 months.
  • Public business profiles:
    profile information is normally retained while the business remains listed,
    followed by a reasonable period for administration, record-keeping and dispute
    resolution.
  • Business accounts:
    account information is retained while access is required and for a reasonable
    period afterwards where necessary for security, administration or legal claims.
  • Profile change requests:
    submitted and reviewed changes may be retained for as long as reasonably
    necessary to maintain a moderation and audit record.
  • Comments and reviews:
    approved comments, reviews and associated metadata may be retained while they
    remain relevant to the website or until removal is appropriate.
  • Security records:
    technical logs and short-lived security controls are retained according to
    security needs and the retention schedules of our service providers.

We may retain information for longer where reasonably necessary to comply with a
legal obligation or to establish, exercise or defend legal claims.

12. How we protect your information

We use reasonable technical and organisational safeguards, including:

  • Encrypted website connections where supported
  • Secure WordPress password hashing
  • One-time password setup and reset links
  • Restricted business account permissions
  • Administrative approval of proposed public-profile changes
  • Security tokens and automated-submission traps on relevant forms
  • Rate limiting for repeated login and password-reset attempts
  • Access controls for administrative information

No internet service can guarantee complete security. Businesses and other account
holders are responsible for protecting their login details and notifying us if
they suspect unauthorised account access.

13. Your data-protection rights

Depending on the circumstances and our lawful basis, you may have the right to:

  • Request access to personal information we hold about you
  • Ask us to correct inaccurate or incomplete information
  • Ask us to erase personal information
  • Ask us to restrict how information is used
  • Object to certain processing
  • Receive certain information in a portable format
  • Withdraw consent where processing is based on consent

Your right to object


You have the right to object to processing based on our legitimate interests.
You also have an absolute right to object to the use of your personal
information for direct marketing.

These rights are subject to legal conditions and exemptions. We may need to verify
your identity before responding to a request.

To exercise a right, email
info@nottinghamhomes.co.uk.

14. Complaints

Please contact us first if you have concerns about how we use your information so
that we can try to resolve the matter.

You also have the right to complain to the Information Commissioner’s Office,
the UK regulator for data protection:

https://ico.org.uk/make-a-complaint/
.

15. Automated spam detection

Comments, reviews, enquiry forms, login attempts and other submissions may be
checked using automated spam-detection and website-security tools.

16. Changes to this policy

We may update this Privacy Policy when our services, technology or legal
obligations change. The date at the beginning of the policy shows when it was
most recently updated.

17. Contact us

If you have questions about this Privacy Policy or how we use personal information,
contact:

Nottingham Homes
Email:
info@nottinghamhomes.co.uk
Website:
https://nottinghamhomes.co.uk