Who is responsible
Gabriel Raksimowicz, trading as GR Plastering, is the data controller and a sole trader. Business correspondence address: 31 Richmond Avenue, London, UB10 9BQ, United Kingdom. Contact info@grplastering.co.uk for privacy questions or write to this address. Customer support and complaints can also go to support@grplastering.co.uk.
What we use and why
- Enquiries and quotes: your name, email or phone number, postcode, project description and any photographs or messages you choose to send. We use these to reply and prepare a quote, taking steps at your request before a contract.
- Booked work: contact and property details, agreed scope, scheduling, invoices, payments and relevant work photographs. We use these to perform our contract, meet tax/record-keeping duties, and handle guarantees or disputes. Keeping proportionate evidence of work and resolving disputes are our legitimate interests.
- Website security: IP address, browser/device information and verification results help protect the contact service from spam and abuse. Our legitimate interest is keeping a reliable, safe enquiry service. Our own temporary abuse records use hashed identifiers, not plain IP addresses or enquiry text.
Give only the details needed for your project. Please avoid financial account details, health information and photographs of other people. Without the required contact fields we cannot arrange a callback. We do not use your enquiry for advertising profiles or automated decisions with legal or similarly significant effects.
How contact works
The quote tool prepares a brief in your browser. Choosing email or WhatsApp passes it to that app; you review and send it there. Reloading the page clears the quote fields. Callback requests are emailed to both gabrielraksimowicz@grplastering.co.uk and info@grplastering.co.uk. Gabriel is responsible for monitoring and responding. The website does not keep a separate database of callback messages, but received emails and any subsequent job records are retained as described below.
Who helps us provide the service
Hostinger provides website hosting and business email. Cloudflare Turnstile checks contact requests and processes technical information such as IP address and browser signals. Cloudflare also uses these signals to improve bot detection as an independent data controller, relying on its legitimate interests. If you choose WhatsApp or your email app, that provider also processes the message under its own privacy terms. We share only what is needed with people working on your job, such as an agreed subcontractor or skip supplier, and with professional advisers or authorities where necessary. We do not sell enquiry data.
Some providers operate internationally. Where personal information is transferred outside the UK, the applicable provider arrangements use an adequacy decision or contractual safeguards such as the UK Addendum or IDTA, as appropriate. Ask us for information about relevant safeguards. See Hostinger's privacy policy, Cloudflare's privacy policy and the Turnstile privacy addendum for their processing and safeguards.
How long we keep it
- Enquiries that do not become jobs: normally deleted within 12 months of the last meaningful contact.
- Completed jobs: essential quote, contract, invoice and relevant work records normally kept for six years after completion or final payment, whichever is later. Tax records are kept for at least five years after the relevant 31 January filing deadline. A live claim, investigation or other legal requirement may justify a longer period; we keep only what is needed and review it.
- Photos and routine messages: reviewed with the enquiry or job record and removed when no longer needed. Publishing a photo or testimonial needs separate permission, which you may withdraw for future use.
- Contact protection: hashed attempt and request records expire within 24 hours and are removed during cleanup on the next contact-service request. The essential session cookie normally lasts until you close your browser. Hosting and verification providers also retain their own operational/security records under their policies.
These are our handling rules for the business inboxes and files; deleting a website form does not delete a message you already sent through another service.
Cookies and verification
The site has no advertising trackers or analytics cookies. It uses an essential secure session cookie named gr_contact when you open the protected contact service. This ties verification to your session and helps prevent forged requests. Cloudflare Turnstile loads when you choose a protected contact option, using technical signals to distinguish people from automated abuse. You can email us instead if you prefer not to use it. We do not load optional tracking that needs consent. Your browser's cookie controls may prevent protected contact from working.
Your rights and concerns
Depending on the circumstances, you can request access, correction, deletion, restriction or a portable copy of your information, and object to processing based on legitimate interests. Where we rely on consent, you can withdraw it without affecting earlier lawful use. Some information must be retained for legal duties or claims. Email info@grplastering.co.uk; we normally respond within one month and explain any lawful extension. You can complain to the Information Commissioner's Office through the ICO complaints service whether or not you contact us first. Last updated 13 October 2026.