Legal
Privacy Policy
Last updated: 4 November 2026
This policy explains how KMITO - Bathroom Renovations & Interiors ("Kmito", "we", "us") collects and uses personal information when you visit this website, contact us or become a customer. We are committed to handling your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Kmito is a sole trader providing bathroom renovations and interior services in Melton Mowbray and within a 25-mile radius. For the purposes of data protection law, the sole trader operating Kmito is the data controller.
- Trader name: Jaroslaw Kmito
- Postal address: 8 Kestrel Road, Melton Mowbray, LE13 0AY
- Email: kmitointeriors@gmail.com
- Phone: 07736 222705
2. Personal data we collect
Contact form and enquiries
When you use the contact form on this website, or contact us by phone, email, Facebook or Instagram, we may collect:
- your name;
- your email address;
- your phone number (optional on the form);
- details you choose to share about your project, which may include your property location and room details.
Please avoid including sensitive information (for example about health) in your message unless it is relevant to the work.
Customers
If you go ahead with work, we may also hold your property address, quotes, invoices, payment records, project photos and correspondence.
Website visits
We use a strictly necessary record of your cookie choice and, only if you accept, analytics cookies. Our hosting provider may process technical data such as your IP address and browser type in server logs, needed to deliver the site securely. See our Cookie Policy.
3. How we use your data and our lawful bases
- Responding to enquiries and preparing quotes - steps taken at your request before entering into a contract (Article 6(1)(b)).
- Carrying out and managing work - performance of a contract (Article 6(1)(b)).
- Invoicing, accounting and tax records - legal obligation (Article 6(1)(c)).
- Website analytics - only with your consent via our cookie banner (Article 6(1)(a)); you can withdraw it any time through "Cookie Settings" in the footer.
- Keeping the website secure and working - our legitimate interests (Article 6(1)(f)).
- Showing photos of completed work on this website or social media - we will only use photos of your property with your consent (Article 6(1)(a)), and never in a way that identifies you or your address without permission.
We do not send marketing emails, sell your data or use it for automated decision-making or profiling.
4. Who we share data with
We only share personal data where necessary, with providers acting on our behalf or where the law requires. These may include:
- Email: Google (Gmail), which hosts our email account.
- Website hosting: Cloudflare provides the hosting infrastructure; Creativa Studio maintains this website.
- Contact form delivery: Cloudflare delivers the message to our Gmail inbox.
- Optional website analytics: Google Analytics 4 receives visit and interaction information only after you consent. We do not send names, email addresses, phone numbers or contact message contents to Analytics. You can stop measurement through Cookie Settings.
- Web fonts: Google Fonts, which receives your IP address when the page loads its font.
- Social media: Meta (Facebook and Instagram), if you message us there - their own privacy policies apply.
- HMRC and other authorities, where legally required.
5. International transfers
Some providers (such as Google and Meta) may process data outside the UK, including in the United States. Where this happens, transfers rely on UK adequacy regulations (such as the UK-US Data Bridge) or appropriate safeguards such as the International Data Transfer Addendum to standard contractual clauses.
6. How long we keep your data
- Enquiries that do not lead to work: 12 months from your last contact with us.
- Customer and project records: 12 months after the work is completed.
- Financial records: invoices and payment records are kept for as long as HMRC rules for sole traders require.
When data is no longer needed it is securely deleted.
7. Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict or object to certain processing, including processing based on legitimate interests;
- data portability, where processing is based on consent or contract;
- withdraw consent at any time (for example for use of project photos), without affecting earlier processing.
To exercise any right, email kmitointeriors@gmail.com. We will respond within one month. There is no charge in most cases.
8. Complaints
If you are unhappy with how we handle your data, please contact us first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
9. Security
We take reasonable measures to protect your data, including password-protected accounts and secure (HTTPS) connections to this website.
10. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page.
