Privacy Policy

1. Who We Are

LoftNow is an online loft conversion feasibility assessment service. This privacy policy explains how we collect, use, and protect your personal data in compliance with UK GDPR and the Data Protection Act 2018.

2. Data We Collect

We collect the following data:

• Email address — provided at checkout for payment receipts and report delivery.
• Postcode — used to look up planning constraints via postcodes.io and planning.data.gov.uk.
• Property details — type, storeys, dimensions. Used only to generate your report.
• Payment data — processed entirely by Stripe. We never see or store your card details.

3. How We Use Your Data

• To generate your feasibility report.
• To process your payment via Stripe.
• To look up planning constraints for your postcode.
• To send you your report and payment confirmation by email (if applicable).

We do not use your data for marketing without your explicit consent. We do not sell your data to third parties.

4. Third-Party Services

We share data with:

• Stripe — payment processing. See Stripe's privacy policy.
• postcodes.io — postcode geocoding (postcode only, no personal data).
• planning.data.gov.uk — planning constraint lookup (coordinates only, no personal data).
• Cloudflare — hosting and basic analytics (anonymised, no tracking cookies).
• Google Analytics — website usage measurement, and only if you accept analytics cookies. Google may process this data outside the UK. See Google's privacy policy.

5. Data Storage

Property data you enter is stored locally in your browser (via localStorage) and is not transmitted to our servers except when generating a report or processing payment. We do not maintain a database of user assessments. Once you close your browser or clear data, your assessment is removed.

6. Cookies

Essential cookies are required for the service to function (theme preference) and are always set. We also use Cloudflare analytics, which sets no tracking cookies and collects no personal data.

Analytics cookies (Google Analytics) are optional and are set only after you accept them. Until you do, Google Analytics runs without cookies and cannot identify you or track you between visits. Declining costs you nothing — every part of the assessment works either way. We set no advertising or remarketing cookies without your acceptance, and your choice is remembered for six months before we ask again.

You can change your mind at any time:

7. Your Rights (UK GDPR)

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to processing of your data.
• Data portability — receive your data in a structured format.

To exercise these rights, contact us at hello@loftnow.co.uk.

8. Data Retention

Payment records are retained by Stripe as required by financial regulations. We retain email addresses only for the duration necessary to deliver the service. You may request deletion at any time.

9. Contact

For privacy-related queries: hello@loftnow.co.uk