Privacy Notice
Last updated: 10 November 2026 · Version 2.1
The short version
- You can use the visualiser without telling us who you are.
- We only pass your details to an installer if you specifically ask us to. That is a separate choice, and saying no does not stop you using anything else.
- Your photograph is used to build your visualisation and is then deleted. We keep the image we generate, not your original.
- Installers pay us when we pass on an enquiry you asked us to send. You pay nothing. We do not sell your data to anyone else, and we do not send marketing.
- You can ask us for a copy of your data, or ask us to delete it, at any time.
This summary is here to help. The full notice below is what applies.
This notice explains what we do with your personal data when you use Facet Pro to visualise your home and get an indicative estimate. It covers your rights under the UK GDPR and the Data Protection Act 2018.
Who we are
FACETPRO LTD (“we”, “us”), trading as Facet Pro, is the data controller for the personal data described in this notice. That means we decide how and why it is used, and we are responsible to you for it.
- Registered company number: 17346500
- ICO registration number: ZC262351 (see the ICO register)
- Registered address: Crown House, 27 Old Gloucester Street, London WC1N 3AX
- Contact for anything in this notice: privacy@facetpro.co.uk
- We have not appointed a Data Protection Officer, as we are not required to under Article 37 UK GDPR. privacy@facetpro.co.uk reaches the person responsible for data protection here.
What we collect
| Data | Where it comes from |
|---|---|
| A photograph of your property | You upload it |
| Your design choices, the measurements our software estimates from the photo, and the indicative costing produced | Generated as you use the site |
| Your name, email address and postcode | You type them in only if you choose to have your design emailed to you or ask for quotes. Saving with a code or a link needs none of them |
| Your phone number | You type it in, only if you ask us to arrange quotes |
| Your answers about the project — for example whether you own the home, when you would like the work done, and what kind of house it is | You choose them in the quote steps, only if you ask us to arrange quotes |
| A record of the choices you made on the form — the exact wording you agreed to, the version of it, and the date and time | Recorded when you tick a box, and again if you later change your mind |
| If you asked for quotes: whether each installer took your enquiry on, when a survey was booked, the price they quoted and whether that was after a survey, and whether you went ahead and at what price | The installers who received your enquiry tell us |
| Technical data such as your IP address and browser type, and which of our guide pages or which advert brought you to the site | Collected automatically by our hosting and by the limits we apply to prevent abuse, and from the link you followed to reach us |
We do not ask for special category data — things like health, religion or political opinions — and we have no use for it. Please avoid including any in what you send us. If a photograph of the front of your home happens to show something of that kind, we do not use it, look for it or record it.
Do you have to give us this?
No. None of it is a legal requirement, and you can use the visualiser without giving us anything at all.
- To save a design and have the pack emailed to you, we need your email address.
- To arrange quotes from installers, we need your name, your postcode so we can find installers near you, and a way for them to reach you.
If you would rather not give us these, nothing stops you using the visualiser — you simply will not get the emailed pack or any quotes.
What happens to your photograph
Your photo is sent to the AI providers listed below so they can identify the windows, doors, roof and walls, and generate the visualisation. Before your photo leaves your phone or computer, your browser removes the location and other hidden details a camera stores in it, and our server removes them again when it arrives. Once your visualisation has been generated, your original photograph is deleted from our systems. The AI providers delete their copies on their own schedules: Replicate within an hour, and Anthropic within 30 days. For 7 days we keep a fingerprint of it — a short code worked out from the photo, not an image — and the measurements taken from it, so that the same photo always gives you the same estimate while you use Facet Pro. What we keep beyond that is the generated image and your design choices, so that you can come back to your design and so an installer can see what you asked for.
Your photograph is never published, never used by us to train AI models, and never used in our marketing. We have asked the AI services we use to confirm in writing that they do not train on it either, and will say so here once they have.
House numbers, house name signs, number plates and people's faces are pixelated in every picture we make before it is stored, shared or put in your project pack. One request all the same: please try not to upload a photo that shows other people, or a neighbour's property, or a visible number plate. If one does, tell us and we will remove it.
Why we use it, and our lawful basis
| What we do | Our lawful basis |
|---|---|
| Producing your visualisation and indicative estimate | Our legitimate interests (Article 6(1)(f)) in providing the service you have asked us for, and in running our business |
| Emailing you your design pack | Consent (Article 6(1)(a)) — the box you tick asking us to send it |
| Passing your design and contact details to installers so they can quote | Consent (Article 6(1)(a)) — the separate box you tick asking us to |
| Comparing our estimates with the prices installers quote and agree, so we can make the estimates more accurate and, once there are enough, say how accurate they are — only as totals, never about you | Our legitimate interests (Article 6(1)(f)) in giving homeowners estimates they can rely on |
| Replying to you if you contact us about your enquiry | Our legitimate interests (Article 6(1)(f)) in answering someone who has got in touch |
| Keeping the service secure and preventing abuse | Our legitimate interests (Article 6(1)(f)) in protecting the service and the people who use it |
| Keeping records of consent, and of complaints and requests | Our legal obligations under data protection law (Article 6(1)(c)), and our legitimate interests in being able to show we have complied |
Where we rely on legitimate interests, we have weighed our interests against your rights and concluded that the processing is necessary, limited to what it needs to be, and not something you would find unexpected or intrusive. You can ask us for our assessment.
We do not send marketing emails. If that ever changes we will ask you to opt in first, and you will be able to opt out of every message.
The choices you make on the form
There are two separate boxes when you save a design. Both are optional, both start unticked, and you can use Facet Pro whether or not you tick either.
- Email me my design pack. We send you your visualisation and estimate. Nobody else sees it.
- Get quotes from installers. We pass your details and design to installers so they can contact you.
You can change your mind about either at any time by emailing privacy@facetpro.co.uk or using the link in any email we send you. Withdrawing is as easy as agreeing was. It does not make anything we did beforehand unlawful, and if your details have already gone to an installer we cannot undo that — but we will tell the installer you have withdrawn, and you can ask them to delete your details too.
Who we share it with
We do not share your personal data with anyone for their own marketing, and we do not sell it. The one thing we are paid for is an introduction you asked for: installers pay us when we pass on your enquiry. You pay us nothing, it does not change your estimate, and an installer cannot pay to be recommended.
- Installers — up to three installers covering your area, so they can quote for your job, named in the box before you tick it. Only if you have ticked that box, and only the installers it named. They receive your name, postcode, email address and phone number, your design, your estimate, your answers about the project and the readiness score described under “AI, and decisions made about you” — and nothing else. We name them in the box before you agree, confirm them in the email we send you, and you can ask us at any time. Each installer is separately responsible under data protection law for what it does with your details, and we require each of them, in writing, to use your details only to quote for your enquiry, never to add you to a marketing list, never to pass your details on, and to delete them within 90 days if you do not go ahead with them, unless you agree otherwise. They may contact you by email, by telephone and by text message about your enquiry.
- Anthropic — AI vision, which identifies the parts of your home in the photo.
- Replicate — generates the visualisation from your photo. Replicate hosts the model it does this with, FLUX.1 Kontext, which is made by Black Forest Labs. Replicate is responsible to us for that arrangement under its own contract.
- Resend — delivers our emails to you.
- Railway — hosts the site and stores enquiries. Data centre region: United States (US West).
- Professional advisers, insurers and authorities, where we are required by law to disclose, or need advice.
Everyone in that list other than the installers handles your data only to provide their service to us. We are putting in place a written agreement with each of them that meets Article 28 UK GDPR, and we will update this notice as each one is completed.
Transfers outside the UK
Some of the providers above are based in the United States, so your data leaves the UK. Where that happens we make sure it stays protected to UK standards:
| Provider | Where | How the transfer is protected |
|---|---|---|
| Anthropic | United States | The UK Addendum to the EU Standard Contractual Clauses, in Anthropic’s data processing addendum |
| Replicate | United States | We are putting a data processing agreement in place with Replicate, and will name the safeguard that protects this transfer here once it is signed. |
| Resend | United States | The UK Extension to the EU–US Data Privacy Framework, and the UK Addendum to the EU Standard Contractual Clauses in Resend’s data processing addendum |
| Railway | United States (US West) | We are putting Railway’s data processing agreement in place, and will name the safeguard that protects this transfer here once it is signed. |
Installers are UK businesses and your details are not sent overseas for that purpose. You can ask us for a copy of the safeguards we rely on, and we will send them to you.
How long we keep it
| What | How long |
|---|---|
| Your original uploaded photograph | Deleted from our systems once your visualisation has been generated. The AI providers delete their copies within an hour (Replicate) or 30 days (Anthropic) |
| A save code, and the design choices it brings back — no photograph, no name | 30 days |
| A fingerprint of your photograph and the measurements taken from it — not the photograph itself | 7 days, so the same photograph always gives you the same estimate |
| Your design, visualisation and estimate, where you did not ask for quotes | 6 months |
| Your enquiry, where it was passed to installers, and what the installers told us about quoting for it | 24 months from your last contact with us |
| Records of the choices you made and any withdrawal | 6 years, so we can show what you agreed to and when |
| Records of a complaint or a request you made to us | 6 years |
| Technical and security logs | 12 months |
Deletion is automatic for everything the site itself holds — your design, your enquiry, the consent records, the technical logs and the photograph fingerprint. At the end of each period those records are removed rather than archived. Complaints reach us by email rather than through the site, so those we keep and delete by hand to the same six years. If you ask us to delete something sooner, we will.
How we keep it safe
- Everything you send us travels over an encrypted connection, and enquiries are stored in a database that our hosting provider encrypts at rest.
- Access to enquiries is restricted to the people who need it, and every access is logged.
- Each installer has their own account, and can only see the enquiries that were actually sent to them — not anybody else's, and only ones where you asked us to share your details. Every time an enquiry is viewed through the site, we log which account viewed it and when. We do not yet require two-factor authentication on those accounts, and will update this notice when we do.
- We check every supplier's security and data protection terms before we use them, and we keep those checks under review.
- Enquiries are backed up every day, and we test that we can restore them.
- If something goes wrong and your data is at risk, we will tell the Information Commissioner within 72 hours where we are required to, and we will tell you directly if there is a high risk to you.
Cookies and similar technologies
We do not use analytics cookies, advertising cookies, or any cross-site tracking. Nothing on this site follows you anywhere else, and there is no cookie banner because there is nothing to consent to.
Apart from the photo hand-over described below, the only things we store on your device are kept in the browser's session storage rather than in cookies, and both are deleted when the browser tab closes: a sign-in token that keeps installers signed in to the installer area while they are using it, and, when you open the inside view of your windows, the window style, colour and number of windows you chose, so that page can show them. Neither holds your name, your photo or anything that identifies you. Both are exempt from the consent requirement under regulation 6(4) of the Privacy and Electronic Communications Regulations 2003, because the service you asked for cannot work without them.
One more, only when you choose a photo from one of our cost guides: the guide hands your photo to the design page by keeping it in your browser's own storage (IndexedDB) for the moment it takes the next page to open. The design page takes it in and deletes it straight away, and a photo left there for more than ten minutes, for example because the page never opened, is deleted the next time you open the design page and is not used. Clearing your browser’s site data for facetpro.co.uk removes it too. It is never sent anywhere by that step; it is sent to us only when the design page uploads it, exactly as if you had chosen it there. It is exempt from the consent requirement for the same reason: you asked for your photo to be used.
In the Facet Pro app for iPhone and Android, some things are kept on your phone, by the app itself rather than by us. When the app makes a picture of your house, it keeps a copy of that picture on your phone, together with the photo you took (so you can see before and after), a short label such as “Composite front door in anthracite”, the estimate it was given that day and the choices it was made from, so you can look back at it, compare it with another, share it or carry on with it, even without a connection. The photo is the copy on your phone that you already chose to use, with its location and other hidden details removed; keeping it does not send it anywhere. If you tap “Carry on with this design”, the app sends that photo to us again exactly as if you had chosen it afresh, and everything in this notice about your photo applies to it again. When you save a design with a code, the app keeps the code, a short label and the date it runs out. Pictures, and your photo with them, stay until you delete them in the app; codes are removed when they expire or when you tap Remove; deleting the app removes everything it kept. If you allow notifications, the app also sets a reminder on your phone for three days before a code runs out. None of this holds your name or contact details, none of it is sent to us, and the app has no advertising or tracking. The app also uses your phone's own “rate this app” prompt, at most once every four months; your phone decides whether to show it, and we never see your answer. Anything else the app does — your photo, your estimate, your enquiry — works exactly as this notice describes for the website.
We also limit how many pictures can be made each day. That limit is counted on our server against a scrambled (hashed) form of your IP address, not with a cookie or anything stored on your device, and the count is cleared every day.
We do count how many people reach each step — how many upload a photo, how many see an estimate, how many ask for quotes — and how long the estimate took to appear. It is a tally and a stopwatch, not a profile: no cookie, nothing stored on your device, and nothing recorded that could tell us which visitor you were. We use it to find where the site is slow or confusing.
If we ever add analytics that identify you or follow you between sites, we will update this notice first and give you a way to opt out.
AI, and decisions made about you
We use AI in two places: to identify the parts of your home in the photograph, and to generate the visualisation. The estimate is worked out by ordinary arithmetic from the choices you make and typical rates for materials, labour, scaffolding and waste.
If you ask for quotes, we also give your enquiry a simple readiness score, worked out from your answers about the project — for example whether you own the home, when you would like the work done, and how much of it you have designed — and send it to the installers with your enquiry so they know what to expect. It never looks at who you are: not your name, your email address, your phone number, or what your area is like. It does not decide whether your enquiry is sent, which installers receive it, or what you are quoted, and you can ask us what yours was.
None of this makes a decision about you, and none of it determines what you are offered. The estimate is a guide to what work of that kind tends to cost, not a judgement about you, and it is not a quotation. Everything that follows — whether an installer contacts you, what they quote, whether you go ahead — involves people. So this is not automated decision-making of the kind restricted by Articles 22A to 22D of the UK GDPR.
Your photograph is not used to identify you or anyone else, and we do not carry out facial recognition or any other biometric processing.
Your rights
Under UK data protection law you have the right to:
- be told how your data is used — that is what this notice is for;
- ask for a copy of the data we hold about you (Article 15);
- have anything inaccurate corrected (Article 16);
- ask us to delete your data (Article 17);
- ask us to restrict how we use it while something is being sorted out (Article 18);
- receive your data in a portable format, or have us send it to someone else (Article 20); and
- withdraw a consent you have given, at any time (Article 7(3)).
You also have the right to object. Where we rely on legitimate interests, you can object to what we are doing at any time, and we must stop unless we can show compelling grounds that override your rights. We are drawing this to your attention separately because Article 21(4) requires us to, and because it is easy to miss in a list.
If you ask us to correct or delete your data, we will pass that on to any installer we sent it to, and to our providers, unless that turns out to be impossible or would take disproportionate effort. You can ask us who those recipients were and we will tell you.
To use any of these rights, email privacy@facetpro.co.uk. We will normally respond within one month. If your request is complex, or you have made several, we may take up to two months longer, but we will tell you within the first month if that happens and explain why. There is no charge, unless a request is clearly unfounded or excessive, in which case we may charge a reasonable fee or decline it — and we will explain our reasons and how to challenge that.
Complaints
Complaining to us
If you think we have handled your personal data wrongly, you have a right to complain to us directly. You can do that:
- by email to privacy@facetpro.co.uk; or
- by post to FACETPRO LTD, Crown House, 27 Old Gloucester Street, London WC1N 3AX.
You do not need to use any particular form of words, or mention any legislation. Just tell us what has gone wrong. We will accept your complaint however it reaches us.
We will acknowledge your complaint within 30 days of receiving it. We will then look into it without undue delay, keep you updated as we go, and tell you the outcome and what we have done about it. This is your right under section 164A of the Data Protection Act 2018.
Complaining to the regulator
You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113. You can do that at any time, though the ICO will usually expect you to have raised it with us first.
Complaining does not affect your other rights, including your right to bring a claim in court.
Children
Facet Pro is for homeowners and is intended for people aged 18 and over. It is not designed for or aimed at children, and we do not knowingly collect children's data. If we find that we have, we will delete it. If you think a child has given us their details, please tell us at privacy@facetpro.co.uk.
Changes to this notice
We may update this notice as the service changes. The version and date at the top tell you when it last changed, and we keep previous versions — ask us if you want to see the one that applied when you used the site. If a change materially affects you, we will tell you directly rather than relying on you to check.