Who we are
Reformer Connect is the controller of personal information collected through this website, the customer and engineer portals, public enquiries and our direct communications. This means we decide why and how that information is used for the Reformer Connect service.
An independent engineer becomes a separate controller for information they receive to prepare a quote, perform work, invoice a customer or meet their own legal obligations. Their privacy practices also apply to that separate use.
Information we collect
- Identity and contact details: name, email address, telephone number and account identifiers.
- Organisation and location details: studio or business name, service addresses, town, county and postcode.
- Customer equipment: make, model, serial number, age, location, photographs, documents and service history.
- Service activity: enquiries, symptoms, urgency, messages, engineer interests, quotes, assignments, completion records, reviews and dispute information.
- Engineer information: business and profile details, biography, photograph, skills, brands, qualifications, coverage, availability, insurance information and verification status.
- Referral relationships: referral codes and the customer–engineer connection created when a valid code is used.
- Communications and preferences: contact-form messages, support correspondence, consent records and marketing choices.
- Technical and security data: IP address, browser or device information, authentication events, request logs and information used to prevent abuse or diagnose faults.
Please do not include health information, payment-card details or unrelated personal information in free-text fields, photographs or documents. If you include information about another person, you must have a lawful reason to do so and tell them where appropriate.
Where information comes from
Most information comes directly from you when you submit a form, create or update an account, upload material, send a message or use the portals. We may also receive information from:
- a customer or engineer involved in the same enquiry or service request;
- an organisation where you act as a staff member or representative;
- our hosting, authentication, email and security suppliers; and
- public sources where reasonably needed to check professional or business information.
Purposes and lawful bases
Swipe the table sideways to see each lawful basis →
| What we do | UK GDPR lawful basis |
|---|---|
| Register accounts, receive enquiries, manage requests, quotes, preferred-engineer relationships and service records. | Contract, or steps requested before entering a contract. |
| Review enquiries and introduce potentially suitable independent engineers. | Contract and our legitimate interests in operating an effective introduction service. |
| Review engineer profiles, insurance information and platform conduct. | Contract and legitimate interests in safety, trust and network administration. |
| Provide support, investigate complaints, prevent fraud, secure accounts and diagnose technical problems. | Legitimate interests, contract and, where applicable, legal obligation. |
| Maintain business, tax, audit and legal records and respond to lawful authorities. | Legal obligation and legitimate interests in establishing or defending legal claims. |
| Send optional promotional updates. | Consent, where consent is required. You can withdraw it at any time. |
Where we rely on legitimate interests, those interests include operating and improving a secure specialist network, protecting users, administering introductions and keeping appropriate records. We balance those interests against your rights and reasonable expectations.
Who we share information with
We may share information with:
- customers and engineers involved in a potential or confirmed introduction, limited to what is reasonably needed for the quote or work;
- Supabase for authentication, database and file storage services;
- Cloudflare for website hosting, content delivery, request processing and security;
- Mailgun for transactional email delivery;
- professional advisers, insurers, auditors or service suppliers subject to appropriate duties of confidentiality;
- police, courts, regulators or public authorities where required by law or reasonably necessary to protect rights and safety; and
- a buyer, investor or successor if the service or its business assets are reorganised or transferred, subject to appropriate safeguards.
We do not sell personal information. We do not send one customer’s private equipment, address or contact information to the general engineer network.
Public and private information
Account contact details, street addresses, private messages, customer equipment records and service documents are not intended to be public. Engineers may choose profile information for use in a professional listing, and an approved review may be displayed with the reviewer details shown at the point of submission.
For general network requests, engineers may initially see limited job information needed to decide whether to express interest. Customer contact and street details are released only as part of a confirmed match or where otherwise explained. Requests linked to a preferred engineer are restricted to that customer, that engineer and Reformer Connect administrators.
International processing
Some suppliers may process information outside the United Kingdom. When personal information is transferred internationally, we require an applicable legal transfer mechanism, such as UK adequacy regulations, the UK International Data Transfer Agreement or an approved UK addendum to standard contractual clauses, together with appropriate security measures where required.
How long we keep information
We keep personal information only for as long as reasonably needed for the purpose collected. The period depends on whether an account or request is active, whether service history is expected to remain useful, and whether information is needed for safety, complaints, fraud prevention, accounting, insurance or legal claims.
- Account and profile information is normally kept while the account is active.
- Enquiries, quotes, messages and service records may be retained to maintain the equipment history and resolve later questions or disputes.
- Insurance and verification records may be retained to evidence the checks completed at a particular time.
- Technical and security logs are kept for shorter periods appropriate to security and troubleshooting.
- Device-side drafts remain on that device until submitted, removed by the service, or cleared through the browser.
When information is no longer needed, we delete or anonymise it. A deletion request may not cover information we must retain by law or need for legal claims, fraud prevention or the rights of another person.
Your rights
Depending on the circumstances, UK data protection law gives you the right to request access, correction, deletion, restriction or portability of your personal information and to object to certain uses. Where processing is based on consent, you can withdraw that consent at any time without affecting earlier lawful use.
Your right to object: you may object to processing based on our legitimate interests. We will stop unless we have compelling legitimate grounds to continue or the information is needed for legal claims. You can object to direct marketing at any time, and we will stop using your information for that purpose.
To exercise a right, email experts@reformerconnect.co.uk. We may ask for proportionate information to verify your identity. You also have the right to complain to the Information Commissioner’s Office.
Marketing
Service messages about an enquiry, quote, account, security event or policy change are not marketing. We send optional promotional email only where permitted, and each message will provide a way to opt out. You can also opt out by emailing us. Opting out does not prevent essential service communications.
Automated decisions
Reformer Connect does not currently make decisions with legal or similarly significant effects using solely automated processing. Matching and engineer approval involve human review. We may use rules to organise or filter requests—for example by coverage, skills or preferred-engineer relationship—but a rule does not itself award work.
Security
We use access controls, authenticated accounts, row-level database permissions, encrypted connections and supplier security controls appropriate to the service. No internet service can promise absolute security. Keep your password confidential, use a unique password and contact us promptly if you believe an account or message has been compromised.
Children
The service is intended for adults acting for themselves, a studio or a business. It is not directed at children, and people under 18 must not create an account or submit an enquiry.
Changes and contact
We may update this policy when the service, suppliers or law changes. The date at the top identifies the current version. We will provide suitable notice if a change materially affects how registered users’ information is handled.
Privacy questions, rights requests and legal notices can be sent to experts@reformerconnect.co.uk or through our contact page. Details about browser storage are in our cookie policy.