Privacy Policy

How we collect, use, and protect your personal data

Last updated: April 2026 · Version 1.1 · ICO Registration: ZC121066

1. Who We Are

Myrmex Group Ltd, company number 17089892, registered office at 195 Manchester Road, London, E14 3DR. Contact: team@myrmexgroup.co.uk.

We are the data controller for personal data collected via this website. The responsible persons for data protection are Denis and Artur, co-founders of Myrmex Group Ltd. We are registered with the Information Commissioner’s Office under registration number ZC121066.

2. What Data We Collect

2.1 Contact Form (START page)

When you submit the contact form we collect: your name, email address, phone number (if provided), and project details you choose to share including location, scope, budget range, and timeline.

2.2 Calculator Email Gate

If you request a detailed PDF report from the budget calculator, we collect your email address. The cost estimate itself is always visible without providing an email address.

2.3 Website Analytics

We use Google Analytics 4 to understand how visitors use our website. Analytics is loaded only after you grant explicit consent via the cookie banner. If you decline, no analytics cookies are set and no identifiable data is sent to Google.

When granted, analytics collects pages viewed, time on page, approximate location (country/region), device type, and referring source. IP addresses are anonymised by Google before processing. Full detail of cookies set is in our Cookie Policy. Google acts as our data processor for this service.

2.4 Technical Data

Our web servers automatically log standard technical information including IP addresses, browser type, and pages visited. This data is used for security and performance purposes only and is not linked to individual identities.

3. How We Use Your Data

  • To respond to your enquiry and assess whether your project falls within our service scope
  • To send you the detailed budget report PDF you have requested
  • To communicate with you during the pre-contract assessment process
  • To maintain records of enquiries for business administration purposes
  • To understand aggregate website usage patterns and improve the site (analytics only — with your consent)

We do not use your data for automated decision-making or profiling within the meaning of Article 22 UK GDPR. We do not use your data for marketing without your explicit consent.

4. Legal Basis for Processing

Under UK GDPR, we process your data on the following legal bases:

  • Legitimate interests — responding to project enquiries from people who have actively contacted us (Article 6(1)(f))
  • Contract performance — processing data necessary to take steps at your request prior to entering a contract (Article 6(1)(b))
  • Consent — where you have explicitly provided your email address to receive the PDF report, or enabled analytics cookies via the cookie banner (Article 6(1)(a))

5. Data Retention

Enquiries that do not convert to a project: personal data is retained for a maximum of three months from the date of last contact, then securely deleted.

Data relating to completed projects is retained for seven years from project completion in accordance with our contractual and statutory obligations.

Anonymised analytics data (Google Analytics 4) is retained for 14 months.

6. Who We Share Data With

We do not sell your personal data. We share data only with the following processors, who handle it solely on our instructions:

  • Make (Celonis SE) — automation platform used to route form submissions
  • Google LLC — Google Sheets for lead storage; Google Workspace for email; Google Analytics 4 for anonymised website analytics (consent-gated)
  • Resend Inc. — transactional email delivery for confirmation emails and PDF reports
  • Railway Corp — cloud hosting provider for our backend submission system
  • Cloudflare Inc. — content delivery and security (bot protection)
  • Webflow Inc. — website hosting platform

We may disclose data if required to do so by law or in connection with legal proceedings.

7. International Transfers

Some of our processors may operate servers outside the UK or EEA. Where data is transferred internationally, appropriate safeguards are in place in accordance with UK GDPR, including Standard Contractual Clauses where applicable.

8. Client Case Studies and Testimonials

We feature project records and client quotes on our website. We publish content that identifies a named individual — including their name, employer, title, or location — only where we have obtained explicit written consent from that person.

If you have consented to being featured and wish to withdraw that consent, contact us at team@myrmexgroup.co.uk. We will remove identifying information within 30 days of your request.

9. Your Rights

Under UK GDPR, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — request correction of inaccurate data
  • Erasure — request deletion of your data where there is no legal basis for continued processing
  • Restriction — request that we limit how we process your data
  • Object — object to processing based on legitimate interests
  • Portability — receive your data in a structured, machine-readable format
  • Withdraw consent — where processing is based on consent, you can withdraw it at any time (including analytics consent via the Manage cookies link in our footer)

To exercise any right, contact us at team@myrmexgroup.co.uk. We will respond within one calendar month.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office at ico.org.uk.

10. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or destruction, including:

  • All data transmitted between your browser and our systems is encrypted in transit via HTTPS (TLS 1.2 or higher)
  • Lead and enquiry data stored by our processors (Google, Railway) is encrypted at rest
  • Access to lead data is restricted to the two co-founders of Myrmex Group Ltd and authenticated via individual credentials
  • Our backend submission system uses signed HMAC tokens to prevent tampering with form data in transit
  • Access logs are retained for security review

No internet transmission is completely secure. We cannot guarantee absolute security of data transmitted to our website.

11. Children’s Data

This website and our services are directed exclusively at adults engaging us for residential renovation projects. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has submitted personal data to us, please contact team@myrmexgroup.co.uk and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always published at myrmexgroup.co.uk/privacy. The date at the top of this document indicates when it was last updated.

13. Contact

Data controller: Myrmex Group Ltd, 195 Manchester Road, London, E14 3DR. Email: team@myrmexgroup.co.uk. ICO registration: ZC121066.