Last updated: 27 August 2026
This notice explains how personal data is handled when people use Interior Notes at https://1239.neurogena.net. It is written for visitors in the United Kingdom and should be read alongside the Cookie Policy. This notice describes the information practices stated for this website; it does not replace the rights and protections provided by law.
1. Controller and responsible operator
The operator of Interior Notes is the controller of personal data processed through this website. “Controller” means the person or organisation that decides why and how personal data is used. The operator is responsible for handling information in accordance with the UK GDPR, the Data Protection Act 2018 and, where relevant, the Privacy and Electronic Communications Regulations 2003 (PECR).
For privacy requests or questions, contact the operator by telephone on +44 20 8050 4086 or by post at 41 Coniston Court, Kendal St, London W2 2AN, United Kingdom. Please provide enough information for the operator to understand the request and locate the relevant information without collecting unnecessary additional data.
2. Who this notice covers
This notice applies to people who browse this website, use its AJAX enquiry form, telephone the operator about an enquiry, or otherwise provide personal data in connection with the website. It applies whether a person is acting for themselves or in connection with a household, property or organisation.
The website does not provide user accounts, public comments, newsletters, advertising, analytics or social-media integrations. It is not intended to create a public profile of visitors. This notice does not govern independent websites or services that may be reached outside this website, as their operators control their own information practices.
3. Personal data collected and where it comes from
The website’s enquiry form is designed to collect the information a person enters: name, telephone number, project type, London area and message. A message may contain further personal information if the sender chooses to include it. People should avoid placing sensitive information, such as health information, financial details, identity-document details or information about another person, in a free-text message unless it is genuinely necessary.
Information may also be obtained when a person calls the stated telephone number or sends correspondence by post. In those circumstances, the data comes directly from the person communicating with the operator. The site does not collect electronic correspondence address details through its form, and it does not obtain visitor data from advertising, social networks, newsletters or analytics providers.
Like most websites, technical systems may process limited connection information needed to deliver and protect the site, such as device or browser information, request information, date and time, and network-related information. The exact information available depends on the systems used to host, secure and operate the website. It is not used to build a marketing audience or to make decisions about individuals.
4. Why personal data is used and the lawful basis
Personal data is used only for purposes that are relevant to the communication or operation of this website. The main purpose is to read, understand and respond to an enquiry. This processing is normally based on the operator’s legitimate interests in responding to a person who has chosen to make contact, managing communications, and maintaining an accurate record of what was requested. Those interests are balanced against the individual’s privacy rights; only information reasonably needed for the enquiry should be used.
Telephone and area information may be used to return a call and understand the practical context of an enquiry. Project type and message content may be used to understand the subject raised and provide a relevant response. Information may also be used to protect the website, investigate misuse, keep necessary records, or establish, exercise or defend legal claims. These activities are generally based on legitimate interests or, where applicable, compliance with a legal obligation.
If a particular activity requires consent under the UK GDPR or PECR, the operator will seek consent before carrying it out and will explain what is being agreed to. The stated website arrangement does not include newsletters, advertising, behavioural profiling or social-media marketing. Personal information is not used for these purposes.
5. Whether information must be provided
Providing personal data is voluntary. However, a name and telephone number are normally needed if a person wants the operator to identify the enquiry and respond by telephone. Project type, London area and a message help the operator understand what the enquiry concerns. If this information is not provided, incomplete or cannot be verified where verification is reasonably necessary, the operator may be unable to respond meaningfully or may only be able to provide a limited response.
Visitors can browse the informational parts of the website without submitting the enquiry form. A person should provide only the information that is relevant to their communication.
6. Cookies and similar technologies
This website does not use advertising, analytics, social integrations or newsletters. Where cookies or similar technologies are used, they must be assessed under PECR and the UK GDPR. Strictly necessary technologies may be used where required for a website function, security or communication requested by a visitor. Any non-essential technology should not be placed or accessed unless the required consent has been obtained.
For current information about cookies and similar technologies, including any available choices, please read the Cookie Policy. Browser settings may also allow people to manage stored technologies, although blocking necessary functions can affect how parts of a website work.
7. Processors, recipients and legal disclosures
Personal data is not sold, rented or disclosed for advertising. It may be handled by carefully selected service-provider categories where this is necessary to operate the site or manage an enquiry. Depending on the actual arrangements in use, these may include website hosting, technical maintenance, security, form-processing or communications support providers. Such providers act only on documented instructions where they are processors, and should be subject to appropriate confidentiality and data-protection obligations.
Information may also be disclosed where required by law, a court order, a regulator or a competent public authority, or where disclosure is reasonably necessary to protect rights, safety, property or the integrity of the website. Any disclosure will be limited to what is relevant and lawful in the circumstances.
8. International transfers
The operator does not state that enquiry data is routinely transferred outside the United Kingdom. If a service provider used to operate, secure or support the website processes personal data in another country, the operator will assess the transfer before it takes place. Where UK data-protection law requires safeguards, the transfer will be made only using a lawful mechanism, such as adequacy regulations or appropriate contractual safeguards, together with any supplementary measures that are reasonably required.
The applicable transfer arrangement can depend on the provider, the location of processing and the nature of the information. A person may ask the operator for information about the safeguards relevant to their own data by using the telephone or postal contact details in this notice.
9. How long information is kept
Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected. Enquiry records are kept while the communication remains active and for a limited period afterwards where this is needed to deal with follow-up questions, maintain an appropriate record of the communication, resolve concerns, prevent misuse or meet legal responsibilities.
A single fixed retention period is not appropriate for every record because the necessary period can depend on the content of the enquiry, whether there is an ongoing matter, and whether a legal claim, complaint or statutory obligation applies. When information is no longer needed, it should be securely deleted or anonymised. Where information must be retained for legal reasons, access should be restricted to the extent appropriate.
10. Security and data minimisation
The operator aims to use proportionate organisational and technical measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure or misuse. These measures may include limiting access to people who need the information, maintaining appropriate administrative controls, and reviewing how website functions handle data.
No method of transmission, storage or online operation can be guaranteed to be completely secure. For that reason, visitors should share only the information needed for their enquiry and should not include unnecessary sensitive information in the form or in correspondence. If the operator becomes aware of a personal-data breach that presents a risk to people’s rights and freedoms, the response will be handled in accordance with applicable legal duties.
11. Your data protection rights
Subject to the conditions and limits set by law, individuals may have the right to request access to their personal data, correction of inaccurate or incomplete data, erasure of data, restriction of processing, and the transfer of data to another controller where the right to data portability applies. Portability generally applies only to certain data processed by automated means on the basis of consent or a contract.
Individuals may also object to processing that is based on legitimate interests where they have grounds relating to their particular situation. The operator will then stop that processing unless there are compelling legitimate grounds that override the person’s interests, rights and freedoms, or the processing is needed for legal claims. There is an absolute right to object to direct marketing; however, the website does not state that it carries out direct marketing.
To exercise a right, call +44 20 8050 4086 or write to 41 Coniston Court, Kendal St, London W2 2AN, United Kingdom. The operator may need to request reasonable information to confirm identity before acting on a request, especially where disclosure could affect another person’s privacy. A response will be provided within the timescale required by applicable law, unless an extension is permitted and communicated.
12. Consent, withdrawal and objections
Where processing is based on consent, consent may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing that took place before it was withdrawn. A person can communicate withdrawal by telephone or post using the contact details above. The operator will consider the request and stop the relevant consent-based processing unless another lawful basis applies to a limited part of the information.
A person may also raise an objection, concern or request for clarification directly with the operator. Doing so first may help resolve a matter promptly, but it is not a condition of making a complaint to the supervisory authority.
13. Complaints to the UK supervisory authority
People in the United Kingdom have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, if they believe that their personal data has been handled in a way that does not comply with data-protection law. The ICO provides current information about how to make a complaint. Individuals may contact the operator first if they wish, but they retain the right to approach the ICO directly.
14. Children and automated decisions
This website is intended for a general audience seeking information about interior painting and wall finishing. It is not designed to knowingly collect personal data from children. If the operator becomes aware that personal data relating to a child has been submitted without appropriate authority where that is required, the information will be reviewed and handled in accordance with applicable law.
The operator does not use personal data from this website to make solely automated decisions, including profiling, that produce legal effects or similarly significant effects on individuals. Enquiries are considered through ordinary human communication rather than automated decision-making.
15. Changes to this notice
This notice may be updated when the website’s data practices, legal requirements or operational arrangements change. The latest version will be published on this page, and the “Last updated” date near the beginning will show when it was most recently revised. Material changes will be described clearly in the updated notice where appropriate.