Our privacy notice
Last updated 7 October 2026
This notice explains what we collect about you, why, who else sees it, how long we keep it, and your rights.
Who we are
OmniRated is the trading name of Muhammad Hussain. In this notice, "we" and "us" mean Muhammad Hussain, trading as OmniRated. We're responsible for your details under data protection law.
Email us at contact@omnirated.co.uk, or call or message us on 07766 559147.
What we collect
When you ask for a quote
Everything you enter in the form:
- the service, the extras you pick, and the home's size, postcode and address
- anything you tick that makes the home harder to measure
- which kind of customer you are
- your name, phone number and email address
- the date you'd prefer, and how to get in
- for several homes, your company, how many homes there are, where they are, whether the work is one-off or ongoing, when you need it, and anything else you tell us
With it, we record the guide price, or that the home needs an exact quote, and that you ticked the box asking us to contact you. We also record the result of the spam check, the date and time, a reference number, the page you sent it from, and the site or link that brought you to us, if any.
When you contact us
What you send us by email, phone or WhatsApp, and the email address or number you contact us from.
At the visit
- measurements
- what we record about the home, such as its insulation, windows, heating and hot water
- photos
- copies of any paperwork you give us
When you pay
Your name, the amount, and how you paid.
The spam check
When you send the form, Cloudflare's spam check, Turnstile, uses your IP address and details your browser shares, such as its type and version, to tell a person from a program. It doesn't read what you type into the form.
Why we use it, and the legal basis
| Why we use it | Legal basis |
|---|---|
| To answer your request and send you a quote | You asked us to, before any contract |
| To arrange and do the work, lodge your EPC, send your documents and invoice you | Our contract with you |
| To answer other questions | Our legitimate interest in answering people who contact us |
| To stop spam and misuse of the site | Our legitimate interest in keeping the site safe |
| To keep records of our work, and deal with audits, complaints and claims | Our legitimate interest in being able to show how the work was done |
| To keep tax records | Our legal duty to keep them |
The tick box
The tick box on the form records that you asked us to contact you about your request. It isn't consent to marketing. We don't send marketing, and we don't sell your details or pass them on for marketing.
What you need to give us
We need the details the form asks for, except those marked optional. Without them, we can't send a quote or do the work.
Who else sees your details
- Cloudflare, which hosts this site. It runs the form, stores requests in a database, runs the spam check, passes each request to our email, and counts visits.
- Google, which provides our email account, so it holds the emails we send and receive, including a copy of each request.
- postcodes.io, which checks that the postcode is real and whether it's in Greater London. Our server sends it the postcode only, so it never gets your name, your address or anything about your device.
- Our accreditation scheme, through which we lodge each EPC, and which may check our work in an audit.
- The government's EPC register, which holds your EPC once it's lodged. Anyone can find it there by postcode, street name and town, or certificate number, and download it. If you hold the EPC, you can ask the government to take it out of public view.
- Monzo, which handles card payments made through our payment links, under its own privacy notice.
- WhatsApp, if you message us there.
- Anyone you ask us to send your documents to, such as your agent or solicitor.
- HMRC or another authority, only where the law requires it.
Outside the UK
Cloudflare and Google run their services around the world, so your details may be handled outside the UK.
Cloudflare protects them with standard contractual clauses and the UK Addendum, and you can ask us for a copy. Google explains the protections it uses in its privacy policy.
We keep the requests sent through this website in a database that Cloudflare stores inside the European Union.
How long we keep it
| What | How long |
|---|---|
| A request or question that doesn't lead to a job | 12 months, then we delete it |
| Everything about a job, including our notes, measurements, photos, floor plans, copies of your paperwork, invoices, and our emails and messages with you | 15 years. That covers HMRC's rule for business records, and lets us show how the work was done if it's audited or questioned. |
Statistics
We count visits to this site with Cloudflare Web Analytics, only to see how the site is used and to make it better. It records the pages viewed, the site or link that brought each visitor, their country, the type of device, the browser and operating system, and how long pages take to load.
Cloudflare says it does this without cookies or anything else stored on your device, without identifying visitors from their IP address or browser, and without collecting their personal data.
The law allows statistics like these without asking first, as long as we explain them and you can switch them off at no cost.
Your choice is kept in this browser. If your browser sends a Global Privacy Control signal, statistics stay off.
Keeping it safe
We keep your details in our own accounts with Cloudflare and Google, and on our own phone and computer. The site sends what you type over an encrypted connection.
If someone else gave us your details
A landlord or agent may give us a tenant's name and number so we can arrange the visit, or an agent may book for a homeowner. We use those details only for that job, keep them as set out above, and point you to this notice when we first contact you.
Your rights
You can ask for a copy of the details we hold about you, and ask us to correct them, delete them or limit how we use them. You can object to how we use them, and ask for the details you gave us in a form you can take elsewhere. Some of these depend on why we hold the details: we can't delete records the law says we must keep, for example.
To ask, email contact@omnirated.co.uk or call 07766 559147.
Complaints
If you're unhappy with how we've used your details, tell us, by email or phone.
You can also complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.
Changes to this notice
If we change this notice, we'll put the new version here and change the date at the top.