Privacy Policy
Last updated 29 September 2026
This policy explains what personal data Lintel collects, why, who we share it with, and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Who we are
Lintel is a trading name of Sam Pike, a sole trader, of 27a Llandaff Road, Cardiff, CF11 9NF. In this policy, “Lintel”, “we” and “us” mean Sam Pike trading as Lintel. For privacy questions, contact support@lintel.uk.
For account and billing data, we are the controller. For the project and client data our customers put into Lintel, the customer is the controller and we process it on their behalf. If you're a contractor's client and have a question about your data, you can contact the contractor or us.
What we collect
Account information. Your name, email address, company name and login credentials. Passwords are handled by our authentication provider and stored hashed, never in plain text.
Billing information. Your plan and subscription status, plus a Stripe customer reference. Your card details are collected and held by Stripe, not by us.
Project and variation order data. What you enter while using Lintel: project names and addresses, your clients' names and email addresses, variation orders and their pricing, rate cards, client instructions, drawing references and time logs.
Uploaded photos. Photos you attach to variation orders, such as before, during and after photos from site. Photos are kept in private storage and aren't publicly accessible.
Client approval records. When a client responds to an approval request through VOSign, we record the name they enter, their email address, whether they approved or rejected, any reason they give, and the time.
Emails we send. Records of approval requests and reminder emails sent to your clients on your behalf.
Technical data. We use cookies only to keep you signed in. We don't use advertising or analytics cookies. Our hosting provider keeps standard server logs, such as IP addresses and request times, for security and troubleshooting.
How we use it
- To provide the Service: storing your data, pricing and sending variation orders, collecting client approvals, and sending reminders you've set up (performance of our contract with you).
- To take payment and manage your subscription (contract).
- To send service emails, such as approval notifications, billing notices and important changes (contract and legitimate interests).
- To keep the Service secure and fix problems (legitimate interests).
- To meet legal obligations, such as keeping financial records (legal obligation).
We don't sell personal data, and we don't use your project data for advertising.
Who we share it with
We use a small number of service providers (processors) to run Lintel. They can only use data to provide their service to us:
- Supabase: database, authentication and file storage, including uploaded photos.
- Stripe: payment processing and subscription billing.
- Resend: delivery of approval requests, reminders and account emails.
- Vercel: hosting the website and application.
Some of these providers process data outside the UK, including in the United States. Where they do, the transfer is covered by safeguards recognised under UK data protection law, such as the UK Extension to the EU–US Data Privacy Framework or the UK International Data Transfer Addendum.
When you send a variation order for approval, the client you choose receives the details of that variation order. We may also disclose data if the law requires it.
How your data is kept separate
Each company's data is kept separate. Our database uses Row Level Security, which restricts access to records at the database level, and our application checks which company every request belongs to. Signed-in users can only access projects, variation orders and other records that belong to their own company. A client using VOSign can only see the variation order they've been sent, through a unique link.
How long we keep it
We keep your data while your account is active. After your subscription ends, we keep it for 90 days so you can export it, then delete it. Billing and payment records are kept for as long as UK tax law requires, which is currently at least five years after the relevant Self Assessment deadline.
Your rights
You have the right to access your personal data, to have it corrected or deleted, to restrict or object to how it's used, and to receive a copy in a portable format.
To request deletion or exercise any of these rights, email support@lintel.uk from the email address on your account. Tell us what you'd like us to do. We'll respond within one month. If you're a contractor's client, we may pass your request to the contractor, as they control that data.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk). We'd appreciate the chance to put it right first.
Changes to this policy
If we make significant changes, we'll update this page and email account holders before they take effect.
Contact
For privacy questions, email support@lintel.uk or write to Lintel, 27a Llandaff Road, Cardiff, CF11 9NF.