Privacy Policy
This page describes how we operate the service. It is not legal advice about the quotes you send your customers.
Who we are. RenderSim is a trading name of Bond Labs Limited (company number 17285766). rendersim.co.uk. Incorporated in England and Wales on 19 June 2026. Registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Director: Leon Bond. For privacy and data-protection requests, write to support@rendersim.co.uk.
What we collect
- Your account email. Sign-in is passwordless: we send a one-time code to that address. We do not store a password for you.
- Your company profile: name, address, phone, email, logo, brand colour, and any terms you add to quotes.
- Your customers' details (name, contact details, addresses) and the quotes you create for them. You type those in; we do not scrape them from elsewhere.
- Photos you upload to the visualiser on jobs that have a look, and the composite images produced from them. The overlay is a look, not a survey. Uploads go to a private bucket on owner-prefixed paths.
- If a customer opens a quote link: the time of the first open. If they tap Accept: the name they type, the time, the IP address of their connection, and any note they add.
- Technical data needed to run the service (for example request logs held by our hosts), limited to what is required to serve pages, keep the account secure, and diagnose faults.
Why we use it, and the lawful bases
Under UK GDPR we need a lawful basis for each use of personal data. For your own account we rely on contract (UK GDPR Article 6(1)(b)): we use your email to sign you in, your profile to brand quotes, the job details you enter to build the quote, and optional email (when configured) to send a link you asked us to send. We rely on legitimate interests (Article 6(1)(f)) for security, abuse prevention, and keeping the service running. We do not use your data for advertising, and we do not sell it.
For personal data about your customers (including accept-link evidence), you are the controller and we are the processor. The lawful basis as against those individuals is yours to determine. Typically that is your contract with them, or your legitimate interest in quoting for work.
Customer data: who is controller
You (the firm using RenderSim) are the data controller for your customers' and clients' personal data, for the quotes you create, for photos of their property on jobs that have a look, and for any name, time and IP recorded when someone accepts a quote through a link. Bond Labs Limited is the processor of that data: we store it and display it on your instructions, so the service can function. Requests from your customers about that data should come to you. If someone contacts us instead, we will point them to you unless the law requires us to act ourselves.
Where it lives
Account, quote and photo data is stored with Supabase (Postgres, Auth and Storage) in the London (eu-west-2) region and served via Vercel. The photographic finish, when it is switched on, sends that photograph and its mask to fal.ai to make an after picture. That call does not run unless the server has FAL_KEY. With no key, no photograph is sent and no after picture is made. Access to your rows is scoped to your account by row-level security. Photos and quote images sit in a private bucket (quote-visuals) that only your account can read; storage paths are prefixed with your user id. Logos you upload are stored so they can be shown on quotes you issue. Signing in on a new device with the same email shows the same account. A draft you have not saved yet lives only on the device you typed it on.
Customer quote links & acceptance
When you send a customer a quote link, the page at that link shows a frozen copy of the quote (company details, the price breakdown, and a colour sample when the job includes one) to anyone who holds the link. It should not be forwarded. There is one live link per quote. The link stays open for at least 60 days, and for fourteen days of grace after the date the quote is valid until, never longer than 400 days. You can revoke it at any time. A replacement link shows the same saved paper. Issued quotes stay as they were; a change of scope is a new numbered revision. Only a quote marked sent can be accepted through a link.
When a customer opens the link, the time of the first open is recorded so you know it has been seen. If they accept through the link, the name they type, the time and the IP address of their connection are recorded with the quote as evidence of acceptance, together with any note they add. That record is kept with the quote for as long as you keep the quote. You are the controller for it and the point of contact for any request about it.
Cookies
Only essential cookies and local preferences are used: your sign-in session, and your theme / cookie-notice choice on this device. There is no advertising cookie, no analytics pixel, and no third-party tracking. Under PECR this is a strictly necessary cookie notice, not a marketing consent banner.
How we keep it safe
We send data over HTTPS. Access to your rows is scoped to your account by row-level security. Photos and quote images sit in a private bucket on owner-prefixed paths. Sign-in is a one-time email code. We do not store a password for you.
Marketing
We do not send marketing email. Quote emails go only when you ask us to send a quote to your customer, and only if mail is configured on this deployment.
How long we keep it
We keep your account, profile, rate card, customers, quotes, photos of the look when that job has one, and acceptance records until you delete them or delete the account. Share links expire on the timetable above, or sooner if you revoke them; a revoked or expired link no longer shows the quote. Hosts may retain security logs for a short period to operate the service. If you ask us to delete your account we remove the data we hold for that account, except anything the law requires us to keep (for example a record that a deletion request was made).
Who we share it with
We use a small number of sub-processors to run RenderSim. We do not sell personal data. We do not take payment from you today, so there is no card processor on this list.
- Supabase: database, authentication and file storage, in London (eu-west-2).
- Vercel: hosts and serves the application.
- Resend: only if we have configured it on this deployment, and only to send a quote email you asked to send.
We may also disclose data if the law requires it, or to defend a legal claim.
International transfers
Quote and account data is stored in the United Kingdom (Supabase, London). Vercel and, when configured, Resend may process data in the United States in order to host the site or send mail. Where a transfer outside the UK is needed, we rely on the UK International Data Transfer Agreement and/or the EU Standard Contractual Clauses as adopted for use in the UK, rather than on an adequacy regulation we have not confirmed.
Your rights
You can download everything on your account at any time from Settings → Your data (a JSON file of your profile, rate card, customers and quotes, or a CSV of the quotes alone), and you can delete your account and all its data from Settings → Delete account. You also have the right to ask us for access, correction, deletion, restriction, or objection, and to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
We do not currently hold an ICO registration number. We will register with the ICO if and when the law requires it. Data-protection requests should be sent to support@rendersim.co.uk. Quote emails the app sends come from hello@rendersim.co.uk.
RenderSim is a business tool for firms, not a service directed at children. We do not make solely automated decisions that produce legal effects about you.
Contact
Bond Labs Limited, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Email: support@rendersim.co.uk.
Bond Labs Limited, company number 17285766. Last updated: 15 September 2026.