Privacy Policy

Who we are. RenderQuote is a service of Bond Labs Limited (company number 17285766), incorporated in England and Wales on 19 June 2026 and trading as RenderQuote. Registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Director: Leon Bond. For privacy and data-protection requests, write to Bond.2018@outlook.com.

What we collect

• Your account email. Sign-in is passwordless: we send a one-time code to that address. We do not store a password for you.
• Your company profile: name, address, phone, email, logo, brand colour, and any terms you add to quotes.
• Your customers' details (name, contact details, addresses) and the quotes you create for them. You type those in; we do not scrape them from elsewhere.
• Photos you upload to the visualiser, and the composite images produced from them. Uploads go to a private bucket on owner-prefixed paths.
• If a customer opens a quote link: the time of the first open. If they tap Accept: the name they type, the time, the IP address of their connection, and any note they add.
• Technical data needed to run the service (for example request logs held by our hosts), limited to what is required to serve pages, keep the account secure, and diagnose faults.

Why we use it, and the lawful bases

Under UK GDPR we need a lawful basis for each use of personal data. For your own account we rely on contract (UK GDPR Article 6(1)(b)): we use your email to sign you in, your profile to brand quotes, your photos and job details to build the quote, and optional email (when configured) to send a link you asked us to send. We rely on legitimate interests (Article 6(1)(f)) for security, abuse prevention, and keeping the service running. We do not use your data for advertising, and we do not sell it.

For personal data about your customers (including accept-link evidence), you are the controller and we are the processor. The lawful basis as against those individuals is yours to determine — typically your contract with them, or your legitimate interest in quoting for work. Our processing of that data is described below.

Customer data — who is controller

You (the firm using RenderQuote) are the data controller for your customers' and clients' personal data, for the quotes you create, for photos of their property, and for any name, time and IP recorded when someone accepts a quote through a link.Bond Labs Limited is the processor of that data: we store it and display it on your instructions, so the service can function. Requests from your customers about that data should come to you. If someone contacts us instead, we will point them to you unless the law requires us to act ourselves.

Where it lives

Account, quote and photo data is stored with Supabase (Postgres, Auth and Storage) in the London (eu-west-2) region and served via Vercel. Access to your rows is scoped to your account by row-level security. Photos and quote images sit in a private bucket (quote-visuals) that only your account can read; storage paths are prefixed with your user id. Logos you upload are stored so they can be shown on quotes you issue.

Customer quote links & acceptance

When you send a customer a quote link, the page at that link shows a frozen copy of the quote (company details, the price breakdown, the picture) to anyone who holds the link — it should not be forwarded. There is one live link per quote. The link stays open for at least 60 days, and for fourteen days of grace after the date the quote is valid until, never longer than 400 days; you can revoke it at any time. Moving a quote back to draft revokes every live unaccepted link. Only a quote marked sent can be accepted through a link.

When a customer opens the link, the time of the first open is recorded so you know it has been seen. If they accept through the link, the name they type, the time and the IP address of their connection are recorded with the quote as evidence of acceptance, together with any note they add. That record is kept with the quote for as long as you keep the quote. You are the controller for it and the point of contact for any request about it.

Cookies

Only essential cookies and local preferences are used: your sign-in session, and your theme / cookie-notice choice on this device. There is no advertising cookie, no analytics pixel, and no third-party tracking.

How long we keep it

We keep your account, profile, rate card, customers, quotes, photos and acceptance records until you delete them or delete the account. Share links expire on the timetable above, or sooner if you revoke them; a revoked or expired link no longer shows the quote. Hosts may retain security logs for a short period to operate the service. If you ask us to delete your account we remove the data we hold for that account, except anything the law requires us to keep (for example a record that a deletion request was made).

Who we share it with

We use a small number of sub-processors to run RenderQuote. We do not sell personal data.

• Supabase — database, authentication and file storage, in London (eu-west-2).
• Vercel — hosts and serves the application.
• Resend — only if we have configured it on this deployment, and only to send a quote email you asked to send.

We may also disclose data if the law requires it, or to defend a legal claim.

International transfers

Quote and account data is stored in the United Kingdom (Supabase, London). Vercel and, when configured, Resend may process data in the United States in order to host the site or send mail. Where a transfer outside the UK is needed, we rely on the UK International Data Transfer Agreement and/or the EU Standard Contractual Clauses as adopted for use in the UK, rather than on an adequacy regulation we have not confirmed.

Your rights

You can download everything on your account at any time from Settings → Your data (a JSON file of your profile, rate card, customers and quotes, or a CSV of the quotes alone), and you can delete your account and all its data from Settings → Delete account. You also have the right to ask us for access, correction, deletion, restriction, or objection, and to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

We do not currently hold an ICO registration number. We will register with the ICO if and when the law requires it. Data-protection requests should be sent to Bond.2018@outlook.com — that is the registered inbox; please do not assume any other address.

RenderQuote is a business tool for firms, not a service directed at children. We do not make solely automated decisions that produce legal effects about you.

Contact

Bond Labs Limited, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Email: Bond.2018@outlook.com.

Bond Labs Limited, company number 17285766. Last updated: 27 August 2026.