Privacy notice

Who we are

QuotePilot is operated by Octopus Consultants Ltd, based at 47 Fordh Talgarrek, Truro, TR1 2FJ. For the account, website, billing, support, security and product-improvement information described below, Octopus Consultants Ltd is the data controller.

Our role when a customer requests a quote

The trade business receiving a customer request is normally the controller responsible for deciding how that customer information is used. QuotePilot processes the request for that business so it can receive enquiries, prepare quotes and keep the related history. QuotePilot may also act as a controller for limited platform security, fraud prevention and legal-compliance information. Questions about the trade service itself or the business's use of a request should be directed to that business.

Information we collect

Trader information may include identity and contact details, login identifiers, business profile and branding, service catalogues, quotes, customer communications, feedback, subscription information when payments are introduced, and technical or security records.

Customer request information may include name, email address, phone number, job address, postcode, requested work, measurements, notes, photographs, quote responses and related communications.

How we use information

We use information to create and administer accounts, provide the enquiry and quoting service, deliver messages and documents, maintain records requested by users, secure and troubleshoot the platform, prevent misuse, respond to support requests, meet legal obligations and improve QuotePilot. We do not sell personal information.

Our lawful bases

We process trader account information where it is necessary to provide the contracted service or take requested steps before a contract. We may rely on legitimate interests for platform security, service administration, fraud prevention and proportionate product improvement, and on legal obligation where the law requires processing. We rely on consent only where a genuine optional choice is offered, such as certain marketing or non-essential technologies. Consent can be withdrawn at any time.

Who receives information

Customer request information is shared with the trade business selected by the customer. We also use carefully selected providers for hosting and database services, authentication, file storage, transactional email, monitoring and, when introduced, payment processing. Current core providers include Supabase for authentication, database and private file storage, Render for application hosting, and Resend for transactional email. Providers may process information only for the services they supply to us and under appropriate contractual controls. We may disclose information where required by law or to protect legal rights and platform security.

International transfers

Some service providers may process information outside the United Kingdom. Where this happens, we assess the transfer mechanism and use applicable safeguards, such as UK adequacy regulations or approved contractual protections. Contact privacy@quotepilot.uk for more information about safeguards relevant to your data.

How long we keep information

We keep account and operational records while an account is active and for a proportionate period afterwards to provide history, resolve disputes, meet legal duties and protect legitimate interests. Quote and customer-request records are retained according to the trade business's instructions and applicable legal requirements. Security logs, support records, submission-protection data and backups use shorter or scheduled retention periods appropriate to their purpose. We are finalising the detailed retention schedule before production launch and will publish material updates here.

How we protect information

We use access controls, authenticated business boundaries, private storage, signed or server-mediated asset access, encrypted network connections, input validation, audit records and operational safeguards designed to protect personal information. No online service can guarantee absolute security, but we review and improve these measures as QuotePilot develops.

Cookies and similar technologies

QuotePilot currently uses only technologies needed to provide and secure the service, including an authentication session cookie. These are not used for advertising. If we introduce analytics, marketing or other non-essential technologies, we will explain them and request consent where required before using them.

Your data protection rights

Depending on the circumstances and lawful basis, you may have rights to access, correct, erase, restrict or object to processing, receive portable data, and withdraw consent. Contact privacy@quotepilot.uk to exercise a right. If your request concerns information controlled by a trade business, we may direct or pass the request to that business and assist it in responding. We may need to verify your identity before acting.

Questions and complaints

Please contact privacy@quotepilot.uk first so we can try to resolve your concern. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk or by using the contact details published by the ICO.

Changes to this notice

We may update this notice when QuotePilot, our providers or legal requirements change. The effective date identifies the version currently in force. We will give account holders appropriate notice of material changes.