Privacy notice

Last updated 7 October 2026.

Who we are

Renomate (a trading name, "we") is the data controller for the data described in sections 1, 3 and 4 below. Contact: renomateukcontact@gmail.com. We have assessed the ICO data protection fee rules and, because we only process personal data for our own accounts, marketing and as a processor for our customers, we do not currently need to pay the fee; we will register if that changes.

1. Customers (business owners who use Renomate)

What: name, business name, email address, website, notes you give us, billing status. Why: to provide the service and manage your account (contract). Your password is stored only as a salted hash. Kept: while your account is open and for up to 12 months after, then deleted. Payments are handled by Stripe; we never see card numbers.

2. People who email our customers (enquirers)

When someone emails a business that uses Renomate, we process their name, email address and message on that business's behalf so the assistant can reply. For this data the business is the controller and we are its processor (see the data processing terms in our Terms). We keep a short log (sender, subject, one-line summary, outcome) for up to 12 months and then delete it. Messages are processed by an AI service (see below). Every reply tells the sender it comes from an assistant.

3. Business contacts we email (marketing)

What: a business name and a generic business email address (for example info@) found on the business's own public website. Why: to tell registered companies about a service relevant to their customer enquiries. Lawful basis: legitimate interests (B2B marketing), balanced against your rights. We only email companies and other corporate subscribers, never sole traders or partnerships, as required by the Privacy and Electronic Communications Regulations (PECR). Source: the business's public website. Kept: until we send the email, then for up to 180 days; if you opt out we keep your address on a suppression list so we never email you again. Opt out: use the link in any email, or reply "unsubscribe". We act on it straight away.

Cookies

We set one cookie, rm_session, only when you log in. It is strictly necessary to keep you signed in, expires after 30 days or when you log out, and is not used to track you. We use no analytics, advertising or third-party tracking cookies. Because this cookie is strictly necessary, it does not need your consent, but we tell you about it and show a notice. Your choice to dismiss that notice is stored in your browser's local storage, not in a cookie. Stripe, which processes payments on its own pages, sets its own cookies there under its own privacy policy.

4. Visitors to this website

We use no advertising or analytics cookies. Our server keeps ordinary technical logs (IP address, page, time) for security for up to 30 days. If you use the demo box, the website address and question you type are sent to our AI provider to produce the example reply.

Who we share data with (processors)

We do not sell personal data.

Your rights

You can ask us for a copy of your data, to correct or delete it, to restrict or object to our use of it, and to object to marketing at any time. Email renomateukcontact@gmail.com. If you are unhappy you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

Our crawler

We read the public pages of a customer's own website to build their assistant's knowledge. See about our crawler.