Privacy Policy
Last updated: August 2026
Who We Are
AC Journey is a trading name of NH Strategic Business Solutions Ltd, a company registered in England and Wales with company number 15374206. Registered office: 1 Queen's Park Road, Handbridge, Chester, Cheshire, United Kingdom, CH4 7AD. We operate a platform that helps UK homeowners connect with air conditioning installers. For the purposes of UK GDPR, NH Strategic Business Solutions Ltd is the data controller for personal data processed through this website.
Personal Data We Collect
Homeowner lead details
When a homeowner requests quotes, we collect and store name, email address, telephone number, address, postcode, property details, timeline, notes, and optional photos submitted with the form.
Installer account details
For installer signups, we collect business and account details including contact name, business name, business postcode, service coverage areas, email, and hashed password credentials through Supabase Auth.
Technical and service data
We process service logs and security metadata such as IP address and request metadata to secure the platform, prevent abuse, and diagnose operational issues.
Installer discovery data
Our administrators may review public business listing information when identifying potential installers, including a business name, public address, telephone number, website, operating status and aggregate rating information. Some business information may be personal data where a business is operated by an identifiable individual. A live search sends only a generic domestic or commercial air conditioning category and the lead's outward postcode area to Google Maps Platform. It does not send the homeowner's name, contact details, full postcode, notes, photos, budget or detailed property information. Live results are not stored as prospect evidence. If information is independently verified from another public source and saved for review, we retain the minimum business identity, source and verification details needed for that purpose.
For limited companies and LLPs that may be suitable for AC Journey, we may also record a public generic business email address such as info@, sales@ or enquiries@ when it is published on the business's own website. We use public company, service-area and certification sources to check whether the business is relevant before Nick from AC Journey sends a founder recruitment message. We do not use personal email addresses for this process, and the website does not send these messages automatically.
How We Use Personal Data
- To match homeowners with relevant installers and manage lead claiming.
- To provide installer account access, dashboards, and transaction history.
- To send service messages such as account actions, lead confirmations, and receipts.
- To maintain platform security, monitor misuse, and improve service performance.
- To identify and independently review potential installers for a broad service area.
- To contact suitable incorporated installer businesses about joining AC Journey and relevant anonymised demand in the areas they publicly serve.
Lawful Bases Under UK GDPR
- Contract: where processing is needed to provide installer accounts and core platform services.
- Legitimate interests: where processing is required for lead matching, fraud prevention, service security, platform operations, and proportionate business-to-business installer recruitment using public generic contact details. Businesses can object or opt out at any time.
- Consent: where you have clearly opted in, such as submitting optional content.
Cookies and Similar Technologies
We use strictly necessary authentication cookies set by Supabase, typically named with ansb-*prefix. These cookies are required to keep users signed in and to protect account sessions.
We do not use advertising cookies or cross-site remarketing tags. We do use Vercel Analytics for privacy-friendly aggregate usage insights so we can understand overall site performance.
The quote form uses Cloudflare Turnstile as a bot check. Turnstile may use client-side storage or similar technologies needed to verify that the form is being submitted by a person.
Service Providers and Other Recipients
- Supabase for database, authentication, and secure storage.
- Stripe for payment processing and transaction records.
- Resend for transactional service emails.
- Vercel for hosting, deployment, and aggregate analytics.
- Cloudflare Turnstile for bot checks and abuse prevention on quote submissions.
- Sentry for error monitoring, diagnostics, and service reliability.
- Upstash for rate limiting and abuse protection.
- Slack for internal operational alerts about service issues.
- Google Maps Platform for admin-only public business discovery. Live listing results are displayed transiently and are not stored as prospect evidence. Google processes this use under its Privacy Policy.
International Data Transfers
Some of our service providers are based outside the UK or may process data in other countries, including the United States. Where personal data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or other lawful transfer mechanisms required by UK GDPR.
Data Retention
We retain personal data only for as long as needed to deliver the service, maintain financial and audit records, meet legal obligations, and resolve disputes. When data is no longer required, it is deleted or anonymised.
Active installer recruitment contact data is reviewed after 12 months without activity. If a business opts out, we keep the minimum suppression record needed to respect that request indefinitely. This prevents an opted-out public address from being added to a new contact sequence.
Your UK GDPR Rights
You have the right to request access, rectification, erasure, restriction, portability, and objection in relation to your personal data. You also have the right to complain to the Information Commissioner's Office if you believe your data has been handled unlawfully. A business receiving an installer recruitment message can also reply with an opt-out request, which we will apply to future founder recruitment contact.
Contact
For privacy queries or rights requests, contact us at hello@acjourney.co.uk. You can also write to us at our registered office: 1 Queen's Park Road, Handbridge, Chester, Cheshire, United Kingdom, CH4 7AD. We may request verification details before completing a rights request.
In short: we use essential account cookies, privacy-friendly aggregate analytics, and the data needed to operate the marketplace and homeowner request journey.