Privacy Policy
Last updated: May 2026
Who We Are
AC Journey is a trading name of NH Strategic Business Solutions Ltd, a company registered in England and Wales with company number 15374206. Registered office: 1 Queen's Park Road, Handbridge, Chester, Cheshire, United Kingdom, CH4 7AD. We operate a platform that helps UK homeowners connect with air conditioning installers. For the purposes of UK GDPR, NH Strategic Business Solutions Ltd is the data controller for personal data processed through this website.
Personal Data We Collect
Homeowner lead details
When a homeowner requests quotes, we collect and store name, email address, telephone number, address, postcode, property details, timeline, notes, and optional photos submitted with the form.
Installer account details
For installer signups, we collect business and account details including contact name, business name, business postcode, service coverage areas, email, and hashed password credentials through Supabase Auth.
Technical and service data
We process service logs and security metadata such as IP address and request metadata to secure the platform, prevent abuse, and diagnose operational issues.
How We Use Personal Data
- To match homeowners with relevant installers and manage lead claiming.
- To provide installer account access, dashboards, and transaction history.
- To send service messages such as account actions, lead confirmations, and receipts.
- To maintain platform security, monitor misuse, and improve service performance.
Lawful Bases Under UK GDPR
- Contract: where processing is needed to provide installer accounts and core platform services.
- Legitimate interests: where processing is required for lead matching, fraud prevention, service security, and platform operations.
- Consent: where you have clearly opted in, such as submitting optional content.
Cookies and Similar Technologies
We use strictly necessary authentication cookies set by Supabase, typically named with ansb-*prefix. These cookies are required to keep users signed in and to protect account sessions.
We do not use advertising cookies or cross-site remarketing tags. We do use Vercel Analytics for privacy-friendly aggregate usage insights so we can understand overall site performance.
The quote form uses Cloudflare Turnstile as a bot check. Turnstile may use client-side storage or similar technologies needed to verify that the form is being submitted by a person.
Third-Party Processors
- Supabase for database, authentication, and secure storage.
- Stripe for payment processing and transaction records.
- Resend for transactional service emails.
- Vercel for hosting, deployment, and aggregate analytics.
- Cloudflare Turnstile for bot checks and abuse prevention on quote submissions.
- Sentry for error monitoring, diagnostics, and service reliability.
- Upstash for rate limiting and abuse protection.
- Slack for internal operational alerts about service issues.
International Data Transfers
Some of our service providers are based outside the UK or may process data in other countries, including the United States. Where personal data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or other lawful transfer mechanisms required by UK GDPR.
Data Retention
We retain personal data only for as long as needed to deliver the service, maintain financial and audit records, meet legal obligations, and resolve disputes. When data is no longer required, it is deleted or anonymised.
Your UK GDPR Rights
You have the right to request access, rectification, erasure, restriction, portability, and objection in relation to your personal data. You also have the right to complain to the Information Commissioner's Office if you believe your data has been handled unlawfully.
Contact
For privacy queries or rights requests, contact us at hello@acjourney.co.uk. You can also write to us at our registered office: 1 Queen's Park Road, Handbridge, Chester, Cheshire, United Kingdom, CH4 7AD. We may request verification details before completing a rights request.
In short: we use essential account cookies, privacy-friendly aggregate analytics, and the data needed to operate the marketplace and homeowner request journey.