Privacy Policy
Last updated 5 November 2026
Who we are
Supaquote is run by [your name or company name], [your postal address]. We are the controller of the personal data described in this policy, except where we say below that we act for you. Contact us at [your contact email].
What we collect
- Your account: your email address, your business name, and your password, which we store only in scrambled (hashed) form.
- What you put into quotes: job descriptions, materials, prices, labour, notes, and the names, phone numbers and email addresses of your customers.
- Account emails: we email you about your account, such as password resets, confirming a new login email, and security notices. We keep a short-lived record of reset and confirmation links.
- Contact messages: your name, email and message if you use our contact form.
- Browser extension: if you connect it, the items you choose to add to a quote (product name, code, merchant, price, page address, date and quantity).
- Technical data: our hosting provider keeps server logs (such as IP address, browser type and pages requested) for security and to keep the service running.
The Chrome extension
The extension reads the product name and prices on the merchant page you have open, inside your own browser, so you can pick a price. It does not send us your browsing history. Nothing leaves your browser except the items you add to a quote after connecting your account. By default it can only read a list of UK merchant websites, and it asks you before it reads any other site.
Cookies
We use only the cookies the site needs to work: one that keeps you signed in and one that protects forms from forgery. We do not use advertising or tracking cookies, and we do not run analytics at the moment. If that changes we will update this page.
Why we use your data
- To provide the service you asked for (our contract with you).
- To keep the service secure, prevent abuse and fix problems (our legitimate interests).
- To reply to your messages (our legitimate interests).
- To meet legal obligations.
Your customers’ data
When you put your customers’ details into a quote, you decide why and how it is used, so you are the controller and we process it for you, only to run Supaquote. You are responsible for having a lawful reason to hold it and for telling your customers, for example in your own privacy notice.
Who we share data with
We do not sell your data or use it for advertising. We use a hosting and database provider, Railway, to run the service, and an email delivery provider, Resend, to send account emails. They process data on our behalf. We may disclose data if the law requires it.
Data stored abroad
Our hosting provider may store data outside the UK. Where it does, we rely on appropriate safeguards required by UK data protection law.
How long we keep it
We keep your account and quotes while your account is open. You can delete your account yourself from the Account page, or ask us to. When you do, we delete your data, except for copies in routine backups, which are overwritten in the ordinary course. We keep contact messages for up to 12 months.
Security
We use encrypted connections (HTTPS), store passwords hashed, and separate each business’s data from others. No system is perfectly secure, so please use a strong, unique password and keep your extension key private.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or stop how we use it, or move it to another service. Email [your contact email] and we will respond within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office at ico.org.uk.
Changes
We may update this policy and will change the date above when we do.