Privacy policy
Last updated: 10 October 2026
1. Who we are
The REVPOS service is provided by CUBEXLUMINA LTD, a private limited company registered in England and Wales under company number 17384754, with its registered office at 32 Manor Square, Dagenham, United Kingdom, RM8 3SA. For the personal data described here, we are the controller under the UK General Data Protection Regulation and the Data Protection Act 2018. For any question about your data, write to us at contact@revpos.co.uk, or call or message us on WhatsApp on +44 7337 667 897.
2. What data we use
About customers: name, phone number and e-mail address, the address where the work is done, the photos and measurements you send us, including through the quote form on the site, the details of your customer account if you create one (with a password that we store only in protected form), the quotes we make, invoicing details, payment history and the conversations you have with us by phone, WhatsApp or e-mail. Card details are handled only by the payment processor; we do not see or store them.
About tradespeople: name, phone number, trading name and address, Unique Taxpayer Reference, Construction Industry Scheme verification details, VAT registration number where there is one, their trade, the bank account we pay them into, and the invoices and payment statements for the jobs they carry out.
Conversations about a job: if you and the tradesperson use the conversation in your REVPOS accounts, we store the messages and photos you send each other about that job. Our staff can read them to deal with questions and complaints. When there is a new message we tell you by e-mail and, if you turned notifications on for a device, by a notification on that device; for this we keep the address your browser gives us, until you turn notifications off or log out.
The photos you send may show the inside of your home. We use them only for the quote and for the work.
3. Why we use it and on what basis
| Purpose | Lawful basis |
|---|---|
| Preparing the quote, at your request | Steps taken before entering into a contract (Article 6(1)(b) UK GDPR) |
| Carrying out the work, scheduling the tradesperson, keeping in touch with you | Performance of the contract (Article 6(1)(b)) |
| Payments, invoices, accounting records, Construction Industry Scheme returns | Legal obligation (Article 6(1)(c)) |
| Handling complaints, defending legal claims, preventing payment fraud | Our legitimate interests (Article 6(1)(f)) |
We do not sell personal data and do not use it for anyone else's advertising.
4. Who we share data with
The tradesperson carrying out the work receives only what they need to do the job: your name, phone number, the address of the work and its description, with the photos. The tradesperson does not receive your payment details.
We also use providers who process data on our behalf, under contract: WhatsApp for conversations, the payment processor for card payment, our accounting and invoicing provider and the website's hosting provider. We pass data to HM Revenue and Customs and other authorities where the law requires it.
5. Transfers outside the United Kingdom
Some of our providers store or process data outside the United Kingdom, including in the European Economic Area and the United States. Where they do, the transfer relies on UK adequacy regulations or on the safeguards approved for UK transfers, such as the International Data Transfer Agreement.
6. How long we keep data
If you asked for a quote and did not accept it, we keep the data for 12 months from the last conversation, so that we can pick the quote up again if you come back. Data about completed work, with its photos and conversations, is kept for 6 years from handover, to deal with complaints and legal claims. Invoices, payment records and Construction Industry Scheme records are kept for the period required by tax law.
7. How we protect it
Only the people dealing with your quote and your job have access to your data. Payment is made on the payment processor's secure page. If a security breach is likely to put you at high risk, we tell you without undue delay and, where the law requires, we report it to the Information Commissioner's Office.
8. Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to its use and to data portability. Write to the contact details in section 1 and we reply within one month. If you are not satisfied with the reply, you can complain to the Information Commissioner's Office, ico.org.uk, telephone 0303 123 1113.
9. Changes
If we change this policy, we publish the new version here, with its date.