Privacy information

Last updated 15 October 2026.

Who we are

EMHA Limited, trading as EMHA Construction & Maintenance, is the controller of the personal information described here. Company number 15418839, registered in England and Wales. Registered office: Flat 63 Rookery Court, 80 Ruckholt Road, London E10 5FA. For any privacy question or request, email info@emhaconstruction.co.uk.

What we collect

• Enquiries: your name, company name, email address, telephone number, the property address, details of the work and any photographs you send.
• Client portal users: your name, email address and password (stored only as a secure hash), and the jobs, messages, reports and invoices for your organisation.
• Tenant details: where an agent or landlord asks us to arrange access, the tenant's name and contact details. We do not collect key-safe or alarm codes through the website.
• Technical information: your IP address and browser details, used briefly for security, spam prevention and rate limiting. We store only a one-way hash of IP addresses, never the address itself.

Why we use it and our lawful basis

• To respond to enquiries and prepare quotations: steps taken at your request before a contract.
• To arrange, carry out and record work, and to run client portal accounts: performance of a contract.
• To contact tenants for access on behalf of an agent or landlord, to protect the website from spam and abuse, and to keep business records: our legitimate interests in running the business safely and efficiently.
• To keep invoices and accounting records: legal obligation (tax and company law).

Who we share it with

We use trusted service providers who process information on our behalf under contract. We do not sell personal information.

• Vercel (website hosting, private photo storage and, if enabled, the website assistant gateway). The website runs in London.
• Neon (database, London region).
• Cloudflare (domain name service and the Turnstile spam check on our forms).
• Google Workspace (our business email).
• Our email delivery provider, for confirmation and notification emails.
• Anthropic and Google, via Vercel, if you use the website assistant or the AI Design Studio. See below.

Some of these providers are based in, or may process data in, the United States. Where that happens, transfers are protected by the UK–US data bridge or the UK International Data Transfer Agreement or Addendum.

Website assistant

If the chat assistant is available on this site and you use it, your messages are sent to an AI model provided by Anthropic, through Vercel's AI Gateway, to generate replies. EMHA does not store chat conversations. They are kept only in your browser tab. Our providers may keep them briefly for security and abuse monitoring. Please do not share personal details you don't need to, and never share codes, passwords or payment details in the chat. The assistant can make mistakes and cannot give prices or make bookings.

AI tools (Design Studio, Problem Checker, Home Health Check)

If you use the Design Studio, the photo you upload is sent to an AI image model provided by Google, through Vercel's AI Gateway, to create a design concept. If you use the Problem Checker or the Home Health Check, your photos (and still frames taken from a video on your own device; the video itself is not uploaded) are sent to an AI model provided by Anthropic, through Vercel, to give you a first look. EMHA does not store these photos or designs unless you choose to send them to us, in which case both are attached to your enquiry and kept as described below. Please avoid photos that show people, documents or anything personal.

How long we keep it

• Enquiries that do not lead to work: up to 12 months.
• Job records, reports and photographs: 6 years after the job is completed, so we can deal with warranty questions or claims.
• Invoices and accounting records: 6 years from the end of the financial year they relate to.
• Client portal accounts: until the account is closed, then up to 12 months.
• Rate-limit and security records: no longer than 24 hours.

Cookies

We use only the cookies needed to keep you signed in to the client portal. We do not use analytics or advertising cookies. The Turnstile spam check may use similar technology to tell people from bots.

Your rights

You can ask for a copy of your information, ask us to correct or delete it, ask us to restrict how we use it, or object to our use of it, by emailing info@emhaconstruction.co.uk. You can also complain to the Information Commissioner's Office at ico.org.uk, but please contact us first so we can try to help.