Privacy notice
How we use information about homeowners, business listings and professional accounts.
Updated 26 October 2026 · Version 2026-10-26.1
Who is responsible
nextgen.glass is operated by Leon Finch trading as Glass Marketplace, 7 Southwell Road, Mansfield, NG18 4EA, United Kingdom. Contact customerservice@nextgen.glass for support, complaints@nextgen.glass for complaints and gdpr@nextgen.glass for privacy enquiries. Leon Finch is the controller responsible for the personal information used by this service.
Your glazing request
We collect your name, email, phone, postcode, service, urgency, job title and description. We record submission and acceptance times, a hashed request-management credential, purchases, recipients and quotes. We use these details to provide the matching service you request and administer your request, relying on performance of our contract with you. Required details enable professionals to understand and respond to the job. Do not include sensitive personal information or details about other people that are unnecessary for the work.
What professionals receive
The public marketplace shows a generated service summary, urgency, approximate area and outward postcode. Your free-text title and description, name, email, phone and full postcode are available only to professionals who have paid for access. Up to 10 independent businesses may buy access. They may call or email about this job and provide a quote; purchasing does not authorise unrelated marketing or resale. These businesses are normally independent controllers and must provide their own privacy information. Your request page shows businesses whose access to your details has been recorded.
Closing a request and stopping sharing
Close your request to stop new purchases and new recipients. Businesses that already accessed your details can continue using the site to retrieve them until the access period ends. Choose Stop sharing to block further retrieval through the site, including existing buyers. Neither action recalls information already received or deletes all records. Contact us for help with a recipient or a data-rights request. Request management and contact access through the site end 90 days after posting.
Imported business listings
We hold business names, addresses, postcodes, phone numbers, emails, websites, services and source/enrichment records obtained from public business directories and business websites, or supplied by businesses. Some records identify sole traders or named contacts. We use this information to maintain a useful and accurate directory and review ownership claims, relying on legitimate interests in those purposes where personal data is involved. Ask us for the recorded sources of your listing, correction, removal or review of an objection. Public availability does not remove your data rights. You do not need to pay or claim a listing to exercise them.
FREE and PRO visibility
FREE listings display business name, town and postcode. Active PRO listings also display the business contact details and fuller profile. Maps use approximate postcode locations. An imported listing is not proof that the business registered, endorsed the service or passed qualification checks.
Accounts and payments
ChatGPT sign-in supplies an account identifier, name and email. We use account and profile details to manage listings, subscriptions, purchases and quotes. Our basis is contract where the individual is our customer, or legitimate interests in administering a company account where its representative acts for it. Airwallex processes hosted checkout and recurring payments. We retain amounts, transaction references, payment status and acceptance records; card details are entered with Airwallex and are not stored in our application database.
Support, security and marketing
We use relevant records to answer enquiries, protect accounts, prevent abuse and resolve disputes, relying on legitimate interests. We rely on legal obligations where applicable to financial records and data-rights or complaint handling. Posting a job, being listed or creating a FREE account does not subscribe you to marketing. Any future marketing must follow applicable permission and opt-out rules. We may retain a minimal suppression record to respect an objection. We do not make solely automated decisions with legal or similarly significant effects about you.
Providers and recipients
Our providers include OpenAI Sites and ChatGPT sign-in, Cloudflare hosting/database and Turnstile security, Airwallex payments, Mapbox maps and Postcodes.io postcode lookup. Postcodes.io receives the postcode checked by our server. Optional directory maps connect your browser to Mapbox only after you choose to load one. Optional location maps connect to OpenStreetMap, operated by the OpenStreetMap Foundation, after you choose Load map. The map provider receives your IP address, browser information and the map area requested; its privacy notice applies to that connection. Sign-in, security checks and checkout involve those providers and their own privacy information. We may disclose necessary records to professional advisers, regulators or authorities where legally required or needed to protect legal rights.
Optional analytics and advertising
With your consent we use Google Analytics 4 to understand visits to public pages. Google receives a browser identifier, page path/title, referring website and device/browser information. We exclude private account, admin, quote, request and job pages, query strings and fragments, and do not send contact details, form contents or account identifiers. Google signals, ad personalisation and automatic form/search/outbound-click measurement are disabled. Analytics cookies and your saved choice last up to 180 days; cookies may renew when used. Use Cookie settings in the footer to reject or withdraw consent. Withdrawal stops future measurement but does not erase earlier data. Google may process information outside the UK; see policies.google.com/privacy and policies.google.com/technologies/partner-sites. Google Analytics event-level retention is controlled in our property settings. AdSense registration currently uses only a verification meta tag and ads.txt record; no advertising library or advertising cookies are loaded.
International processing
Provider infrastructure and support may process information outside the UK. The countries, provider roles and applicable transfer arrangements depend on the services in use. Contact gdpr@nextgen.glass for information about the arrangements applicable to your data or a copy of relevant safeguards. We do not represent that all processing takes place in the UK.
Retention
We retain information while needed for an active request/account and relevant support, security, payment or legal matters. Homeowner contact access ends after 90 days; lead records become due for a retention review after 180 days. This review considers unresolved quotes, complaints, disputes and legal holds, and removes or anonymises unnecessary information. Directory accuracy and objections are reviewed separately; a useful business listing does not justify retaining unnecessary private information indefinitely. Financial and acceptance records may need to remain after account closure for applicable record-keeping duties or legal claims. Cookie expiry, closing a request and stopping sharing do not themselves erase stored records. Ask us about the retention decision for your records.
Your rights
Depending on the circumstances, you can request access, correction, deletion, restriction and a portable copy. You can object to processing based on legitimate interests; direct-marketing objections must be respected. If a separate activity relies on consent, you may withdraw it without affecting earlier lawful use. Write to gdpr@nextgen.glass or our postal address with your request, account or listing reference. We may need proportionate identity checks. We normally respond within one month and explain any lawful extension.
Privacy complaints and changes
Contact complaints@nextgen.glass if you are concerned about our use of information. We acknowledge data protection complaints within 30 days, investigate and keep you informed without undue delay, and explain the outcome. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint/. We update this notice when processing changes and provide further information when required.