Painted Operations

Painted Operations is built and run by Painted Bespoke Joinery Ltd (company no. 15180866), Unit 2 Mill Lane Trading Estate, Croydon CR0 4AA. It also serves Painted Ltd (company no. 13767710), the spray finishing side of the business.

It is not a public product and it is not sold to anyone. Only Painted employees hold an account, every account is created by a director or manager, and sign-in requires a password plus a second step. There is no sign-up open to the general public, and no trial or free tier.

Customers have a separate, much smaller portal for approving work, downloading paperwork and paying an invoice. The customer portal has no Google connection of any kind.

It carries the work of the business from first enquiry to aftercare. In one place staff can:

• Take an enquiry from the website, email, phone or a social message.
• Price it, build the quote and send it for approval.
• Turn an approved quote into an order, with the full scope of work.
• Plan the workshop — the diary, machine bookings, the bench, priorities and stage timings.
• Record hours, materials, purchase orders and stock movements.
• Book deliveries and installations, and capture proof of hand-over.
• Raise invoices, take payment and chase what is outstanding.
• Run the shop and trade accounts.
• Handle snags, guarantees and aftercare afterwards.

One part of it — the marketing desk — brings Painted's own Google accounts into the same screen, so staff can see enquiries arriving by email alongside how Painted's advertising, website traffic and search listings are doing.

A member of staff chooses to connect a business-owned Google account. Google shows the permissions before access is granted, and nothing is accessed before that. We ask for the narrowest permission that makes the feature work — read-only wherever read-only is enough. The full list is below.

Gmail is read only for the connected business mailbox; the send permission is used only to send a message a member of staff has written or approved. We never delete or change a message in Gmail, and an advertising change is only sent to Google Ads after an authorised member of staff approves it on screen.

1. A member of staff opens Settings and chooses to connect a Google account.
2. We send them to Google's own sign-in screen, which names Painted Operations and lists every permission being requested.
3. Nothing is accessed unless they agree. If they cancel, nothing is stored and nothing changes.
4. If they agree, Google returns access and refresh tokens to our server. The tokens are written straight into our private database and are never sent to a browser or shown on screen.
5. The connection then appears in Settings with the account email address, the permissions granted and the date it was connected.
6. From that point the marketing and sales features read only what the granted permissions allow, on request or on a scheduled refresh.

• No public sign-up: only Painted employees can hold an account.
• No access to a personal Google account — only business accounts staff connect.
• No deleting, editing or archiving of anything in Gmail.
• No advertising change without a named member of staff approving it first.
• No selling, renting or brokering of Google user data. Ever.
• No use of Google user data for advertising, retargeting or profile building.
• No use of Google Workspace data to train generalised or non-personalised AI models.
• No sharing with any third party beyond the processors named in our privacy notice.

Google sign-in tokens are held in our private database and read only by trusted server code. Everything travels over an encrypted connection and is encrypted at rest. What a member of staff can see depends on their role, and sensitive actions are logged.

Information taken from Gmail is available only to authorised Painted staff, and email content copied into an enquiry record is deleted after 3 months. Reporting figures from Ads, Analytics, Search Console and YouTube are refreshed as staff use the reports; we do not keep raw Google API responses longer than the reports need.

Gmail content may be sent to Google Gemini only to classify an enquiry, summarise a conversation or draft a reply for the staff member using the feature, and a person always reviews a draft before it goes out.

We do not sell Google user data, pass it to data brokers, use it for advertising profiles, or use it to train generalised artificial-intelligence models. Painted's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. The full detail is in our privacy notice.

Staff can disconnect a Google account inside the application at any time. That deletes the stored access and refresh tokens immediately, and the features that relied on the connection simply stop showing figures.

The account holder can also remove Painted's access from the third-party connections page in their Google Account. Revocation stops any further access at once. Anything already copied into a business record we must keep — an order, an invoice — stays under the retention periods in the privacy notice.

To ask us to delete Google user data we are not legally required to keep, email info@painted.co.uk, ring 020 8944 2817, or write to Painted Bespoke Joinery Ltd, Unit 2 Mill Lane Trading Estate, Croydon CR0 4AA. We answer within one month.

Painted Operations is run by Painted Bespoke Joinery Ltd, Unit 2 Mill Lane Trading Estate, Croydon CR0 4AA. Email info@painted.co.uk or ring 020 8944 2817 with any question about this page, the permissions it describes or a data request.

See also our privacy notice, cookie notice and terms. This page was last updated on 3 September 2026.