Privacy Policy
Last updated: 06/04/2026
- We primarily use personal data to respond to enquiries and deliver IT services/quotes.
- If you submit a form, call, email, or message us, we will process the details you provide.
- MainSearch AI lists UK registered businesses using publicly available information from Companies House, Google Maps, and business websites to connect customers with local service providers. This data relates to limited companies, not individuals.
- Our website/hosting may log basic technical data for security and reliability.
- We do not sell personal data. We may share it with service providers who help us run the website and communications.
- You can request access, correction, deletion, or object to certain processing.
1. Who we are
Onmain (“we”, “us”, “our”) is responsible for personal data processed through this website and related enquiry channels (the “Services”).
Company: Onmain (England & Wales)
Company number: 14844512
Email: support@onmain.co.uk
Location: London, United Kingdom
MainSearch AI (ai.onmain.co.uk) is a platform operated by Onmain Ltd that connects customers with local repair and service businesses using artificial intelligence.
2. Scope
This policy applies when you:
- browse this website;
- contact us (forms, email, phone, messaging);
- request a quote, repair, IT maintenance, or related support;
- use any estimator/chat or AI-assisted features on this site (where available);
- use MainSearch AI to find or contact local service businesses;
- are a business listed on MainSearch AI, whether you have created an account or your business appears as an unclaimed listing based on publicly available information.
3. Personal data we collect
- Contact details: name, email address, phone number.
- Enquiry/service details: device type, brand/model, symptoms, issue description, preferred appointment times, and any information you choose to share.
- Communications: messages you send us and our replies (including call notes where relevant).
- Account information: where you create a MainSearch AI account (as a customer or business), we collect the registration details you provide, including email address, password (stored securely as a hash), business name, and postcode.
- Photos and attachments: where you upload images of a device or issue through MainSearch AI, we process those files to include them in your enquiry.
Like most websites, our hosting/infrastructure may automatically collect basic technical data for security and reliability, such as IP address, device/browser type, requested pages, timestamps, and error logs.
If you do not contact us, this type of technical data may be the only data processed when you browse the site.
MainSearch AI lists UK businesses to help customers find local service providers. For businesses that have not created an account on the platform (“unclaimed listings”), we collect and display business information from the following publicly available sources:
- Companies House (public statutory register): company name, registration number, registered office address, company status, SIC codes.
- Google Maps: trading name, trading address, phone number, website URL, aggregate Google review rating and review count.
- Business websites: services offered, contact details, opening hours.
- Trustpilot (where publicly available): aggregate review rating and review count.
This data relates to UK limited companies (legal entities) and does not include personal data of individuals. We do not list sole traders or unincorporated businesses. We do not collect or display the personal details of company directors or employees.
We do not intentionally collect special category data (for example: health information). Please avoid sharing sensitive information in free-text fields unless it is strictly necessary.
4. Cookies and similar technologies
Cookies are small files stored on your device. Some cookies are essential for the website to function. Others (like analytics/marketing cookies) are optional.
- We may use strictly necessary cookies to make the site work and keep it secure.
- We do not aim to use advertising/marketing cookies or behavioural tracking on this site.
- If we introduce analytics or optional cookies in the future, we will update this policy and, where required, provide choices/consent controls.
You can also control cookies through your browser settings (blocking or deleting cookies may impact site functionality).
5. How we use your data and lawful bases
We process personal data only where permitted under UK data protection law. Depending on the context, our lawful bases may include: legitimate interests, steps prior to entering a contract, performance of a contract, legal obligations, and consent (where applicable).
- Purpose: reply, troubleshoot, quote, and arrange next steps.
- Lawful basis: legitimate interests and/or steps prior to contract.
- Purpose: bookings, repairs/maintenance, updates, completion and aftercare.
- Lawful basis: performance of a contract.
- Purpose: security monitoring, preventing abuse, diagnostics, and reliability.
- Lawful basis: legitimate interests and/or legal obligations.
- Purpose: understand your enquiry, provide a guidance estimate, and route your case to a human technician where needed.
- Lawful basis: legitimate interests and/or steps prior to contract.
- Important: estimates are guidance only; final pricing may require inspection/diagnosis.
- Purpose: match customers with relevant local service businesses based on their enquiry, location, and the services the business offers. For businesses with an account, the AI generates instant quote estimates using pricing the business has provided. For unclaimed listings, customer enquiry details are forwarded to the business so they can respond directly.
- Lawful basis: legitimate interests (for both customers seeking services and businesses receiving leads) and/or steps prior to contract.
- Purpose: list UK registered businesses on MainSearch AI so that customers can discover and contact local service providers, even where the business has not yet created an account on the platform.
- Lawful basis: legitimate interests (Article 6(1)(f) UK GDPR). We have conducted a Legitimate Interest Assessment and concluded that this processing is necessary and proportionate, and that the interests of the listed businesses do not override our legitimate interests or those of our customers. A copy of this assessment is available on request.
- Data sources: Companies House, Google Maps, business websites, and Trustpilot (see section 3.3).
- Scope: only UK limited companies with a valid Companies House registration number are listed. Sole traders and unincorporated businesses are not included.
- Purpose: when a customer uses MainSearch AI and is matched with an unclaimed business, we forward the customer's enquiry details (issue description, device information, photos if provided, and postcode) to the business via email so they can respond with a quote.
- Lawful basis: legitimate interests. The email contains a genuine customer enquiry only and does not contain marketing material or promotional content for MainSearch AI.
- First contact transparency: the first email to an unclaimed business includes a notice explaining who we are, what data we hold, its source, and how the business can request removal of their listing.
If we send marketing communications, we will do so only where permitted by law. You can opt out at any time by contacting us or using an unsubscribe option (where provided).
6. Who we share personal data with
We may share personal data with trusted service providers who help us run the Services. We do not sell personal data.
- Hosting/infrastructure providers (website delivery, storage, logging).
- Email/communications providers (to send replies and service updates).
- Tools used to manage enquiries and support cases.
- Professional advisers (legal/accounting) where necessary.
- Technicians/contractors involved in your service request (only what's needed to complete the job).
- Businesses listed on MainSearch AI: when a customer submits an enquiry through MainSearch AI, the enquiry details (issue description, device type, photos, and postcode) may be shared with the matched business so they can provide a quote or respond. Customer email addresses and phone numbers are only shared where the customer has consented to direct contact.
Where a provider processes data on our behalf, they are required to keep it secure and follow our instructions.
7. International transfers
Some service providers may process data outside the UK. Where this happens, we use appropriate safeguards to protect personal data (for example, adequacy regulations and/or contractual protections).
8. Data retention
We keep personal data only for as long as necessary for the purposes described in this policy, including legal, accounting, and dispute resolution requirements.
- General enquiries: typically up to 24 months.
- Service/repair records: typically up to 6 years.
- Security/technical logs: typically up to 12 months.
- Marketing preferences: until you opt out/unsubscribe.
- MainSearch AI customer accounts and chat history: for the duration of the account plus up to 24 months after deletion.
- MainSearch AI business accounts: for the duration of the account plus up to 24 months after closure.
- Unclaimed business listings: until the business requests removal, or until the listing is no longer relevant (reviewed periodically).
- Forwarded enquiry records: up to 24 months.
Retention may vary depending on the service and legal requirements.
9. Security
We use reasonable technical and organisational measures to protect personal data, including access controls and secure systems. No transmission or storage method is 100% secure, but we work to minimise risk.
10. Rights for businesses listed on MainSearch AI
If your business appears on MainSearch AI as an unclaimed listing, you have the following options:
- Claim your listing: You can create a free account on MainSearch AI to take control of your business profile, manage your pricing, and access the full platform features. Visit ai.onmain.co.uk or use the “Claim this business” link on your listing.
- Request removal: You can request that your business be removed from MainSearch AI at any time. Use the “Request removal” link on your listing, or contact us at privacy@onmain.co.uk. We will process removal requests within 72 hours.
- Access the data we hold: You can request a copy of the information we hold about your business by contacting privacy@onmain.co.uk.
- Object to processing: You have the right to object to the processing of your business data under Article 21 UK GDPR. Contact us at privacy@onmain.co.uk.
11. Your rights
Depending on the circumstances, you may have rights including:
- Access to your personal data.
- Correction of inaccurate data.
- Deletion (where applicable).
- Restriction of processing (where applicable).
- Data portability (where applicable).
- Objection to processing (including direct marketing).
- Withdrawal of consent (where consent is used).
To exercise your rights, contact us using the details in section 14. We may need to verify your identity.
12. Complaints
If you have concerns, contact us first and we will try to resolve them. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO).
13. Children
Our Services are not directed at children. If you believe a child has provided personal data to us, contact us and we will address it.
14. Contact
Email: support@onmain.co.uk
Privacy enquiries: privacy@onmain.co.uk
Location: London, United Kingdom
