Privacy Policy

Effective Date: August 2025
Company: CombiCert Plumbing & Heating
Registered Address: Telford, Shropshire, UK

1. Introduction

CombiCert Plumbing & Heating (“we”, “our”, or “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, store, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

2. What Data We Collect

We may collect and process the following types of personal data:

• Identity Data: Name, company name (if applicable)
• Contact Data: Phone number, email address, property address
• Transactional Data: Details of payments, service requests, and job history
• Technical Data: IP address, browser type, operating system (via cookies)
• Marketing Preferences: Your preferences for receiving marketing or service updates

3. How We Collect Your Data

Your data may be collected through:

• Direct communication (via phone, website form, email, or in person)
• Online bookings or quote requests through our website
• Customer reviews, surveys, or social media interactions
• Cookies and similar tracking technologies on our website

4. Why We Use Your Data

We use your personal data for the following purposes:

• To respond to your queries and provide services (installations, servicing, repairs)
• To issue invoices and manage payments
• To schedule appointments and manage job records
• To send service reminders (e.g. annual boiler servicing)
• To meet legal and regulatory obligations (e.g. Gas Safe records)
• With your consent, to send occasional marketing communications

5. Legal Basis for Processing

We process your personal data under the following legal bases:

• Performance of a Contract: Where data is needed to fulfil our service agreement with you
• Legal Obligation: Where we are required to retain data (e.g. safety certificates)
• Legitimate Interests: For record keeping, business analytics, and operational efficiency
• Consent: For marketing or communications not directly related to service delivery

6. Data Sharing

We do not sell or rent your personal data. We may share it with third parties in the following limited cases:

• Gas Safe Register (for legal compliance and certification)
• Payment processors (to manage customer payments securely)
• Website and email hosting providers
• Subcontractors (where they are fulfilling a job on our behalf, under confidentiality)
• Legal, regulatory, or law enforcement agencies if required

7. Data Security

We apply robust technical and organisational measures to protect your data, including:

• Secure cloud storage with encryption
• Access control and password protection on devices
• Regular system updates and malware protection
• Staff confidentiality training

8. Data Retention

We keep your personal data only for as long as necessary to fulfil our contractual and legal obligations. Typically:

• Customer records and job data: 6 years after last service
• Financial records: 7 years for HMRC compliance
• Email correspondence: Up to 3 years unless deleted earlier

9. Cookies and Website Tracking

Our website uses cookies to improve functionality, performance, and analytics. You can manage cookie preferences in your browser. Cookies we use may include:

• Session cookies (to remember form inputs)
• Analytics cookies (e.g. Google Analytics)
• Functionality cookies (to save your settings)

10. Your Rights

You have the following rights regarding your data:

• Right to access – request a copy of your personal data
• Right to rectification – request correction of inaccurate data
• Right to erasure – request deletion of your data in certain circumstances
• Right to restrict processing – limit how your data is used
• Right to object – object to direct marketing or processing
• Right to data portability – request your data in a usable format

To exercise your rights, please email: info@combicert.co.uk

11. Third Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those third parties.

12. Changes to This Policy

This policy may be updated from time to time. The latest version will always be posted on our website with the effective date noted at the top.

13. Contact Us

If you have any questions about this policy or how we handle your data, contact us at:

CombiCert Plumbing & Heating
Email: info@combicert.co.uk
Telford, Shropshire, United Kingdom