FIRE AND HEAT PRIVACY POLICY

Privacy

Last modified 25 May 2018

Introduction

We protect your personal data according to the requirements of the General Data Protection Regulation (GDPR). The GDPR requires data controllers such as ourselves to document our lawful basis for processing personal data. It also gives you rights over how your data is processed. This privacy policy documents the data we collect, why and how we process it, and how to exercise your rights.

Data controller

The data controller responsible for this website is Fireplaces and Heating Direct Ltd, who can be contacted at Unit 7, Marlborough Works, Archway Road, Luton, LU3 2QZ

Lawful basis for processing

For each method by which we collect personal data, this privacy policy documents our lawful basis for processing the data. Where we rely on your consent to process your data, we explain how you can withdraw your consent and delete your data.

Individual rights

The GDPR gives you rights over how your personal data is processed. You can exercise your rights by contacting us at Unit 7, Marlborough Works, Archway Road, Luton, LU3 2QZ. In some cases you can also exercise your rights through automated systems, as described at the relevant points in this privacy policy.

Security

The GDPR requires us to implement appropriate technical measures to protect data. We verify the identity of any individual who requests access to data before granting access.

Customer Data

We collect customer data during the confimation process for the work we will do for you. The data included will be your address and contact data plus data refering to your current installation and your future installation.

This data is stored in our secure accounts package with XERO, in our secure system to record and manage callouts and servicing, concurrent with warranty requirements and industry safety guidelines.

This data is only used to contact customers at anniversaries to remind them of the need to have their installation serviced. Customer data is not shared or sold or passed on in anyway to third parties other than where highlighted below.

Lawful basis for processing: Legal Obligation / Public Interest / Vital interests

Why? To allow us to complete certification under UK law and help maintain warranty requirements and maintain safe installations to protect inhabitants where installations have taken place.

Disclosures

We also disclose data with industry governing bodies, namely Gas Safe and HETAS, to certify your installation as required by UK law.

We may also share your contact data and installation information with the relevant manufacturer in the processing of your warranty, as required to do so, to complete the installation.

In addition to any sharing of data described elsewhere in this privacy policy, we may disclose data for legal reasons. If we suspect criminal activity we may disclose data relating to those involved or affected to the appropriate authorities. We may also be obliged to disclose data if we receive a request from an appropriate authority.

Cookies

Cookies are small pieces of text that are stored by your browser. Each cookie has a name and is associated with a particular site. When your browser sends a request to a site (for example, to download a page, image, or video), the computer that responds (known as a server) may tell your browser to set one or more cookies. When your browser makes further requests to the same site it sends the cookies back to the server. This allows the server to remember you as you browse the site, and provide features such as shopping baskets or password-protected areas.

Data collected by third parties on our behalf

Google Analytics

We use Google Analytics to track visitor interaction with our site in order to produce statistical reports. Google collects details of the pages you view and the time you viewed them, the features of your browser, and your IP address. We have enabled IP anonymisation so that Google will not store your complete IP address. For more information on how Google handles the data it collects, see Google’s privacy policy.

To opt out of Google Analytics tracking on our site, see the Google Analytics section of our cookie policy. To opt out of Google Analytics tracking on all sites, use the Google Analytics Opt-out Browser Add-on.

Lawful basis for processing: Pursuance of our legitimate interests 
Why? To allow us to analyse how visitors interaction with our site in order to improve our site and our services