My Commitment to GDPR

On May 25, 2018, the European Union’s General Data Protection Regulation (GDPR) takes effect. GDPR regulates the governance of personal data for EU citizens with an emphasis on data security and privacy. The GDPR does not only apply to companies that operate in the EU. This regulation will also impact companies operating outside of the EU if they have any EU customers or personal data of anyone in the EU.

The GDPR imposes additional requirements upon organisations to strengthen the security and enhance the protection of personal data of EU residents.

I recognise the importance of passing regulations to advance information security and data privacy for citizens of the EU, and all citizens, regardless of their location.

I am firmly committed to GDPR compliance.

Definition of Data Controller and Data Processor

A data controller is the person or organisation that decides the purpose for which and the way in which any personal data is processed. A Data processor refers to the person or organisation which processes personal data on behalf of the controller.

The data controller is Daniel January (D&D Heating)

The data protection officer is Daniel January who can be contacted directly at info@danddheating.co.uk

My Services

My services cover the installation, service and repair for all apects of plumbing, heating and gas works. The majority of information I deal with on a day to day basis is solely used for the purpose of contacting clients.

Information I hold, which is subject to confidentiality, relates to client details, names and addresses, email addresses, telephone numbers and certification where necessary.

This privacy policy pertains to all services I offer whether they’re listed here explicitly in this document or not.

Privacy Notice

This Privacy Notice is meant to help you understand what Personal Data I might collect, why I collect it, and what I do with it. It also describes the choices available to you with regard to the use of your Personal Data and how you can access and update this information.

I am committed to protecting the privacy of websites visitors and customers.

I have adopted the following principles to govern the use, collection, and transmittal of Personal Data, except as specifically provided by this Policy or as required by applicable laws:

• Personal data will only be processed fairly and lawfully
• I do not collect any more personal data than is necessary to provide the services
• I only use your personal data for the purposes I specify in this Privacy Notice, unless you agree otherwise
• I do not keep your personal information if it is no longer needed
• I do not sell, distribute or share your personal information with third parties
• You can have your data updated at any time
• You can remove your data at any time
• You can request a copy of the data I store on you at any time
• Personal data is securely stored and managed

What Is Personal Data?

Personal data is any information that relates to an identified or identifiable living individual. Different pieces of information, which collected together can lead to the identification of a particular person, can also constitute personal data.

Personal data is subject to the protection requirements set out in the GDPR.

Examples of data considered as personal data:

• a name and surname
• a home address
• an email address such as YourName@company.com
• telephone numbers

What and How I Collect and Maintain Information

I collect and maintain information about my customers which may include:

• First and last name
• Postal address
• Phone and fax numbers
• Website URL
• E-mail address

In order to communicate with me or to use my services, you may be prompted to provide certain personal data in the following ways:

• By filling in forms (i.e. a “Contact Us” form) on my websites
• Contact directly (i.e. by phone, SMS, email or post)
• By downloading or accessing my services
• When we enter into a relationship for the intended delivery of services. I will require your name, address, email address and contact numbers. This information is generally exchanged through phone or text message and forms part of a business record for maintaining contact and accounts.
• By corresponding with me by phone, e-mail or otherwise using my contact details

Typically, the personal data you give me may include name and telephone number, and any personal details required to resolve any enquiries or complaints.

Customer Support and Service

When customers contact me for support or other customer service requests, I maintain records related to the requests through email, including any information provided and related to such support or service requests.

How I Use Personal Data

I use personal data provided by you to provide services.

I will never share your personal data, or otherwise make your personal data available to any third parties for the purposes of marketing or targeting you. I will not sell, rent, or exchange your personal data with any third-parties.

I use your personal data to:

• Conduct and develop my business with you
• Provide you with documentation or communications which you have requested
• Correspond with you to resolve your queries or complaints
• Provide you with any services you request
• Protect and ensure safety of the all data collected

Definition Data Processing

The meaning of data processing is defined as any operation performed on personal data whether by automated systems or not and includes collection, use, recording etc.

The extent of “data processing” performed on the personal data I hold is limited to the management and maintenance of existing business relationships and financial accounts. I do not use it for any other purpose.

Change of purpose

I will only use your personal data for the purposes for which I collected it. Where I need to use your personal data for another reason, I will do so only in circumstances where I reasonably consider it is compatible with the original purpose. In the event I use your personal data for a different purpose, I will notify you of the legal basis that allows us to do so before commencement.

How I Protect Your Personal Data

All of your Personal Data remains private and confidential. The security of your Personal Data is extremely important to me. I follow generally accepted standards to protect personal data submitted to me, both during transmission and once it is received.

Cookies

Cookies are small text files that are placed on your computer by websites that you visit. These text files can be read by these websites and help to identify you when you return to a website. Cookies can be “persistent” or “session ID” cookies. Persistent cookies remain on your computer when you have gone offline, while session ID cookies are deleted as soon as you close your web browser.

The websites I develop and the associated plugins and themes use both session and persistent cookies.

In general, cookies are used to retain user preferences, store information, and provide anonymised tracking data to third party applications like Google Analytics. As a rule, cookies will make your browsing experience better. However, you may prefer to disable cookies on this site and on others. The most effective way to do this is to disable cookies in your browser.

I will not use any hidden marketing or targeted advertising on my website. All of the cookies that are used are legitimate for the delivery of the service.

For the detailed information about how I use cookies, please read the cookie policy statement at the bottom of one of my website.

Links

My websites, documentation pages or blog might include links to other websites whose privacy practices may differ from those of my own. If you submit information to any of those sites, your information is governed by their respective privacy policies. I encourage you to carefully read the Privacy Policy of any website you visit before engaging with them in any way.

I cannot take responsibility for any interaction you have with 3rd parties or services that are not directly my own.

Your Rights under the Personal Data Protection Laws

As my Customer or User, you have the right to:

• Request access to your personal data (known as a data access request). This enables you to receive details of the personal data I hold about you and to check that I am lawfully processing it.
• Request Correction of the personal data that I hold about you.
• Request erasure of your personal data. This enables you to ask me to delete or remove personal data where there is no good reason for me to continue processing it.

Data Retention Period

I will only retain your personal data for as long as is necessary to fulfil the purposes for which it is collected.

Data retention periods will depend upon a number of factors such as:

• The requirements of our business relationship and services provided;
• Relevant statutory or legal obligations;
• The purposes for which the data was originally collected;
• The lawful grounds upon which I based the processing;
• They types of personal data collected;
• The amount and categories of your personal data;
• Whether the purpose of the processing could be achieved by other means.

My normal data retention period for data received in connection with my operations and services will be 7 years in line with regulatory requirements unless there is a legitimate interest for retaining that data for a longer period.

Consent Withdrawal

You may withdraw your consent at any time by contacting me at info@danddheating.co.uk

Example of long-term data retention

I am required by law to be able to record sales and tax information for up to 7 years. In this case I must retain any pertinent information on these transactions.

Changes to this Privacy Notice

I may change this Privacy Notice from time to time by updating this page in order to reflect changes in the law and/or my privacy practices. I encourage you to check this Privacy Notice for changes whenever you visit one of my websites. Each privacy notice will note the date it has been released, I will also inform you of changes through my newsletter.

How to Contact Me

If you have any questions about this Privacy Policy or complaints about how I process your Personal Data and you want to contact me, you can do that by going to the Contact Us section of my websites.

ICO office

You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues, at any time. The ICO’s contact details are as follows:

Information Commissioner’s Office

Wycliffe House, Water Lane, Wilmslow, Chesire, SK9 5AF

Telephone 0303 123 1113 (local rate) or 01625 545 745 (national rate).

Website – https://ico.org.uk/concerns

Return to Home