For the purposes of the Data Protection Act 2018 (‘DPA’) and the EU General Data Protection Regulation (‘GDPR’), Claydon Heating Group Limited (‘we’ or ‘us’) is the ‘data controller’, which means that we are responsible for, and control the processing of, your personal data).
Usually we will have received personal data about you (such as your name, address, and contact details) from a third party to whom you have provided that information in connection with your wish to have a central heating system or part of a central heating system (such as a boiler) installed at your property. That information will be passed to us by the third party with your consent. If we receive such personal data we will notify you as soon as reasonably practicable (and in any event within one month) that we have received that personal data. We will notify you if we intend to disclose that personal data to anyone else. We may also obtain personal data about you (such as your name, address, and contact details) whenever you complete an online form by which you consent to us holding that personal data for the purpose specified on that form.
For example, we will obtain your personal data when you request us to install a central heating system or a new boiler.
We will use your personal data for the purposes described in the data protection notice that was given to you at the time your data were obtained. These purposes include:
To supply and install a central heating system or part of such a system for you
To register any guarantees for that system or part of a system
To process payment for that supply and installation
And for ancillary purposes such as:
research, statistical analysis and behavioural analysis
customer profiling and analysing your purchasing preferences
marketing—see ‘Marketing and opting out’ below
fraud prevention and detection
billing and order fulfilment
to notify you of any changes to this website or to our services which may affect you
improving our services
We will use the personal data that we hold or the purposes of:
performing any contractual or other obligations that we may have to you,
complying with our legal obligations, and
protecting our legitimate interests or those of others but only if it is necessary to do so and those interest are not overridden by your own interests or rights. You have the right to challenge those interests and to request that we stop processing your personal data on this basis. For further information see ‘Your rights’ below.
We can process your personal data for those purposes without your knowledge or consent, but we will not use your personal data held on that basis for any other purpose without telling you that we will do so and our legal basis for processing it.
We may also process your personal data for any purpose to which you have expressly consented. You can withdraw that consent at any time. For further information see ‘Your rights’ below. You should be aware that if you do not provide or withdraw consent to our processing certain personal data it may not be possible for us to continue to provide central heating installation services to you.
We will not hold or send your personal data outside the European Economic Area.
We may contact you [by email, phone, SMS] about our central heating services but only if you have asked us to do so. If you have changed your mind and would prefer us not to contact you, then you can opt out at any time. For further information see ‘Your rights’ below.]
We may disclose your personal data to:
other companies within our group
our service providers
law enforcement agencies in connection with any investigation to help prevent unlawful activity
We will use technical and organisational measures to safeguard your personal data, for example:
we store your personal data on secure servers
payment details are encrypted using SSL technology]
Whilst we will use all reasonable efforts to safeguard your personal data, you acknowledge that the use of the internet is not entirely secure and for this reason we cannot guarantee the security or integrity of any personal data which are transferred from you or to you via the internet.
We may monitor and record communications with you (such as telephone conversations and emails) for the purposes of quality assurance, training, fraud prevention and compliance.
If you give us information on behalf of someone else (for instance if your property is tenanted and you provide us with personal data about the tenant to allow us to carry out an installation) you confirm that the other person has authorised you to act on his or her behalf and has agreed that you can: give consent on his or her behalf to the processing of his or her personal data; and receive on his or her behalf any data protection notices.
We will not retain your personal data for longer than is reasonably necessary for the purpose for which it was obtained, and unless we have agreed otherwise with you we will at the end of the retention period(12 months, except where we are required by law to retain the personal data for a longer period or the data will be required for performance of our obligations after this period) securely destroy or delete it from our records.
You have the right to information about what personal data we process, how and on what basis as set out in this policy.
You have the right to access your own personal data by way of a subject access request. We will respond as soon as reasonably practicable and in any event within one month unless the request is complex or numerous in which case the period in which we must respond can be extended by up to a further two months. There is no fee for making a subject access request, but if your request is manifestly unfounded or excessive we may charge a reasonable administrative fee or refuse to respond to your request. You can correct any inaccuracies in your personal data. To do you should contact us via the contact details at the bottom of this policy].
You have the right to request that we erase your personal data if we are not legally entitled to process it without your consent or if it is no longer necessary to process it for the purpose for which it was collected. To do so you should contact us via the contact details at the bottom of this policy].
While you are requesting that your personal data is corrected or erased or are contesting the lawfulness of our processing, you can apply for its use to be restricted while that application is made. To do so you should contact us via the contact details at the bottom of this policy].
You have the right to object to data processing where we are relying on a legitimate interest to do so and you think that your rights and interests outweigh our own and you wish us to stop such data processing.
You have the right to object if we process your personal data for the purposes of direct marketing.
You have the right to transfer your personal data to another data controller. We will not charge for this and will in most cases aim to do this within one month.
With some exceptions, you have the right not to be subjected to automated decision-making. You have the right to be notified of a data security breach concerning your personal data.
In most situations we will not rely on your consent as a lawful ground to process your data. If we do however request your consent to the processing of your personal data for a specific purpose, you have the right not to consent or to withdraw your consent later. To withdraw your consent, you should contact us via the contact details at the bottom of this policy].
You have the right to complain to the Information Commissioner. You can do this be contacting the Information Commissioner’s Office directly. Full contact details including a helpline number can be found on the Information Commissioner’s Office website (www.ico.org.uk). That website has further information on your rights and our obligations.
We welcome your feedback and questions. If you wish to contact us, please send an email to [email@example.com] or you can write to us at [36 Priory Road, Romford Essex RM3 9AT] or call us on [0170 8782 350]. Our registered office is 54 Sun Street, Waltham Abbey, Essex, EN9 1EJ.