Privacy Policy

PROFESSIONAL REFURB, GAS AND HEATING LIMITED (Company No: 13299913), trading as PLUMHEAT, is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information.

1. Information We Collect

We may collect the following types of personal information:

• Name and contact details (address, email, telephone number)
• Payment information (credit/debit card details, bank account information)
• Property details relevant to the services we provide
• Service history and correspondence records
• Technical data such as IP address, browser type, and device information when you visit our website
• Any other information you provide to us directly

2. How We Use Your Information

We use your personal information for the following purposes:

• To provide and manage the services you request
• To process payments and send invoices
• To communicate with you about appointments, services, and updates
• To respond to your enquiries and complaints
• To improve our services and customer experience
• To comply with legal and regulatory obligations
• To send marketing communications (where you have opted in)

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract: Processing necessary for the performance of a contract with you
• Legal obligation: Processing necessary to comply with our legal obligations
• Legitimate interests: Processing necessary for our legitimate business interests
• Consent: Where you have given consent for specific purposes (e.g., marketing)

4. Data Sharing

We may share your personal information with:

• Our employees and engineers who need access to provide services
• Payment processors and financial institutions
• Professional advisers (accountants, lawyers, insurers)
• Regulatory bodies and authorities where required by law
• Third-party service providers who assist with our business operations

We do not sell your personal information to third parties.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Secure servers and encrypted data transmission
• Access controls and authentication procedures
• Regular security assessments and updates
• Staff training on data protection

6. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The retention period may vary depending on the context and our legal obligations.

7. Your Rights

Under data protection law, you have the following rights:

• Right of access: To request a copy of your personal data
• Right to rectification: To request correction of inaccurate data
• Right to erasure: To request deletion of your data in certain circumstances
• Right to restriction: To request restriction of processing
• Right to data portability: To receive your data in a structured format
• Right to object: To object to processing based on legitimate interests
• Right to withdraw consent: Where processing is based on consent

To exercise any of these rights, please contact us using the details below.

8. Cookies

Our website may use cookies and similar technologies to enhance your browsing experience. Cookies are small text files stored on your device that help us understand how you use our website. You can control cookie settings through your browser preferences.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party sites you visit.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new effective date.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

12. Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. The ICO can be contacted at:

Privacy Policy last updated December 2025