Privacy Policy

The data controller responsible for your personal data is:

We do not have a Data Protection Officer (DPO). For any data protection queries, please contact us using the details above.

We only collect personal data that is necessary for the purposes described below.

We do not process any special category data (such as health, religion or biometric data) and we do not carry out any automated decision-making or profiling that produces legal or similarly significant effects on you.

We use PostHog (posthog.com) as our analytics tool. PostHog may set cookies and store data in your browser's local storage in order to recognise returning visitors and record session activity.

When you first visit our site the cookie banner lets you Accept all or Customise your choice. Customising shows two categories: Necessary (always on) and Analytics (optional).

Necessary (always on): anonymous, non-identifying analytics. PostHog records which pages and buttons are used and where you came from (for example a Google search, a Google ad via a gclid, campaign utm tags, or a direct visit), and stores a first-party identifier so we can recognise a returning browser. It does not record your session, use your IP address to determine your location, or link this activity to your name or phone number.

Analytics (only if you choose “Accept all”): in addition to the above, PostHog activates session recording and detailed behaviour and approximate location analytics. Input fields containing personal data (phone numbers, email addresses, passwords) are masked and never recorded. Your name and phone number are only ever attached to your profile when you submit a booking or callback form after accepting.

You can change your cookie preference at any time by clearing your browser's site data for frplumbing.co.uk, which will show the cookie banner again on your next visit.

We do not sell your personal data. We share it only with the following service providers (data processors) who act on our instructions:

• PostHog Inc. (posthog.com) — analytics and session recording. Data is processed on servers in the United States. PostHog is certified under the UK/US data bridge and provides appropriate safeguards under UK GDPR Article 46. You can review PostHog's privacy policy at posthog.com/privacy.
• WhatsApp / Meta Platforms — if you contact us via WhatsApp, your messages are transmitted through WhatsApp's infrastructure. Please refer to WhatsApp's privacy policy for details of their data processing.
• We may disclose personal data if required to do so by law or in response to a valid request from a public authority (such as the police or a court).

We review the personal data we hold annually and delete anything we no longer need.

You have the following rights in relation to your personal data:

• Right of access — you can ask us for a copy of the personal data we hold about you (a Subject Access Request).
• Right to rectification — you can ask us to correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") — you can ask us to delete your personal data where we no longer have a lawful basis to hold it.
• Right to restriction — you can ask us to pause processing of your data in certain circumstances.
• Right to data portability — where processing is based on consent or contract and carried out by automated means, you can ask us to provide your data in a structured, machine-readable format.
• Right to object — you can object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent — where we process data on the basis of your consent (analytics cookies), you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at fixedrateplumbingltd@gmail.com or by phone on 01223 739857. We will respond within one calendar month.

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection.

We would appreciate the opportunity to resolve your concern directly before you contact the ICO, so please get in touch with us first.

• Our website is served over HTTPS with a valid SSL certificate. All data in transit is encrypted.
• We limit access to personal data to those who need it to carry out their work.
• We do not store payment card details — no payments are taken through this website.

Our website contains a link to WhatsApp (wa.me). Once you click that link, you leave our site and WhatsApp's own privacy policy applies. We are not responsible for the privacy practices of third-party websites.

Our services are aimed at adults. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has submitted data to us, please contact us and we will delete it promptly.

We may update this privacy policy from time to time, for example when we start using new tools or when the law changes. The "Last updated" date at the top of this page will always reflect the most recent version. We encourage you to review this policy periodically.