Privacy Policy
Last updated: 24 September 2026
This policy explains what personal data we collect when you visit this website, send us an enquiry, ring or email us, or have us work on your home, and what we do with it. It follows the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
Who We Are And How To Reach Us
First Point Plumbing & Heating is the trading name of Lewis Harding, a sole trader. Lewis is the data controller: he decides how your personal data is used and is responsible for it.
- Address: 42 Peak Road, New Mills, High Peak SK22 4LD
- Email: info@firstpointplumbing.co.uk
- Phone: 01663 797412, answered 9am to 3pm, Monday to Friday
For any question about your data, or to use one of your rights, email us with “Data protection” in the subject line. A business of our size does not have to appoint a data protection officer, so data requests come to the office email above.
What We Collect
When You Send The Form On This Website
The details you type into the form, such as your name, email address, phone number, the address of the property, the service you need and what you tell us about the job. The form may also record technical details that come with the submission, such as the page you sent it from.
When You Ring, Text Or Email Us
Your phone number or email address, the messages you send, and the notes we make about the job.
When We Survey, Quote For Or Carry Out Work
We keep what the job needs, which can include:
- details of the property, the heating system and the appliances, with photos of the work before, during and after
- the make, model and serial numbers of what we fit or service
- gas safety, commissioning and service records
- your electricity meter number (MPAN) and usage figures, for solar panel and battery jobs
- quotes, invoices and payment records
- for care plan members, the plan, the registered equipment and the details needed to take the monthly payments
- practical notes, such as parking, access or pets
If you tell us about a health condition or a vulnerability in the household so that we can put you first or adapt a visit, we use it for that purpose alone and only with your explicit consent. UK GDPR treats this as special category data.
When You Visit This Website
Our hosting company’s servers log your IP address, browser and device type and the pages you request, which keeps the site running and secure. Statistics and marketing cookies only run if you accept them in the cookie banner. Our cookie policy lists the cookies this website uses.
Reviews Shown On This Website
When we show Google reviews on this website through Trustindex, each review shows the reviewer’s name as it appears on Google, the rating and the review text, all of which are already public on Google.
The Map On Our Contact Page
Our contact page has a map from Google Maps. It loads only if you accept marketing cookies or choose Show The Map on that page. When it loads, your browser connects to Google, which receives your IP address, browser details and the page you are on, and may set its own cookies. Google decides how it uses that data, as set out in Google’s privacy policy, and we receive none of it.
Why We Use It, And The Lawful Basis
UK GDPR lets us use personal data only where we have a lawful basis. This table sets out each use and the basis we rely on.
| What we use it for | Lawful basis |
|---|---|
| Replying to your enquiry, booking a survey, preparing a quote | Steps you asked us to take before entering into a contract |
| Carrying out the work, invoicing, honouring guarantees, running a care plan | Performing our contract with you |
| Keeping gas safety records, notifying new gas appliances for Building Regulations, keeping tax and accounting records | Legal obligation |
| Following up a quote you haven’t answered, reminding you when a service is due, asking for a review, keeping the website secure, handling complaints and claims | Our legitimate interests in running the business and looking after the systems we fit. You can object at any time. |
| Sending you news and offers by email or text | Your consent or, if you are an existing customer, our legitimate interests in telling you about similar services, with an unsubscribe option in every message |
| Statistics and marketing cookies | Your consent, given in the cookie banner |
| Health or vulnerability details you give us | Your explicit consent |
Marketing
We send marketing emails or texts where you have agreed to them, or where you have bought from us before and the message is about similar services. Every message has an unsubscribe link or a STOP reply, and you can also email us. Once you opt out, we keep your email address or number on a do-not-contact list so that you stay out of future sends.
We don’t sell your personal data, and we don’t pass it to other companies for their own marketing.
Who We Share It With
Companies That Handle Data For Us
These providers work on our instructions under a contract and may not use your data for their own purposes.
- GoHighLevel (LeadConnector): our customer records system. It runs the enquiry form on this website and sends our emails and texts.
- Microsoft 365: our email.
- SiteGround: hosts this website.
- Google: once we switch on Google Analytics and Google Ads, and only if you accept statistics or marketing cookies, they measure visits to this website and the results of our adverts.
- Trustindex: shows our Google reviews on this website, once the reviews widget is switched on.
- The software we use for quotes, job records and accounts, and the providers that process card payments and care plan payments.
Others, When Your Job Needs It
- equipment manufacturers, to register your warranty
- Gas Safe Register, which records new gas appliance installations and notifies your local council for Building Regulations
- your electricity network operator, to apply for a grid connection for solar panels or a battery
- our accountant, insurers and legal advisers
- HMRC, the police, a court or a regulator, when the law requires it
Transfers Outside The UK
GoHighLevel is a US company and stores data in the United States, and Google and Microsoft may also process data there. Where your data leaves the UK, we rely on the UK Extension to the EU-US Data Privacy Framework for providers certified under it, or on the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. You can ask us for a copy of the safeguard that applies to a given provider.
How Long We Keep It
We keep personal data only while we need it for the reason we collected it and to meet our legal, tax and gas safety record duties. After that we delete it, or strip out anything that identifies you.
| Record | How long |
|---|---|
| Enquiries that don’t become jobs | Until we no longer need them to deal with your enquiry |
| Customer and job records, quotes, invoices and payment records | For the time tax law requires, and while a claim about the work could still arise |
| Gas work records, including commissioning and gas safety records | As long as our gas safety record duties require |
| Care plan records | For the life of the plan, then for the time tax law and any claim require |
| Marketing preferences and the do-not-contact list | Until you opt out, then the do-not-contact entry for as long as we send marketing |
| Health or vulnerability details | Only for as long as the job needs them |
| Cookie choices and cookie data | As listed in our cookie policy |
| Server logs | The period set by our hosting company |
Your Rights
UK data protection law gives you these rights over your personal data:
- to be informed about how we use it, which is what this policy does
- of access: a copy of the personal data we hold about you
- to rectification: we correct anything wrong or incomplete
- to erasure: we delete your data where we have no reason left to keep it. Records the law makes us keep, such as gas safety and tax records, stay until their retention period ends.
- to restrict processing: we hold your data but stop using it, for example while we check a correction you asked for
- to data portability: the data you gave us, in a common electronic format, sent to you or to another company
- to object: to any use we base on legitimate interests, and to direct marketing at any time
- in relation to automated decision-making and profiling: we make no decisions about you by automated means alone
To use any of these rights, email info@firstpointplumbing.co.uk or ring the office. It costs nothing. We reply within one month, and if a request is complex we may take up to two more months and tell you why. We may ask you to prove who you are before we release any data.
Where we rely on your consent, you can withdraw it at any time by calling or emailing us. For cookies, change your choices in the settings in our cookie policy. Withdrawing consent does not affect anything we did with your data before you withdrew it.
Cookies
Cookies are small files a website stores on your device. This website uses three kinds:
- Functional cookies keep the website and the enquiry form working. They don’t need your consent.
- Statistics cookies show us which pages people visit and how they found the website. They only run if you accept them.
- Marketing cookies show us which adverts brought people to the website. They only run if you accept them, and accepting them also loads the Google map on our contact page.
The enquiry form (from LeadConnector) and, once it is switched on, the reviews widget (from Trustindex) load from their providers’ servers, which receive your IP address and browser details and may set their own cookies. The map on our contact page is different: it waits for your marketing consent or your click, as described above. Our cookie policy lists the cookies this website sets, with each one’s purpose and how long it lasts, and it is where you can change your choices.
Keeping Your Data Secure
We use appropriate technical and organisational measures to protect your personal data, as UK GDPR requires, and we give access to your records only to the people who need them for your enquiry or job. Our providers protect the data they hold for us under their contracts with us. If a breach puts your rights at risk, we tell you and the Information Commissioner’s Office as the law requires.
Complaints
If you’re unhappy with how we have handled your data, contact us first at info@firstpointplumbing.co.uk and we’ll try to put it right.
You can also complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection:
- Website: ico.org.uk
- Phone: 0303 123 1113
Changes To This Policy
We update this policy when the way we use your data changes, and the date at the top shows the latest version. If a change affects you in a significant way, we tell you before it takes effect.