Privacy Policy

Above Plumbing and Heating Limited is a company registered in England and Wales, company number 10445265, with its registered office at Armoury House, Armoury Road, West Bergholt, Colchester, Essex, CO6 3JP. We’re a Gas Safe registered plumbing and heating business working across Wivenhoe and the surrounding area.

When you contact us or we carry out work for you, we’re what data protection law calls the “controller” of your personal information. That means we decide what’s collected and what happens to it — and we’re responsible for looking after it.

If you have any question about this policy, or about your information, contact us at aboveplumbingandheating@hotmail.com or 07814 924019, or write to us at the registered office address above.

We keep this deliberately short. We only collect what we need to answer you and do the work properly.

When you use the contact form

Your name, your email address, your phone number if you give it, and whatever you tell us in the message itself. The message field is free text, so it may contain anything you choose to include — your address, the make of your boiler, what’s gone wrong.

When you become a customer

The address where the work is happening, details of the job and the appliances involved, quotes and estimates, invoices and payment records, and any certificates or records we issue — including gas safety records (CP12s) where we carry out a landlord gas safety check.

When you call or email us directly

Your phone number or email address, and the content of the conversation, kept as part of the record of the enquiry or the job.

When you visit this website

If — and only if — you agree to analytics cookies, we collect information about how the site is used: pages viewed, roughly how long for, the type of device and browser, and an approximate location based on your IP address. This is used to understand what’s useful on the site and improve it. If you don’t agree, none of it is collected. Our Cookie Policy sets out exactly which cookies are involved.

Our website host also keeps standard technical logs (things like IP addresses and error records) as part of running and securing the site.

What we don’t collect

We don’t run a mailing list, we don’t advertise to you afterwards, we don’t buy personal information from anyone else, and we don’t ask for information about your health, your finances, or anything else sensitive. If you happen to mention something personal in a message to us — for example, that someone in the house is vulnerable to the cold and the job is urgent — we’ll use it to prioritise the work sensibly and for nothing else.

Data protection law says we have to have a specific, legal reason (“lawful basis”) for every use of your information. Here’s ours, in full.

We don’t sell your information, we don’t share it for anyone else’s marketing, and we keep the list of people who touch it as short as we can. Beyond our own team, it goes to:

• Our website and email providers, who host the site, deliver the contact form to us and store our email. They hold the information on our behalf and act on our instructions, and can’t use it for their own purposes.
• Our accounting and invoicing software, and our accountant, for invoices, payments and tax records.
• Google, if you agree to analytics cookies — through Google Analytics. Google collects the site usage information on our behalf and reports it back to us, and under Google’s own terms Google may also use it for its own purposes. That’s exactly why we ask your permission first rather than treating it as routine. It’s the only third party involved in any tracking on this site, and it doesn’t run at all unless you say yes.
• Gas Safe Register, where we’re required to notify or lodge details of gas work — for example, notifying a boiler installation.
• Our insurers, and professional advisers such as solicitors, if there’s a claim or a dispute.
• Regulators, HMRC, the police or other public bodies, where we’re legally required to provide information or where we have to in order to establish or defend a legal claim.

If we ever sell or transfer the business, customer records would transfer with it, and we’d tell you before that happened.

Your enquiry and job records are held in the UK and the EEA.

Google Analytics is the main exception. If you agree to analytics cookies, some of that usage information is transferred to and handled by Google in the United States and other countries where Google operates. Those transfers are covered by the safeguards UK data protection law requires for sending information outside the UK — Google’s certification under the UK Extension to the EU–US Data Privacy Framework, and the UK’s International Data Transfer Agreement or Addendum where that doesn’t apply. If you’d like a copy of the safeguards we rely on, email us at aboveplumbingandheating@hotmail.com and we’ll send them to you.

If you’d rather your information wasn’t transferred beyond the UK and the EEA, decline analytics cookies — that transfer to Google is the only one this site involves.

We don’t keep things indefinitely just because they’re easy to store. These are the periods we work to.

We take sensible, proportionate steps to protect your information: the site runs over a secure connection, access to enquiries and customer records is limited to the people in the business who need it, accounts are protected with strong passwords and multi-factor authentication where it’s available, and we keep our devices and software up to date.

No system is perfect, and we won’t pretend otherwise. If something ever went wrong and your information was at risk, we’d report it to the Information Commissioner’s Office where we’re required to, and tell you directly if it was likely to be a serious risk to you.

Data protection law gives you a set of rights over your information. You can exercise any of them by contacting us at aboveplumbingandheating@hotmail.com. It’s free, and we’ll respond within one month.

• Ask for a copy of the personal information we hold about you.
• Have it corrected if it’s wrong or incomplete.
• Ask us to delete it, where we don’t have a legal reason to keep it — bear in mind we’re required to hold on to certain job, tax and gas safety records.
• Ask us to pause using it while we look into a query you’ve raised about it.
• Object to us using it, where we’re relying on our legitimate interests.
• Ask us to transfer it to you or someone else in a portable format, where we’re relying on your consent or on a contract with you and it’s handled by computer.
• Withdraw your consent at any time, where we’re relying on it. That applies to analytics cookies — you can change your choice whenever you like from the “Cookie settings” link in the footer of any page — and withdrawing it doesn’t affect anything done before you did.

We don’t make any decisions about you by automated means, and we don’t profile you.

We may need to check who you are before we act on a request — usually a simple confirmation, not a pile of documents.

If you’re not happy with how we’ve handled your information, tell us first — email aboveplumbingandheating@hotmail.com or call 07814 924019. You have a right to complain to us directly. We’ll acknowledge your complaint within 30 days, look into it properly, and come back to you with an outcome as quickly as we reasonably can, keeping you posted if it’s taking longer than expected.

You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator, at any point — you don’t have to come to us first, though it’s usually quicker if you do.

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline: 0303 123 1113. ico.org.uk

This site links out to a small number of other websites — for example, the Gas Safe Register. We’re not responsible for how those sites handle your information, and this policy doesn’t cover them. Worth a look at their own privacy policies if you’re on them.

If what we do with your information changes, we’ll update this page and change the date at the top. If it’s a significant change and we’re already in touch with you, we’ll tell you directly rather than leaving you to spot it.

Last updated: 1 August 2026