Privacy Notice

Last updated: June 2026. This notice is a working draft and should be reviewed by a qualified adviser before go-live.

Who we are

Smith's Heating Services Ltd ("we", "us") is the data controller for the personal information you provide. We are registered in England & Wales (company no. 06658288), at 7 Derehams Lane, High Wycombe HP10 9RH. You can contact us about privacy at info@smithsheating.co.uk or 01494 328382.

What we collect

Depending on how you interact with us, we may collect:

Enquiry details you send us — your name, email, phone, postcode and message — through our website enquiry form or air conditioning configurator.
Customer account information if you use our customer portal — your contact details, property and equipment details, service history, bookings, quotes, invoices and any documents you upload.
Service records we are required to keep, such as gas safety and installation records.
Basic technical data needed to run the site securely (for example, a session cookie when you sign in to the portal).

Why we use it, and our lawful basis

To respond to your enquiry and provide quotes — based on your consent and our legitimate interest in answering you.
To carry out work and manage your account — to perform our contract with you.
To meet legal obligations — for example keeping gas safety and installation records.
To arrange finance, only if you ask us to — to take steps at your request before entering a contract.

Who we share it with

We do not sell your data. We share it only as needed to provide our service:

Our engineers, to carry out and certify your work.
Finance providers, only if you choose to apply for finance through us.
Trusted service providers who help us run the business — our secure hosting provider, email provider and payment processing — under appropriate data-protection terms.
Regulators or authorities where we are legally required to.

Some pages embed third-party tools (for example the Guild of Master Heat Engineers installer map and the Heat Geek heat-pump estimate). If you interact with these, those providers handle your information under their own privacy policies.

How long we keep it

We keep enquiry information only as long as needed to deal with your enquiry. Customer and job records are kept for as long as you are a customer and afterwards for the periods required by law and for warranty, safety and tax purposes. Where we no longer need information, we delete or anonymise it.

Your rights

Under UK GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its use, and to data portability. If you have a customer account, you can request a data export or account deletion from within the portal. To exercise any right, contact us at info@smithsheating.co.uk. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we'd appreciate the chance to help first.

Cookies

Our own website uses only essential cookies — for example to keep you signed in to the customer portal. The air conditioning configurator saves your design in your browser (local storage) so you can come back to it. We don't use third-party advertising trackers. Embedded third-party content may set its own cookies if you interact with it.

Changes

We may update this notice from time to time; the date at the top shows when it last changed.