Last updated: June 2, 2026

At Delmi Plumbing & Heating, we are committed to protecting your privacy and handling your personal information responsibly. This Privacy Notice explains what information we collect, how we use it, and your rights in accordance to the UK data protection laws (including the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations – PECR).

1. Who We Are

  • Business Name: Delmi Plumbing & Heating
  • Address: 70 Greenford Gardens, Greenford, UB6 9NA
  • Email: info@delmiplumbing.co.uk
  • Website: www.delmiplumbing.co.uk

For the purposes of data protection law, we are the Data Controller responsible for your personal data. Any privacy-related enquiries should be directed to our Data Privacy Lead at the email address above.

2. What Information We Collect & Why We Need It

We collect and process personal information to provide our plumbing and heating services. This includes:

  • Contact Details: Your name, phone number, and email address (to respond to enquiries and arrange bookings).
  • Service Details: Your property address, and details about your plumbing, boiler, or heating systems (to provide accurate quotes and carry out onsite work).
  • Financial Data: Billing address, invoices, and payment details (for processing payments and accounting).
  • Technical & Usage Data: Your IP address, browser type, and how you use our website via cookies (to improve our online experience and monitor website security).
  • Source of Data: We collect this information directly from you when you fill out forms on our website, email us, phone us, or request a service.

Note: We do not collect any Special Category Data (such as health data, ethnicity, or political opinions), nor do we carry out any automated decision-making or profiling with your personal data.

3. Legal Basis for Processing

Under applicable data protection laws, we rely on the following lawful bases to process your data:

  • Performance of a Contract: To fulfill quotes, bookings, and plumbing or heating repairs you request from us.
  • Legal Obligation: To comply with statutory obligations, including maintaining financial records for HMRC under the Taxes Management Act 1970, or filing mandatory gas safety and building regulations records under the Gas Safety (Installation and Use) Regulations 1998.
  • Legitimate Interests: To respond to business enquiries, manage ongoing customer communications, optimize our business operations, maintain website security, and deploy strictly necessary website cookies. You have the right to object to any processing based on legitimate interests at any time, on grounds relating to your specific situation, by contacting us.
  • Consent: For placing non-essential cookies on your device via our website cookie banner, or where you have explicitly opted in to receive marketing communications from us.

Withdrawing Consent: You can manage or withdraw your cookie consent instantly at any time by clicking the “Cookie Settings” link in the footer of our website. If you have consented to receive marketing emails, you can withdraw this at any time by clicking the “unsubscribe” link in any email or contacting us directly at info@delmiplumbing.co.uk. Withdrawing consent is free and will be processed without delay.

4. Sharing Your Information

We do not sell, rent, or trade your personal data to third parties. We only share your information with trusted service providers and bodies necessary to run our business and fulfill our legal obligations, including:

  • IT support, website hosting, and email communication providers.
  • Secure accounting and invoicing software platforms.
  • Specialized engineers or subcontractors, strictly where required to safely complete your heating or plumbing job, under the lawful basis of Performance of a Contract.
  • Regulatory, safety, or legal authorities (such as HMRC, local building control, or the Gas Safe Register) to comply with our statutory and safety certification obligations.
  • Analytics and search engine providers that assist us in the improvement and optimization of our website.

5. International Data Transfers

While we are based in the UK, some of our core software providers (such as website hosting, secure cloud storage, or email tools) may process and store data outside the UK or the European Economic Area (EEA). Whenever we transfer your personal data across borders, we ensure it receives a similar degree of protection by ensuring at least one of the following safeguards is implemented:

Adequacy Decisions: We transfer data to countries that have been deemed to provide an adequate level of protection for personal data by the UK Government or the European Commission.

UK-EU Data Flows: For any data processed relating to individuals in the EEA, transfers to the UK are fully permitted as the European Commission has formally recognized the UK as providing an adequate level of data protection under the EU GDPR.

Approved Standard Clauses: We use specific contract clauses approved for use—namely the UK International Data Transfer Agreement (IDTA) or the European Commission’s Standard Contractual Clauses (SCCs) along with the UK Addendum.

UK Extension to the EU-US Data Privacy Framework: For US-based providers certified under this framework, we rely on this mechanism for safe transfers. For non-certified US providers, we ensure appropriate Standard Contractual Clauses or the UK IDTA are securely signed.

Please contact us at info@delmiplumbing.co.uk if you want further information on the specific mechanism used when transferring your personal data out of the UK or EEA.

6. How Long We Keep Your Data

We only keep personal data for as long as necessary to fulfill the purposes we collected it for. Our standard retention periods are:

  • Enquiries (No job booked): Up to 12 months from our last contact, after which your details are securely deleted.
  • Customer, Job & Financial Records: Typically 6 years following the end of the financial year in which the work was completed to comply with UK tax (HMRC), accounting, and consumer protection laws.
  • Safety & Certification Records: Gas safety records, building regulations compliance certificates, and boiler installation histories may be kept for up to 10–15 years where required to maintain valid equipment warranties, satisfy gas safety audits, or defend potential legal claims.

7. Data Security

We put appropriate security measures in place to prevent your personal data from being accidentally lost, used, altered, or accessed in an unauthorized way. This includes using encrypted cloud storage, secure password-protected accounting software, and limiting access to your data only to employees or subcontractors who have a business need to know.

8. Children’s Privacy

Our services are intended for adults. We do not knowingly collect or solicit personal data from children.

9. Your Rights

Under UK and EU data protection laws, you have specific rights regarding your personal data:

  • Access: The right to ask us for copies of your personal information.
  • Rectification: The right to ask us to correct information you think is inaccurate or incomplete.
  • Erasure: The right to ask us to erase your personal information (“right to be forgotten”), provided it does not conflict with our legal or regulatory retention obligations.
  • Restriction: The right to ask us to restrict the processing of your personal data.
  • Objection to Processing: The right to object to our processing of your data where we are relying on a legitimate interest. Your objection must be based on grounds relating to your specific situation. We will stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for legal claims.
  • Absolute Right to Stop Marketing: You have an absolute right to object to or opt out of direct marketing at any time. If you object or withdraw your consent, we will stop processing your data for marketing purposes immediately.
  • Data Portability: The right to ask that we transfer the digital information you gave us to another organization, or directly to you (applies only where processing is based on your consent or a contract).
  • Withdraw Consent: The right to withdraw consent at any time where we rely on it to process your data.

Exercising Your Rights: Contact us at info@delmiplumbing.co.uk. We may request specific proof of identity before responding to ensure your data is secure. We will respond within one calendar month. If your request is particularly complex, we may extend this by up to a further two months, but we will notify you within the first month.

We do not charge a fee for exercising your rights. However, if your request is clearly unfounded, repetitive, or excessive, we may charge a reasonable fee based on administrative costs, or refuse to act on the request.

Filing a Complaint: You have the right to lodge a complaint at any time with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues. The ICO’s address is: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. You can also contact them via www.ico.org.uk or by calling 0303 123 1113. If you are a resident of the European Economic Area (EEA) and believe your data has been mishandled, you also have the right to lodge a complaint with your local European supervisory authority.

We would appreciate the chance to resolve your concerns directly before you approach a regulatory authority.