Privacy Policy

1. Who We Are

The data controller for personal information collected through our website and services is:

• Company name: Pekorius Limited
• Company number: 15842310
• Registered address: 19c East Street, Newport, Wales, NP20 4BR
• Email: [email protected]
• Telephone: 01792 443 398

2. What Personal Data We Collect

We collect and process the following categories of personal data, depending on how you interact with us:

2.1 Contact and Identity Information

• Your full name
• Telephone number(s)
• Email address
• Postal address and property address (if different)

2.2 Service and Job Information

• Details of the plumbing or heating issue you contact us about
• Records of work carried out at your property, including photographs where taken for quality assurance purposes
• Invoices, quotes, and payment records
• Correspondence relating to your booking or complaint

2.3 Website Usage Data

• IP address and browser type (collected automatically when you visit our website)
• Pages visited and time spent on the site
• Referring website or search terms used to find us

3. How We Collect Your Personal Data

We collect personal data in the following ways:

• Directly from you when you call us, send an email, fill in a contact form, or request a quote.
• When you book a service, either by telephone or in writing.
• Automatically when you visit our website, via cookies and standard web analytics tools.
• From third parties, for example if you have been referred to us by another company or if we carry out a search for address verification purposes.

4. Why We Use Your Personal Data (Legal Bases)

We only process your personal data where we have a lawful basis to do so under UK GDPR. The bases we rely on are as follows:

4.1 Performance of a Contract

When you book a service with us, we need to process your contact and address details to fulfil that booking, communicate with you about the appointment, issue an invoice, and process payment. Without this data, we cannot provide the service.

4.2 Legitimate Interests

We may use your contact information to follow up after a service (for example, to check you are satisfied with the work), to send appointment reminders, and to maintain records for quality assurance and business management purposes. We only do this where our legitimate interest is not overridden by your rights and freedoms.

4.3 Compliance with a Legal Obligation

We are required to retain certain financial and tax records for a minimum of six years under HMRC rules. Where we carry out gas work, we are also required to maintain records in accordance with the Gas Safety (Installation and Use) Regulations 1998.

4.4 Consent

Where we wish to send you marketing communications (such as seasonal promotions or service reminders), we will ask for your consent to do so. You may withdraw consent at any time by contacting us or clicking "unsubscribe" in any marketing email.

5. How We Share Your Data

We do not sell your personal data to third parties. We may share your data only in the following limited circumstances:

• Subcontractors and specialist engineers who carry out work on our behalf, where necessary to fulfil your service booking. These parties are required to handle your data in accordance with our instructions and applicable data protection law.
• Payment processors where you pay by card; your card details are processed securely by our payment provider and are not stored by us.
• Accountants and legal advisors where required for the management of our business.
• HMRC or other regulatory bodies where we are legally required to disclose information.
• Gas Safe Register where we are required to register gas work carried out at your property.

6. How Long We Keep Your Data

We retain personal data only for as long as necessary. Our standard retention periods are:

• Customer records and job history: 6 years from the date of the last transaction, in line with the Limitation Act 1980 and HMRC requirements.
• Gas safety records: 2 years minimum, as required by the Gas Safety (Installation and Use) Regulations 1998.
• Marketing consent records: Retained until you withdraw consent, then deleted within 30 days.
• Website analytics data: Typically 26 months, in line with standard analytics tool defaults.

When data is no longer required, it is securely deleted or anonymised.

7. Cookies

Our website uses cookies — small text files placed on your device — to help us understand how visitors use the site and to improve your experience. We use the following types of cookies:

• Essential cookies: Required for the website to function. These cannot be disabled.
• Analytics cookies: Help us understand traffic patterns and page performance. These are only set with your consent.

You can manage or disable cookies through your browser settings at any time. Please note that disabling cookies may affect some features of the website.

8. Your Rights Under UK GDPR

You have the following rights in relation to the personal data we hold about you:

• Right of access: You may request a copy of the personal data we hold about you (a "subject access request").
• Right to rectification: You may ask us to correct inaccurate or incomplete data.
• Right to erasure: You may ask us to delete your personal data where there is no lawful reason for us to continue processing it.
• Right to restriction: You may ask us to restrict processing in certain circumstances, for example while a dispute is being resolved.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including direct marketing.
• Rights relating to automated decision-making: We do not use automated decision-making or profiling in connection with our services.

To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month, as required by UK GDPR. There is no charge for making a request unless it is manifestly unfounded or excessive.

9. Data Security

We take the security of your personal data seriously. We have implemented appropriate technical and organisational measures to protect your information against unauthorised access, loss, alteration, or disclosure. These measures include secure email systems, password-protected devices, and restricted access to customer records. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours and, where required, inform you directly without undue delay.

10. International Data Transfers

We do not routinely transfer your personal data outside the United Kingdom. Where any third-party tool or service we use transfers data internationally, we ensure that appropriate safeguards are in place in accordance with UK GDPR, such as UK adequacy regulations or standard contractual clauses.

11. Complaints

If you believe we have handled your personal data unlawfully or have not respected your rights, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection authority:

• Website: ico.org.uk
• Helpline: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns before you contact the ICO. Please reach out to us first at [email protected].

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any updates will be published on this page with a revised date. We encourage you to review this policy periodically.

Last updated: June 2025  |  Pekorius Limited, Company No. 15842310, registered in England and Wales.