Privacy Policy

1. Who We Are

BoilerXchange is a Gas Safe registered heating and boiler installation company based in Lancashire, UK. We are the data controller for the personal data we collect through this website.

Contact us about data protection matters: [email protected] or call 01772 285140.

2. What Data We Collect

We may collect the following personal data when you submit a quote request or contact form: your name, email address, phone number, property address or postcode, and details about the service you require.

We also collect standard technical data automatically when you visit our website, including your IP address, browser type, pages visited, and referring website. This is collected via server logs and is used solely for security and performance monitoring.

3. How We Use Your Data

We use your personal data to: respond to your quote requests and enquiries; arrange and carry out boiler installation, servicing, or replacement work; send you a confirmation or follow-up relating to your enquiry; and comply with our legal obligations as a Gas Safe registered business.

Our lawful basis for processing is: contract performance (to respond to your service request), legitimate interests (to manage our business and improve our services), and legal obligation (Gas Safe registration requirements).

4. How Long We Keep Your Data

We retain enquiry and customer records for up to 6 years from the date of last contact or completion of work, in line with standard UK business and tax record-keeping requirements.

Website server logs are retained for up to 90 days for security purposes and then deleted.

5. Sharing Your Data

We do not sell, rent, or trade your personal data to third parties. We may share your data with trusted service providers who assist us in operating our website and delivering our services (for example, our email platform), where those providers are bound by appropriate data processing agreements.

We may disclose your data if required to do so by law or in response to a valid request from a public authority.

6. Your Rights

Under UK GDPR, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data (where no legal obligation requires us to retain it); object to or restrict our processing of your data; and lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

7. Cookies

Our website uses only essential technical cookies required for the site to function. We do not use advertising, tracking, or analytics cookies. No cookie consent banner is required for essential cookies only.

8. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website is served over HTTPS and we apply security headers to protect against common web vulnerabilities.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The 'last updated' date at the top of this page will reflect any changes. We encourage you to review this page periodically.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at: [email protected] or 01772 285140.