GDPR Policy

At Cheshire Boiler & Electrical Services we take the protection of our customers' personal data very seriously. We are committed to complying with the General Data Protection Regulation (GDPR) and ensuring that we handle all personal data in accordance with the law. This GDPR policy outlines how we collect, store, use, and dispose of personal data to protect the privacy of our customers.

1. Data Collection and Processing:

We collect and process personal data for the purpose of providing our services to our customers. The types of personal data we collect may include name, address, email, telephone number and other information necessary to provide our services. We will only collect personal data that is necessary for the purposes for which it is being collected.

2. Legal Basis for Processing Personal Data:

We will only process personal data where we have a legal basis to do so. This may include:

The data subject has given consent to the processing of their personal data.
The processing of personal data is necessary for the performance of a contract with the data subject.
The processing of personal data is necessary for compliance with a legal obligation to which we are subject.
The processing of personal data is necessary to protect the vital interests of the data subject or another natural person.
The processing of personal data is necessary for the purposes of our legitimate interests or those of a third party.

3. Data Storage and Security:

We store personal data securely and take appropriate measures to protect it from unauthorized access, disclosure, alteration, or destruction. We ensure that all personal data is kept confidential and is only accessed by authorised personnel.

4. Data Retention:

We will retain personal data for no longer than is necessary for the purposes for which it was collected. We will securely dispose of personal data when it is no longer required.

5. Data Subject Rights:

Under the GDPR, data subjects have certain rights relating to their personal data, including:

The right to be informed about the processing of their personal data.
The right to access their personal data.
The right to rectify their personal data.
The right to erasure of their personal data.
The right to restrict processing of their personal data.
The right to data portability.
The right to object to the processing of their personal data.
The right not to be subject to automated decision-making.

We will respond to requests from data subjects regarding their rights as required by law.

6. Data Breach Notification:

In the event of a data breach, we will notify the affected data subjects and the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to the rights and freedoms of individuals.

7. GDPR Compliance:

We will regularly review and update our GDPR compliance to ensure that we continue to meet our obligations under the GDPR.

Conclusion:

Cheshire Boiler & Electrical Services is committed to protecting the personal data of our customers in accordance with the GDPR. We will continue to ensure that we handle personal data in a secure and lawful manner and that we are transparent in our data processing activities. If you have any questions or concerns about our GDPR policy, please contact us.