Privacy Policy

Introduction

Central Heating Scotland ("we", "us", "our") is a Gas Safe registered heating and gas boiler engineering business based in Glasgow, Scotland. We operate the website www.centralheatingscotland.co.uk and the related booking, quote, landlord and agency portals. This Privacy Policy explains how we collect, use, store and protect your personal data when you use our website or services, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller

Central Heating Scotland is the data controller for the personal information you provide. For any data protection enquiries, contact us at info@centralheatingscotland.co.uk or 0141-374-0987.

Information We Collect

• Contact details: name, email address, phone number and postcode.
• Property details: address, house type, boiler make/model and location, provided for quotes, bookings, landlord gas safety certificates and service history.
• Booking and job data: requested service type, preferred date and time slot, engineer assignment, job notes, fault diagnosis, parts used and costs.
• Landlord and tenant data: landlord name, contact details, tenant name and contact details (where a letting agency or landlord provides them), gas safety certificate numbers and expiry dates.
• Payment data: we do not store card details. Card payments are processed by Stripe (UK) Ltd. We retain invoice records, deposit and balance information.
• Communications: messages you send via our contact form, chat widget, email or phone, and our responses.
• Technical data: IP address, browser type and pages visited, collected through cookies and similar technologies (see our Cookie Policy).

Why We Use Your Data & Legal Basis

Who We Share Your Data With

We never sell your data. We share it only where necessary to deliver our services:

• Our directly-employed Gas Safe engineers, so they can attend your property.
• Stripe (UK) Ltd, to process card payments securely.
• Our internal communication tools (Slack) so our team can respond to leads and coordinate jobs.
• Email service providers used to send booking confirmations, reminders and follow-ups.
• The Gas Safe Register, where certification or competency needs to be verified.
• Regulators, law enforcement or HMRC where we are legally required to.

How Long We Keep Your Data

We retain personal data only for as long as needed for the purpose it was collected:

• Quote enquiries: up to 24 months, unless you ask us to delete them sooner.
• Booking, job sheet, invoice and gas safety certificate records: 6 years, in line with accounting and gas safety legal requirements.
• Landlord and tenant contact details: while the property is under our service and for 6 years afterwards for compliance.
• Newsletter and marketing consent: until you withdraw consent or unsubscribe.

Your Data Protection Rights

Under UK GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — ask us to delete your data where there is no legal reason to keep it.
• Restriction — limit how we use your data in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests or for marketing.
• Withdraw consent — at any time, for processing based on consent.

Making a Complaint

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Security

We use appropriate technical and organisational measures to protect your data, including encrypted storage, access controls and secure payment processing via Stripe. No system is completely secure, but we work to keep your information safe.

Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above when we do. Significant changes will be highlighted on our website.