Halifax Boiler Doctor
Serving Halifax and the surrounding area
Last updated: 12 March 2026

Halifax Boiler Doctor (“we”, “us”, “our”) is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Please read this policy carefully. By using our services or website, you confirm you have read and understood this policy.

1. Who We Are (Data Controller)
Halifax Boiler Doctor is the data controller for the personal information we collect. This means we are responsible for deciding how and why your data is used.
If you have any questions about this policy or how we handle your data, please contact us:

Halifax Boiler Doctor
Halifax, West Yorkshire
Website: halifaxboilerdoctor.co.uk

2. What Personal Data We Collect
2.1 Data you provide directly
When you contact us, request a quote, or book a service, we may collect:
Full name
Home or rental property address
Email address
Telephone number
Details of your boiler, heating system, or appliances
Payment information (processed securely; we do not store card details)
Any other information you provide in a message or enquiry

2.2 Data we collect automatically
When you visit our website, we may automatically collect:
Your IP address
Browser type and version
Pages visited and time spent on each page
Referring website (how you found us)
Cookie data (see Section 8 for our Cookie Policy)

2.3 Data from third parties
We may receive data about you from third parties such as Google (e.g., Google Maps or reviews), or from referral sources such as landlord agencies or letting agents.

3. How We Use Your Personal Data
We use your personal data only for legitimate purposes. The table below sets out the legal basis for each use:

Purpose of use | Legal basis under UK GDPR

To respond to enquiries and provide quotes
Legal basis: Legitimate interests / Pre-contractual steps
To carry out boiler, heating, or gas safety services
Legal basis: Performance of a contract
To issue Gas Safety Certificates (CP12)
Legal basis: Legal obligation
To send invoices and process payments
Legal basis: Performance of a contract
To send appointment reminders and service follow-ups
Legal basis: Legitimate interests
To maintain records of work carried out
Legal basis: Legal obligation / Legitimate interests
To comply with Gas Safe Register requirements
Legal basis: Legal obligation
To improve our website and services
Legal basis: Legitimate interests
To send marketing communications (where you have opted in)
Legal basis: Consent

4. Marketing Communications
We will only send you marketing communications (e.g., boiler service reminders, seasonal offers) if you have given us your consent to do so. You can withdraw your consent at any time by:
Emailing us directly
Clicking the unsubscribe link in any marketing email
Calling us and asking to be removed from our mailing list
Withdrawing consent does not affect the lawfulness of any processing carried out before your withdrawal.

5. Who We Share Your Data With
We do not sell your personal data. We may share it only in the following limited circumstances:
Gas Safe Register – as required by law to maintain records of gas work carried out.
Payment processors – to securely process payments on our behalf.
IT and software providers – such as our website host (Showit) and email platform, who process data on our behalf under Data Processing Agreements.
Professional advisors – such as our accountant or solicitor, where necessary.
Law enforcement or regulatory bodies – if required by law or court order.
All third parties are required to handle your data securely and in accordance with UK GDPR.

6. How Long We Keep Your Data
We retain personal data only for as long as necessary. Our standard retention periods are:
Customer records and job history: 6 years (to comply with HMRC requirements)
Gas Safety Certificates: 2 years minimum (as required under the Gas Safety Regulations; landlords are advised to keep copies for the duration of the tenancy plus 2 years)
Marketing consent records: Until consent is withdrawn, plus a reasonable period thereafter
Website analytics data: Up to 26 months
After the relevant retention period, data is securely deleted or anonymised.

7. Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
Right of access – You can request a copy of the personal data we hold about you (a “Subject Access Request”). We will respond within one month.
Right to rectification – You can ask us to correct inaccurate or incomplete data.
Right to erasure – You can ask us to delete your data in certain circumstances (e.g., where we no longer need it for the original purpose).
Right to restrict processing – You can ask us to limit how we use your data while a complaint or query is resolved.
Right to data portability – Where processing is based on your consent or a contract, you can ask us to provide your data in a structured, machine-readable format.
Right to object – You can object to processing based on our legitimate interests.
Rights related to automated decision-making – We do not make automated decisions about you using your personal data.

To exercise any of these rights, please contact us. We may need to verify your identity before responding. If you are not satisfied with our response, you have the right to complain to the Information Commissioner’s Office (ICO):

Information Commissioner’s Office (ICO)
0303 123 1113
www.ico.org.uk

8. Cookies
Our website uses cookies. Cookies are small text files stored on your device when you visit a website. They help us understand how visitors use our site and improve your experience.
Types of cookies we use
Essential cookies – Necessary for the website to function. These cannot be disabled.
Analytics cookies – Help us understand how visitors interact with our site (e.g., Google Analytics). We only set these with your consent.
Marketing cookies – Used to deliver relevant content. We only set these with your consent.

When you first visit our website, you will be asked to consent to non-essential cookies. You can change your cookie preferences at any time via the cookie settings on our website. You can also control cookies through your browser settings; however, disabling cookies may affect how the website works.

9. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These measures include:
Secure storage of customer records
Restricted access to personal data on a need-to-know basis
Encrypted communications where applicable
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform you directly where required.

10. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies before providing any personal data.

11. Children’s Privacy
Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, plea
se contact us immediately and we will delete it.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The most recent version will always be available on our website. We encourage you to review it periodically.


This Privacy Policy was last updated on 12 March 2026.
Halifax Boiler Doctor | Halifax, West Yorkshire | halifaxboilerdoctor.co.uk