Privacy Policy

Effective Date: 27 May 2026

Last Updated: 27 May 2026

 

1. Introduction

Makerfield Heating LTD (“we”, “us”, “our”) is committed to protecting and respecting your

privacy.

​

This Privacy & Cookie Notice explains how we collect, use, disclose, store, and protect personal data when you:

 visit our website;

 contact us;

 purchase products or services;

 subscribe to communications;

 interact with us on social media;

 attend events;

 make enquiries;

 engage with us as a customer, supplier, contractor, candidate, supporter, or

member of the public.

​

This Notice is intended to comply with:

 UK General Data Protection Regulation (“UK GDPR”);

 Data Protection Act 2018;

 Data Use and Access Act 2025 (“DUAA 2025”);

 Privacy and Electronic Communications Regulations 2003 (“PECR”);

 Consumer Protection from Unfair Trading Regulations 2008;

 applicable guidance issued by the Information Commissioner’s Office (“ICO”).

 

​

2. Data Controller Details

 

Data Controller

Organisation Name: Makerfield Heating LTD

Company Number: 17014370

Registered Office: 30 Hamilton Road, Ashton-in-Makerfield, Wigan, England, WN40SU

Email Address: dpo.makerfieldheating@gmail.com

Website: makerfieldheating.com

​​

​

3. Data Protection Contact

​

If you have any questions regarding this Notice or your personal data, please

contact:

​

Data Protection Contact: Robert Kenyon

Email: dpo.makerfieldheating@gmail.com

Postal Address: 30 Hamilton Road, Ashton-in-Makerfield, Wigan, England, WN40SU

​

​

4. The Personal Data We Collect

​

Depending on how you interact with us, we may collect and process the following

categories of personal data:

​

Identity Data

 name;

 title;

 date of birth;

 username or account identifiers.

​

Contact Data

 postal address;

 email address;

 telephone numbers.

​

Financial Data

 payment details;

 billing information;

 transaction history.

 

Technical Data

 IP address;

 browser type and version;

 operating system;

 device identifiers;

 cookies and tracking data;

 website usage statistics.

​

Marketing & Communications Data

 communication preferences;

 newsletter subscriptions;

 marketing engagement history.

​

Customer Relationship Data

 enquiries;

 complaints;

 correspondence;

 service history;

 support interactions.

​

Recruitment or Contractor Data

Where applicable:

 CVs;

 employment history;

 qualifications;

 references;

 right to work information.

​

Special Category Data

We do not intentionally collect special category data unless necessary and lawful to

do so.

 

Where special category data is processed, we will identify an additional lawful

condition under Article 9 UK GDPR and Schedule 1 Data Protection Act 2018.

​

​

5. How We Collect Personal Data

​

We may collect personal data:

 directly from you;

 through website forms;

 through email or telephone communications;

 through contracts or transactions;

 from publicly available sources;

 from social media interactions;

 via cookies and analytics technologies;

 from suppliers, advisers, or business partners;

 from recruitment processes;

 from lawful third-party referrals or introductions.

​​

​

6. Lawful Bases for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

Contractual Necessity

​

Where processing is necessary:

 to provide goods or services;

 to fulfil contractual obligations;

 to manage customer relationships.

 

Legitimate Interests

Including:

 operating and improving our business;

 responding to enquiries;

 fraud prevention;

 network and information security;

 direct marketing where lawful;

 maintaining records;

 defending legal claims.

​

We conduct balancing assessments where appropriate.

​

Legal Obligation

Where processing is necessary to comply with:

 taxation obligations;

 accounting requirements;

 consumer law;

 employment law;

 regulatory obligations.

​

Consent

Where legally required, including:

 certain electronic marketing activities;

 non-essential cookies;

 optional marketing communications.

​

You may withdraw consent at any time.

​

Vital Interests

In limited emergency circumstances where necessary to protect individuals.

​

​

7. How We Use Your Personal Data

​

We may use personal data to:

 provide products and services;

 manage customer accounts;

 process payments;

 communicate with you;

 respond to enquiries or complaints;

 manage bookings or appointments;

 improve website performance;

 undertake analytics and reporting;

 comply with legal obligations;

 protect business systems and data;

 prevent fraud or misuse;

 manage recruitment activities;

 maintain business records;

 send lawful marketing communications.

​

​

8. Marketing Communications

​

We may send:

 newsletters;

 service updates;

 promotional offers;

 event invitations;

 product or service announcements.

​

We will only send electronic marketing communications where permitted under

PECR.

​

You may opt out at any time by:

 using unsubscribe links;

 contacting us directly;

 updating your communication preferences.

​

We do not sell personal data to third parties.

​

​

9. Cookies & Tracking Technologies

​

Our website may use cookies and similar technologies.

 

Cookies are small text files stored on your device to improve website functionality,

analytics, and user experience.

​

Types of Cookies We May Use

Strictly Necessary Cookies

Required for core website functionality.

Performance & Analytics Cookies

Help us understand website usage and improve performance.

Functionality Cookies

Remember preferences and settings.

Advertising or Marketing Cookies

Used to measure marketing effectiveness and tailor content.

​

​

10. Cookie Consent

​

Where required by PECR and UK GDPR:

 non-essential cookies will only be deployed with your consent;

 you may manage cookie preferences through our cookie banner or browser

settings;

 you can withdraw consent at any time.

​

​

11. Third-Party Services

​

We may use third-party providers for:

 website hosting;

 payment processing;

 analytics;

 customer support;

 CRM systems;

 cloud storage;

 marketing services;

 email distribution;

 event management;

 IT support.

Such providers may process personal data on our behalf under contractual

safeguards compliant with Article 28 UK GDPR.

​

​

12. International Transfers

​

In the unlikely event personal data is transferred outside the United Kingdom, we will

ensure appropriate safeguards are in place, including:

 adequacy regulations;

 International Data Transfer Agreements (IDTAs);

 UK Addendum to EU SCCs;

 equivalent lawful transfer mechanisms.

​

​

13. Data Retention

​

We retain personal data only for as long as necessary for:

 contractual purposes;

 legal obligations;

 legitimate business needs;

 dispute resolution;

 regulatory compliance.

Retention periods may vary depending on:

 the nature of the data;

 applicable legal requirements;

 limitation periods;

 operational necessity.

Data no longer required will be securely deleted or anonymised.

​

​

14. Data Security

​

We implement appropriate technical and organisational measures designed to

protect personal data against:

 unauthorised access;

 accidental loss;

 destruction;

 misuse;

 disclosure;

 alteration.

​

Measures may include:

 access controls;

 encryption;

 password protection;

 multi-factor authentication;

 secure backups;

 staff training;

 monitoring and audit controls.

​

​

15. Your Rights

​

Under UK GDPR, you may have the right to:

 access your personal data;

 request rectification;

 request erasure;

 restrict processing;

 object to processing;

 data portability;

 withdraw consent;

 object to direct marketing;

 lodge a complaint with the ICO.

These rights are subject to legal exemptions and limitations.

 

​

16. Subject Access Requests

​

Requests relating to personal data rights may be submitted via:

Email: dpo.makerfieldheating@gmail.com

Postal Address: 30 Hamilton Road, Ashton-in-Makerfield, Wigan, England, WN40SU

We may request reasonable identity verification before responding.

We aim to respond within one calendar month from the date your identity has been

verified, unless an extension is lawfully permitted.

​

​

17. Complaints

​

If you are unhappy with how we process your personal data, please contact us first

so we can attempt to resolve the issue.

You also have the right to complain to the ICO:

Information Commissioner’s Office

ICO Website

​

​

18. Automated Decision-Making

​

We do not generally undertake solely automated decision-making producing legal or

similarly significant effects.

If this changes, we will update this Notice accordingly.

​

 

19. External Links

​

Our website may contain links to third-party websites.

We are not responsible for the privacy practices or content of external sites.

Users should review third-party privacy notices separately.

​

​

20. Changes to This Notice

​

We reserve the right to amend this Privacy & Cookie Notice from time to time.

Updated versions will be published on our website with revised effective dates.

​

​

22. Annex A — Example Categories of Third-Party Processors

​

The organisation may utilise providers in categories such as:

 cloud hosting providers;

 payment gateways;

 website developers;

 CRM platforms;

 accounting software providers;

 marketing platforms;

 analytics providers;

 customer support systems;

 telecommunications providers;

 professional advisers;

 legal advisers;

 insurers;

 IT managed service providers.