Privacy Policy
Last Updated: January 08, 2026
Effective Date: December 16, 2025
Introduction to Our Privacy Policy
Chelsea Property Renovation & Maintenance Ltd (“we,” “us,” or “our”) is committed to protecting your privacy and personal data. This privacy policy explains how we collect, use, store, and protect your information when you use our website, contact us for services, or engage with our property renovation, plumbing, electrical, and heating services.
We operate in compliance with UK data protection laws, including the UK General Data Protection Regulation (UK GDPR), EU General Data Protection Regulation (EU GDPR), and the Data Protection Act 2018. Your privacy is our priority, and we’re transparent about our data practices.
Our Details:
Company Name: Chelsea Property Renovation & Maintenance Ltd
Registered Office: First Floor, 289 Brompton Road, Knightsbridge, London. SW3 2DY
Email: [email protected]
Phone: 020 7129 7418
Website: https://chelseapropertyrenovation.co.uk
If you have questions about this privacy policy or how we handle your data, please contact us using the details above.
1. Information We Collect
We collect personal data to provide our property services, respond to inquiries, and improve your experience. Here’s what information we collect:
1.1 Information You Provide Directly
When you contact us for quotes, book services, or use our website, you may provide:
Contact Information:
- Full name
- Email address
- Phone number
- Property address (service location)
- Billing address
Service Information:
- Property details (type, size, age)
- Service requirements (plumbing, electrical, heating, renovation)
- Preferred appointment dates
- Special access requirements
- Emergency service needs
Communication Data:
- Messages through contact forms
- Email correspondence
- Phone call records (quality and training)
- Live chat messages
- Emergency service requests
Payment Information:
- Billing name and address
- Payment method details (processed securely)
- Invoice history
- Transaction records
Project Documentation:
- Property photos (for quotes and records)
- Site assessments
- Technical specifications
- Completed work documentation
- Before/after photos (with permission)
1.2 Information Collected Automatically
When you visit our website, we automatically collect:
Technical Data:
- IP address
- Browser type and version
- Operating system
- Device type
- Screen resolution
- Language preferences
Usage Data:
- Pages visited
- Time spent on pages
- Links clicked
- Referral source
- Date and time of visits
- Downloads and form submissions
Location Data:
- Approximate location from IP address
- Service area verification
1.3 Information from Third Parties
We may receive information from:
Analytics Providers:
- Google Analytics (website usage)
- Traffic sources
- User behavior patterns
Payment Processors:
- Transaction confirmations
- Payment status
Review Platforms:
- Google Business Profile reviews
- Customer feedback
- Ratings
2. How We Use Your Information
We use your personal data for these purposes under lawful bases:
2.1 To Provide Our Services (Contract Performance)
- Process service requests and quotes
- Schedule appointments and site visits
- Perform plumbing, electrical, heating, and renovation work
- Communicate about your project
- Provide 24/7 emergency services
- Issue invoices and process payments
- Provide warranties and guarantees
- Deliver Gas Safe certificates, EICR certificates, and compliance documentation
2.2 To Communicate With You (Contract Performance / Legitimate Interest)
- Respond to inquiries
- Send appointment confirmations
- Provide project updates
- Request feedback and reviews
- Handle complaints and customer service
- Send service-related notifications
2.3 For Marketing (Consent – you can opt out anytime)
- Send newsletters (with permission)
- Provide service updates and special offers
- Share property maintenance tips
- Invite participation in surveys
Unsubscribe Options:
- Click “Unsubscribe” in any email
- Email: [email protected]
- Call: 020 7129 7353
2.4 To Improve Our Services (Legitimate Interest)
- Analyse website usage
- Identify technical issues
- Improve user experience
- Develop new services
- Conduct market research
2.5 For Legal Compliance (Legal Obligation)
- Comply with tax and accounting requirements
- Maintain building regulations records
- Provide Gas Safe and EICR documentation
- Respond to legal requests
- Protect legal rights and prevent fraud
- Health and safety compliance
2.6 For Quality Assurance (Legitimate Interest)
- Record calls for training
- Monitor service standards
- Train family members and staff
- Ensure NICEIC, Gas Safe compliance
3. Legal Basis for Processing Data
Under UK GDPR and EU GDPR, we must have lawful basis for processing your personal data:
3.1 Contract Performance
Processing necessary to fulfill our contract with you (providing property services).
3.2 Consent
You’ve given clear consent for marketing purposes. Withdrawal available anytime.
3.3 Legitimate Interest
Processing necessary for our legitimate business interests (improving services, fraud prevention) while respecting your rights.
3.4 Legal Obligation
Processing required by law (tax, building regulations, health & safety, Gas Safe, NICEIC compliance).
4. How We Share Your Information
We don’t sell your personal data. We only share when necessary:
4.1 Service Providers
Payment Processors:
- Secure payment gateways
- Bank processing
- Accounting software
Communication Tools:
- Email service providers
- SMS services
- Phone systems
Website & Analytics:
- Web hosting providers
- Google Analytics
- Google Ads (with consent)
Professional Services:
- Accountants
- Legal advisors
- Insurance providers
4.2 Regulatory Requirements
Compliance Bodies:
- NICEIC (electrical work)
- Gas Safe Register (gas work)
- Local authorities (building control)
- HMRC (tax)
- Police or courts (if legally required)
4.3 Family Business Members
As a two-generation family business, your data is shared among family members who provide services:
- Gas Safe registered family engineers
- NICEIC approved family electricians
- Qualified family builders and carpenters
All family members are trained in data protection and bound by confidentiality.
4.4 Business Transfers
If we sell or transfer our business, customer data may be transferred to the new owner (with appropriate protections).
All third parties must:
- Keep your data secure
- Use it only for specified purposes
- Comply with UK GDPR and EU GDPR
- Delete data when no longer needed
5. International Data Transfers
We operate primarily in the UK (Central London services) with our business registered in Spain (La Manga, Murcia). Your data may be transferred between:
United Kingdom: Where we provide services
European Union (Spain): Where our business is registered
Both UK and EU have adequate data protection laws. If we transfer data outside UK/EU, we ensure:
- Adequate data protection laws exist, OR
- Standard Contractual Clauses (SCCs) are used, OR
- Approved framework certification (e.g., EU-US Data Privacy Framework)
Current International Transfers:
- Google Analytics (US-based, EU-US Data Privacy Framework certified)
- Payment processors (protected by SCCs)
6. How Long We Keep Your Data
We retain personal data only as long as necessary:
6.1 Service Records (7 years after completion)
Includes:
- Project details and specifications
- Invoices and payment records
- Gas Safe certificates, EICR certificates
- Building regulations compliance
- Site photos and documentation
Reason:
- UK tax requirements (6 years)
- Warranty obligations
- Legal claims limitation
- Building regulations records
6.2 Marketing Data (Until unsubscribe + 30 days)
Includes:
- Email addresses
- Marketing preferences
- Communication history
Reason:
- Email marketing compliance
- Suppression list maintenance
6.3 Quote Requests – No Contract (2 years)
Includes:
- Quote details
- Contact information
- Property information
Reason:
- Follow-up opportunities
- Business records
- You may return for services
6.4 Website Analytics (26 months)
Includes:
- Google Analytics data
- User behavior patterns
- Traffic sources
Reason:
- Year-over-year comparison
- Trend analysis
- Anonymized where possible
6.5 Phone Recordings (6 months)
Includes:
- Customer service calls
- Emergency service calls
- Quality assurance recordings
Reason:
- Quality control
- Training
- Dispute resolution
6.6 CCTV (30 days – if applicable)
Includes:
- Security footage
- Incident recordings
Reason:
- Security
- Health & safety
- Automatically overwritten
7. Your Data Protection Rights
Under UK GDPR and EU GDPR, you have these rights:
7.1 Right to Access (Subject Access Request)
What: Request a copy of personal data we hold about you.
How: Email [email protected] with “Subject Access Request” in subject line.
Response: Within 1 month (extendable by 2 months for complex requests).
Cost: Free (unless manifestly unfounded or excessive).
7.2 Right to Rectification
What: Request correction of inaccurate or incomplete data.
Example: Update address, phone, email.
How: Contact us with correct information.
Response: Updated within 1 month.
7.3 Right to Erasure (“Right to be Forgotten”)
What: Request deletion of personal data.
When Applies:
- Data no longer necessary
- You withdraw consent
- You object and no overriding grounds exist
- Data processed unlawfully
Exceptions: Cannot delete if required for:
- Legal compliance (tax, building regulations)
- Legal claims or defense
- Contract performance (active warranties)
How: Email [email protected] with “Data Deletion Request.”
7.4 Right to Restrict Processing
What: Ask us to stop processing (but keep) your data.
When Applies:
- You contest data accuracy
- Processing is unlawful but you don’t want deletion
- We no longer need data but you need it for claims
- You’ve objected and we’re verifying grounds
How: Contact us explaining restriction reason.
7.5 Right to Data Portability
What: Request data in structured, machine-readable format (CSV, JSON).
When Applies: Data processed by automated means based on consent or contract.
How: Email [email protected] requesting data export.
Response: Provided within 1 month.
7.6 Right to Object
What: Object to processing based on legitimate interests or for marketing.
Marketing: Can always object (unsubscribe).
Legitimate Interest: We’ll stop unless compelling grounds exist.
How: Email or call to object.
7.7 Automated Decision-Making
We don’t use automated decision-making or profiling that produces legal effects or significantly affects you.
8. How We Protect Your Data
We implement appropriate security measures:
8.1 Technical Measures
- SSL/TLS Encryption: Website uses HTTPS
- Secure Servers: Encrypted data storage
- Firewall Protection: Network security
- Access Controls: Password-protected systems
- Regular Backups: Encrypted secure storage
- Software Updates: Regular security patches
8.2 Organizational Measures
- Staff Training: Regular data protection training
- Access Restrictions: Only authorized family members access data
- Confidentiality Agreements: All family members sign agreements
- Data Minimization: Collect only necessary data
- Secure Disposal: Secure deletion when no longer needed
- Incident Response: Data breach procedures
8.3 Payment Security
- PCI-DSS Compliance: Payment processors certified
- No Card Storage: We don’t store full card details
- Tokenization: Payment data tokenized
9. Cookies and Tracking
Our website uses cookies. For detailed information, see our Cookie Policy [link].
Cookie Types:
Essential Cookies: Required for website functionality (cannot be disabled)
Analytics Cookies: Google Analytics for usage understanding (can be disabled)
Marketing Cookies: Track ad effectiveness (requires consent)
Cookie Control: Manage preferences via cookie banner or browser settings.
10. Third-Party Links
Our website may link to third-party sites (suppliers, review platforms, social media).
Important: We’re not responsible for third-party privacy practices. Read their privacy policies when you leave our site.
Third-Party Sites:
- Google Business Profile
- Trustpilot
- Supplier websites
- Industry bodies (NICEIC, Gas Safe)
11. Children’s Privacy
Our services aren’t directed at children under 16. We don’t knowingly collect data from children.
If you believe we’ve collected data from a child, contact us immediately for deletion.
12. Data Breaches
In the unlikely event of a data breach posing risk to your rights:
Our Response:
- Immediate investigation
- Notify ICO within 72 hours (if required)
- Notify affected individuals (if high risk)
- Document breach and response
- Prevent future breaches
If Affected, We’ll Inform You:
- Nature of breach
- Data affected
- Likely consequences
- Measures taken
- Recommended actions
13. Changes to This Privacy Policy
We may update this privacy policy to reflect:
- Changes in law
- New services
- Improved practices
- User feedback
When Updated:
- “Last Updated” date changed
- Significant changes highlighted
- Email notification (if substantial)
Your Responsibility: Review periodically to stay informed.
14. Contact Us & Complaints
14.1 Contact Our Team
Questions about this privacy policy or data handling:
Email: [email protected]
Phone: 020 7129 7353
Post: Chelsea Property Renovation & Maintenance Ltd, 289 Brompton Road, Knightsbridge, London SW3 2DY
Response: Within 5 business days.
14.2 Make a Complaint
Contact us first. We’ll investigate and respond within 30 days.
Complaint Process:
- Contact with complaint details
- Acknowledgment within 5 days
- Thorough investigation
- Response with findings and actions
- If unresolved, escalation rights explained
14.3 Regulatory Authority
If unsatisfied with our response, complain to data protection authority:
UK Residents:
Information Commissioner’s Office (ICO)
Website: https://ico.org.uk
Phone: 0303 123 1113
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
EU Residents (Spain):
Agencia Española de Protección de Datos (AEPD)
Website: https://www.aepd.es
Phone: +34 901 100 099
Post: C/ Jorge Juan, 6, 28001 Madrid, Spain
15. Your Consent
By using our website or services, you acknowledge reading and understanding this privacy policy.
For Marketing: Opt-in consent for marketing emails. Withdraw anytime.
For Cookies: Cookie consent via banner. Change preferences anytime.
Summary: Your Privacy in Brief
What We Collect: Contact details, service requests, payment info, website usage
Why: To provide services, improve website, communicate with you
How We Protect: SSL encryption, secure servers, access controls, staff training
Who We Share With: Only trusted service providers and when legally required
Your Rights: Access, rectify, delete, restrict, object, data portability
Retention: 7 years for projects, 2 years for quotes, varies by data type
Marketing: Opt-in only, unsubscribe anytime
Cookies: Essential, analytics, marketing (manage via banner)
Contact: [email protected] or 020 7129 7418
Complaints: Contact us first, then ICO if unresolved
Full details above. Please read the complete policy for comprehensive information.
