Privacy Policy

1. Who we are

CG Plumbing is a sole trader business operated by Charlie Gaskin, based in Halstead, Essex. In this policy, "we", "us" and "CG Plumbing" mean Charlie Gaskin trading as CG Plumbing. We are the data controller responsible for your personal data under the UK GDPR and the Data Protection Act 2018.

If you have any questions about this policy or your personal data, contact Charlie at charliegaskin101@gmail.com or on 01799 611595.

2. What data we collect

We only collect what we need to respond to you and provide our services:

• Enquiry details you submit through our website form: your name, and any of phone number, email address, property address and the message you write.
• Contact details you give us when you message us on WhatsApp, call us, or email us directly.
• Care plan details if you sign up to a Care Plan: your name, contact details, service address and the bank details needed to set up a Direct Debit (these are collected and held by GoCardless, not by us — see section 5).
• Technical and usage data collected automatically when you visit the site, such as your approximate location, device and browser type, and the pages you view. This is collected via analytics cookies (see section 7).

We do not knowingly collect any special-category data (such as health information), and you should not send us any.

3. How and why we use your data

We use your personal data only where the law allows. The lawful bases we rely on are:

• To respond to your enquiry and provide a quote — on the basis of taking steps at your request before entering into a contract, and our legitimate interest in answering people who contact us.
• To carry out plumbing work or deliver a Care Plan you have asked for — on the basis of performing our contract with you.
• To take payment, including Direct Debit for Care Plans — on the basis of performing our contract and complying with our legal obligations.
• To keep records for tax, accounting and insurance purposes — on the basis of our legal obligations and legitimate interests.
• To understand how our website is used and improve it — on the basis of your consent to analytics cookies, which you can withdraw at any time.

4. Our website enquiry form

When you submit the enquiry form, your message is processed by a secure third-party service we use to handle form submissions and email the enquiry to us. The data is transmitted over an encrypted (HTTPS) connection and is used only to deliver your enquiry to Charlie so he can reply. It is not used for marketing.

5. Who we share your data with

We never sell your personal data. We share it only with the service providers we rely on to run the business, and only as far as needed:

• GoCardless — to set up and collect Care Plan Direct Debit payments. GoCardless is the payment processor and handles your bank details directly under its own privacy policy.
• Our website host and form/email providers — to operate the website and deliver your enquiry to us.
• Google — for website analytics, where you have consented to analytics cookies (see section 7).
• Meta (WhatsApp) — if you choose to contact us via the WhatsApp links, your message is handled under WhatsApp's own privacy policy.
• Professional advisers and authorities — such as our accountant, insurer, or HMRC, where we are legally required or it is necessary to protect our business.

Some of these providers may process data outside the UK. Where they do, we rely on appropriate safeguards (such as UK adequacy regulations or standard contractual clauses).

6. How long we keep your data

We keep enquiry messages for up to 24 months after our last contact, unless you become a customer. Records relating to work carried out, Care Plans and payments are kept for at least 6 years to meet tax, accounting and insurance requirements. We delete or anonymise data once we no longer have a lawful reason to keep it.

7. Cookies and analytics

Our website uses cookies and similar technologies. Strictly necessary cookies make the site work and are always on. We also use analytics cookies (Google Analytics via Google Tag Manager) to understand how visitors use the site — these only run where you have given consent, and you can withdraw consent or block cookies at any time through your browser settings. Analytics scripts are loaded in a way that limits their impact on your privacy and the site's performance.

8. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to our processing of your data;
• data portability; and
• withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email charliegaskin101@gmail.com. We will respond within one month.

9. Complaints

If you are unhappy with how we have handled your data, please contact us first so we can put things right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk or on 0303 123 1113.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows when it was last revised. Please check back occasionally for changes.

CG Plumbing · Halstead, Essex · charliegaskin101@gmail.com · 01799 611595