Privacy Policy

---

 Effective date: 07/08/2025

 1. Introduction

This Website Privacy Policy explains how CDS Heating Services Ltd (“we”, “us”, or “our”) collects, uses, and protects your personal information when you visit our website or submit an enquiry. 

We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR). 

This policy applies only to data collected through our website. For more information about how we handle customer, client, employee, or subcontractor data in other contexts, you may request a copy of our other relevant privacy notices using the email:

 info@cdsheating.com

For full company registration details, please see our Company Information page via the CDS Heating Services website.

For our use of cookies and similar technologies, please see our Cookies Policy page via the CDS Heating Services Website. 

2. What Data We Collect

We may collect and process the following types of personal data through our website:

a) Data You Submit Directly

• Customer Contact Form: When you submit a question or request, we collect your name, email address, phone number, and message content.
• Job interest form: If you express interest in working with us, we collect similar contact details and your message. These are treated as general enquiries and not formal job applications.

b) Automatically Collected Data

When your browse our website, certain data is collected automatically via our hosting provider and through cookies. This includes:

• IP address
• Browser and operating system
• Pages visited and time spent
• Device type and general location (based on IP)
• Referral sources (e.g. search engine or social media)

Please refer to our cookies Policy for more detailed information on cookies and how to manage your preferences.

3. How We Use This Data

We use the data we collect through our website to:

• Respond to enquiries or messages you send via our online contact or job interest forms.
• Provide information about our services when requested.
• Monitor and improve the performance and usability of our website.
• Maintain website security and protect against misuse.

We do not use your data for automated decision-making, email marketing, or advertising campaigns.

4. Cookies and Similar Technologies

Our website uses cookies and similar technology to help us understand how users interact with the site and to improve performance.

Cookies are small text files placed on your device to store limited information. These may be set by us (first-party cookies) or by third-party services (e.g. analytic tools)

For a full list of cookies and their purposes, and to learn how to manage or disable them, please visit our Cookies Policy.

5. Legal Basis for Processing

Under the UK GDPR, we rely on the following legal bases to process your personal data:

• Consent: For cookies and tracking technologies that require it.
• Legitimate Interests: To respond to enquiries, manage our website, and protect our business.
• Contractual Necessity: When we need to communicate with you about our services or requests you initiate.
• Legal Obligation: Where we are required to retain certain information for legal or regulatory reasons.

6. Data Sharing and Third Parties

We do not sell your personal data. However, we may share your data with trusted third-parties when necessary, including:

• GoDaddy (Our web hosting provider), who may process analytics or access logs.
• Email service providers (Microsoft Outlook), to receive and store your enquiries
• Website developers or IT security providers, if needed for maintenance or support

All third parties are required to respect the security of your data and to process it lawfully.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy. 

• Form submissions: Retained for at least 4 months. If a job or follow-up is required, we may hold onto the data until we are convinced the work is completed.
• Automatically Collected Data: Retention depends on our hosting provider’s default settings. See our Cookies Policy for details. 

We do not operate our own independent backup systems at this time. Data stores vis Outlook may be subject to Microsoft’s standard retention policies.

8. How We Protect Your Data

We take reasonable steps to protect your data from loss, misuse, or unauthorised access. Measures include:

• SSL encryption of all website traffic
• Use of secure email services (Microsoft Outlook)
• Limiting data access to authorised staff only
• Regular updates and monitoring or site performance and security.

However, please note that no method of transmission over the internet is entirely secure; we cannot guarantee absolute security.

9. Your Rights Under the UK GDPR

You have the right to:

• Request access to your personal data
• Ask for inaccurate data to be corrected
• Request deletion of your data in certain circumstances
• Object to or restrict how your data is used
• Withdraw consent at any time (for data processed under consent)
• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, please contact us using the details below.

10. Contact Details

If you have any questions about this policy or data, please get in touch:

Email: info@cdsheating.com

Postal Address: 6 Green Meadow view, Heolgerrig, Merthyr Tydfil, CF481BG

11. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in law, technology, or our services. The latest version will always be available on this page, with the “Effective Date” listed at the top.