Privacy Notice | RapidBoilers

RapidBoilers Ltd ("we", "us", "our") is committed to protecting your personal data. This Privacy Notice explains how we collect, use, store, and share your personal information when you use our website or engage with our services. This notice is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

RapidBoilers Ltd is a company registered in England and Wales (Company No. XXXXXXXX). Our registered address is Birmingham, West Midlands. We are the data controller for the personal data we process about you.

If you have any questions about this Privacy Notice or how we handle your data, please contact us at: privacy@rapidboilers.com or by post to our registered address.

2. What Data We Collect

We may collect and process the following categories of personal data:

Contact information: name, email address, telephone number, and postal address
Property information: property type, postcode, and details relevant to your heating system
Communication records: messages sent via our contact form, emails, and telephone call logs
Financial information: payment details for services rendered (processed securely through our payment provider)
Technical data: IP address, browser type, operating system, and pages visited on our website (via cookies and analytics)
Marketing preferences: your consent (or otherwise) to receive marketing communications

3. How We Use Your Data

We use your personal data for the following purposes and on the following legal bases:

To provide our services (contract performance) – processing your enquiry, booking appointments, carrying out boiler installation, repair or servicing work
To communicate with you (legitimate interests) – responding to your enquiries, providing appointment reminders, and following up after completed work
To send marketing communications (consent) – only where you have opted in to receive our newsletters or promotional emails. You may withdraw consent at any time
To comply with legal obligations – maintaining Safety records, financial records, and other statutory requirements
To improve our website (legitimate interests) – analysing website usage to enhance user experience

4. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes set out in this notice. Specifically:

Customer service records and Safety certificates: 6 years after the date of service
Financial and transaction records: 7 years (HMRC requirement)
Marketing data: until you withdraw consent or request erasure
Website analytics data: 26 months

5. Sharing Your Data

We do not sell your personal data to third parties. We may share your data with:

Boiler manufacturers (e.g. Worcester Bosch) for the purpose of registering your product warranty
Our payment processing provider for secure payment handling
Our website hosting and email service providers (who act as data processors on our behalf)
HMRC and other regulatory bodies where legally required
The the official register, as required by law for gas work

6. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access – to receive a copy of the personal data we hold about you
Right to rectification – to request correction of inaccurate data
Right to erasure – to request deletion of your data in certain circumstances
Right to restriction – to request that we restrict processing of your data
Right to data portability – to receive your data in a structured, machine-readable format
Right to object – to object to processing based on legitimate interests or for direct marketing

To exercise any of these rights, please contact us at privacy@rapidboilers.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Cookies

Our website uses cookies to enhance your experience. We use essential cookies (necessary for the site to function), analytics cookies (to understand how visitors use the site, via Google Analytics), and preference cookies (to remember your settings). You can manage your cookie preferences at any time via our Cookie Settings tool. For full details, please see our separate Cookie Policy.

8. Security

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure, including SSL encryption on all web forms, secure server hosting, and restricted staff access to personal data.

9. Changes to This Notice

We may update this Privacy Notice from time to time. We will notify you of significant changes by posting a notice on our website. The date at the top of this page indicates when it was last updated.