This Privacy Policy explains how AM Heating & Renewable ("we", "us", "our") collects, uses, stores and protects personal data about visitors to our website and customers who contact us. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are (Data Controller)

The data controller responsible for your personal data is:

Aleksander Maku, trading as AM Heating & Renewable, a sole trader operating in the United Kingdom.

Contact details:

Email: info@amrenewableheating.co.uk
Phone: 07875 084694

If you need to contact us by post regarding privacy matters, please email us and we will provide the appropriate correspondence address where necessary.

2. What personal data we collect

We only collect data you provide to us directly, or that is strictly needed to operate the website:

Contact details you submit through the quote form or by email/phone: name, email address, phone number, postal address and property details.
Job-related information you share so we can quote or carry out work (type of property, service required, photos you choose to send).
Technical data automatically collected by your browser: IP address, browser type, device, pages visited, referring URL. This is used only for security and to keep the site working.
Cookies as described in our Cookie Policy.

We do not knowingly collect data from children under 13, and we do not collect special category data (health, religion, etc.).

3. How we use your data and our lawful basis

To respond to your enquiry and prepare a quote — lawful basis: steps taken at your request prior to entering a contract (UK GDPR Art. 6(1)(b)).
To carry out the work and invoice you — lawful basis: performance of a contract.
To meet legal obligations (e.g. Gas Safe records, F-Gas logs, accounting and tax records) — lawful basis: legal obligation.
To keep the website secure and detect abuse — lawful basis: legitimate interests (running a safe website).
Optional analytics cookies — lawful basis: your consent, which you can withdraw at any time.

We do not use your personal data for automated decision-making or profiling, and we do not sell your data.

4. How we share your data

We only share personal data where necessary, with:

Our email provider (Microsoft / Hotmail) used to receive enquiries.
Manufacturers or suppliers when registering a warranty on equipment we install on your behalf (e.g. Daikin, Vaillant).
Our accountant for invoicing and statutory record-keeping.
Regulators such as Gas Safe Register or REFCOM, where required by law.
Insurance providers where the work is being carried out under a home insurance claim.

We will never sell, rent or trade your personal data. We do not transfer data outside the UK or EEA except where a service provider (e.g. email hosting) does so under adequate safeguards (UK adequacy regulations or Standard Contractual Clauses).

5. How long we keep your data

Quote enquiries that don't lead to work: up to 12 months, then deleted.
Customer records (invoices, installation records, warranty data): 7 years, to meet HMRC and Gas Safe / F-Gas requirements.
Website logs: up to 90 days.

6. How we protect your data

Our website is served over HTTPS. Customer records are kept on password-protected devices and reputable cloud services. Only the business owner and authorised engineers have access. In the unlikely event of a personal data breach affecting your rights, we will notify the Information Commissioner's Office (ICO) within 72 hours and, where required, notify you directly.

7. Your rights under UK GDPR

You have the right to:

Access the personal data we hold about you.
Have inaccurate data corrected.
Request deletion of your data ("right to be forgotten") where there is no overriding legal reason to keep it.
Restrict or object to how we use your data.
Receive your data in a portable format.
Withdraw consent at any time (for anything you previously consented to).

To exercise any of these rights, email info@amrenewableheating.co.uk. We will respond within one month.

8. Complaints

If you are unhappy with how we handle your data, please contact us first and we will try to put things right. You also have the right to complain to the UK supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113 · ico.org.uk

9. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of the page shows when changes were made.

See also: Cookie Policy · Terms & Conditions