• Home
  • GDPR (Data Protection) Policy

GDPR (Data Protection) Policy

Effective Date: March 25, 2026

Company: Smith’s Plumbing & Heating Division

1. Purpose This policy sets out how Smith’s Plumbing & Heating Division (“the Company”) handles the personal data of our customers, suppliers, and other third parties. This policy ensures we are compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Protection Principles Under GDPR, all personal data must be:

  • Processed lawfully, fairly, and in a transparent manner.
  • Collected for specified, explicit, and legitimate purposes.
  • Adequate, relevant, and limited to what is necessary.
  • Accurate and, where necessary, kept up to date.
  • Kept in a form which permits identification for no longer than is necessary.
  • Processed in a manner that ensures appropriate security of the personal data.

3. Your Legal Rights Under the UK GDPR, you have the following rights concerning your personal data:

  • The right to be informed: You have the right to know how your data is being collected and used.
  • The right of access: You can request a copy of the personal data we hold about you.
  • The right to rectification: You can request that we correct any inaccurate or incomplete data.
  • The right to erasure (“Right to be forgotten”): You can request the deletion or removal of your personal data where there is no compelling reason for its continued processing.
  • The right to restrict processing: You can block or suppress the processing of personal data.
  • The right to data portability: You can request to receive your personal data to reuse with another service.
  • The right to object: You can object to processing based on legitimate interests or direct marketing.

4. Consent and Legitimate Interest We process personal data based on legitimate business interests (i.e., providing plumbing and heating services, fulfilling contract obligations) and, where necessary, on your explicit consent. You have the right to withdraw your consent at any time.

5. Data Breaches In the event of a data breach that is likely to result in a high risk to the rights and freedoms of individuals, Smith’s Plumbing & Heating Division will notify the Information Commissioner’s Office (ICO) and the affected individuals without undue delay, and in any event within 72 hours of becoming aware of it.

6. Contact Us If you have any questions about this Policy, please contact us at: