Privacy policy

Who we are

Carr Denzy Plumbing & Gas, Nottingham, Nottinghamshire. We are the data controller for the information described here. You can reach us on +44 7938 463358 or at carrdenz@gmail.com, and we will give you a postal address on request.

What we collect

• When you send an enquiry: your name, the phone number or email address you give us, the address of the property, a description of the problem, and any photographs you attach.
• If we do work for you: the job record, our notes and photographs, quotes, invoices and payment records.
• If you sign in: your email address, used to send you a one-time sign-in link. We do not store a password because we do not use passwords.
• Automatically: a one-way hash of your IP address when you submit the enquiry form, kept for 24 hours to stop the form being abused. We do not store the address itself, and there is no advertising or analytics tracking on this site.

Why we can hold it

For enquiries and job records, because it is necessary to take steps at your request and to perform our contract with you. For invoices and payment records, because we have a legal obligation to keep accounting records. For the rate-limit hash, because we have a legitimate interest in keeping the form working for genuine customers.

How long we keep it

Invoices and their line items are kept for six years, because HMRC requires it. Enquiries that never become jobs are deleted after twelve months. Job photographs are kept for six years alongside the invoice, as they are often the only record of what was behind a wall. The rate-limit hash is deleted after 24 hours.

Who else sees it

Our hosting provider (Vercel) and our database and file storage provider (Supabase) process data on our behalf. Emails are sent through Resend. We do not sell data, and we do not share it for marketing. Where a job requires a specialist subcontractor we will tell you before passing on your details.

Your rights

You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, or object to how we use it. Email carrdenz@gmail.com and we will respond within one month. Note that we cannot delete an invoice inside the six-year retention period, as we are legally required to keep it. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies

This site sets one cookie, and only once you sign in: the session cookie that keeps you signed in. It is strictly necessary for the service to work, so it does not require your consent and there is no cookie banner. We use no analytics, advertising or tracking cookies of any kind.