Privacy Policy

This policy covers asbestosremovalguildford.co.uk and the enquiry form on it. It is written for this site specifically rather than adapted from a template, because a generic policy that names processors we do not use would be worse than none.

Last reviewed: this page is reviewed when the site changes. Anything marked as a placeholder below is completed before launch.

Who we are

Asbestos Removal Guildford.

For the purposes of the UK General Data Protection Regulation and the Data Protection Act 2018 we are the data controller for information submitted through this website.

Contact for any data protection question: info@asbestosremovalguildford.co.uk.

What the enquiry form collects

The form on this site asks for:

• your first name, and your last name if you give it
• a telephone number
• a postcode
• which service your enquiry is about
• an optional message
• an optional photograph

It also records, automatically, the page you submitted from, the page that referred you to the site, your IP address and your browser user agent string. Those are collected to identify and reject automated submissions and to understand which pages generate enquiries.

The form contains a hidden field that a person never sees and a timestamp written when the page loads. Both are anti-spam measures. If either indicates an automated submission the enquiry is discarded.

Why we collect it, and the lawful basis

To answer your enquiry and quote for work. Lawful basis: steps taken at your request prior to entering into a contract, under Article 6(1)(b).

To keep a record of enquiries received. Lawful basis: legitimate interests under Article 6(1)(f), specifically running the business, being able to find an earlier enquiry, and being able to demonstrate what was quoted. We have considered your interests and consider the impact minimal because the data is limited and is not used for anything else.

To identify and reject automated submissions. Lawful basis: legitimate interests, specifically keeping the enquiry system usable.

The consent tick on the form confirms you are content to be contacted about the enquiry. We do not rely on it as the lawful basis for holding the enquiry itself, and ticking it does not sign you up to anything.

Photographs

If you attach a photograph it is sent to us by email and is used to identify the material and price the job.

Uploaded photographs are not written to storage on the web server. The endpoint attaches the file to the notification email and discards it. Please do not include people, vehicle registrations or anything else identifying in the frame, since a picture of a roof does not need them.

Who processes your data

Two processors, and no others.

Resend delivers the notification email carrying your enquiry. Your submitted details and any photograph pass through their service in order to reach our inbox.

Google Sheets receives a copy of each enquiry as a row in a private spreadsheet, so that enquiries can be tracked without a database. It holds your name, phone number, postcode, the service you chose, your message and the page you sent it from. Your photograph is not stored there.

A backup copy of each enquiry is also written to a file on our web server, outside the part of the server the public can reach, so that an enquiry is not lost if an email fails to send.

Both are named here because a privacy policy that says "trusted third parties" tells you nothing.

We do not sell your data, we do not share it for marketing, and we do not pass it to other asbestos contractors. Where a job involves licensed work we will arrange an HSE-licensed contractor, and in that case we will tell you before passing on the details needed to quote.

Analytics and cookies

This site does not use analytics and does not set any cookies of its own. There is no advertising network, no social media pixel and no session tracking.

The one exception is the coverage map on the areas page. It is a Google Maps embed, and Google may set its own cookies when it loads. If you would rather avoid that, the areas page lists every town we cover as a link, so you can use the site without the map.

How long it is kept

Enquiry emails, the spreadsheet row and the backup copy are kept for three years from the date of the enquiry, then deleted.

Three years is not arbitrary. A hazardous waste consignment note has to be kept for at least three years, and keeping the enquiry that led to a job for the same period means the paperwork for a job stays coherent.

Where an enquiry does not lead to work, the same period applies, because a person who asked about a garage roof in one year frequently asks again in the next.

Anti-spam records, meaning the rate limiting counters, are kept for a few days at most.

Your rights

Under UK data protection law you can ask us to:

• confirm what data we hold about you, and give you a copy
• correct anything inaccurate
• delete it
• restrict what we do with it
• object to processing carried out under legitimate interests
• provide it in a portable format

Email info@asbestosremovalguildford.co.uk and we will respond within one month. There is no charge.

If you are not satisfied with how we have handled a request you can complain to the Information Commissioner's Office at ico.org.uk, or by telephone on 0303 123 1113.

Security

The site is served over HTTPS. The enquiry endpoint checks that submissions originate from this site, rate limits by IP address, and verifies that any attached file is genuinely an image rather than trusting its file extension.

Credentials for the email service are held in a configuration file outside the public web root and are not in the website's code repository. The enquiry record file is stored outside the public web root and is not reachable over the web.

No system is perfect. If you believe there has been a problem, tell us at info@asbestosremovalguildford.co.uk and we will investigate and, where the law requires it, notify the Information Commissioner's Office.

Changes

If this policy changes materially, the change will be described here rather than being made silently.

How work is quoted and carried out is set out separately in the terms.