Data Policy
Your Data, Handled with Care and Responsibility
At Westwood Heating & Plumbing Limited, we are dedicated to handling personal data in compliance with the requirements of the General Data Protection Regulation (GDPR).
Westwood Plumbing and Heating Limited (“we,” “us,” or “our”) is committed to safeguarding the privacy and personal data of visitors to our website, westwoodplumbers.co.uk. This Data Usage Policy outlines how we collect, use, store, and protect your personal information in compliance with the Data Protection Act 2018 and the UK General Data Protection Regulation (GDPR).
This policy should be read in conjunction with our Privacy Policy.
Article 5 of the GDPR sets out the following principles for personal data processing:
Lawfulness, Fairness, and Transparency: Personal data must be processed lawfully, fairly, and in a transparent manner concerning individuals.
Purpose Limitation: Data must be collected for specified, explicit, and legitimate purposes and not processed further in ways incompatible with those purposes. Exceptions include further processing for archiving in the public interest, scientific or historical research, or statistical purposes, provided such processing aligns with initial purposes.
Data Minimisation: Personal data should be adequate, relevant, and limited to what is necessary for the purposes for which it is processed.
Accuracy: Data must be accurate and kept up to date where necessary. Reasonable steps must be taken to promptly erase or rectify any inaccurate data in relation to its intended purpose.
Storage Limitation: Personal data should be kept in a form that permits identification of individuals no longer than necessary for its processing purpose. Longer retention is permissible for archiving in the public interest, scientific or historical research, or statistical purposes, provided appropriate technical and organisational safeguards are implemented to protect individuals’ rights and freedoms.
Security: Personal data must be processed in a manner that ensures its security, protecting it against unauthorised or unlawful processing, accidental loss, destruction, or damage. This must be achieved using suitable technical and organisational measures.
Westwood Heating & Plumbing Limited, we are committed to upholding these principles to ensure the integrity, security, and lawful handling of your personal data.
General Provisions
This policy applies to all personal data handled by Westwood Heating & Plumbing Limited.
The designated Responsible Person will oversee the Company’s continued adherence to this policy and ensure compliance.
This policy will be reviewed no less than once annually to ensure its effectiveness and relevance.
Westwood Heating & Plumbing Limited is registered with the Information Commissioner’s Office (ICO) as an organisation that processes personal data, in accordance with legal requirements.
Ensuring Lawful Data Processing
Westwood Heating & Plumbing Limited will process all personal data by one of the following lawful bases: consent, contract, legal obligation, vital interests, public task, or legitimate interests (refer to ICO guidance for further details).
The appropriate lawful basis for each processing activity will be documented in the Register of Systems.
When consent is used as the lawful basis for processing, records of opt-in consent will be securely stored alongside the relevant personal data.
For communications sent based on consent, individuals will be provided with a clear option to withdraw their consent at any time. Systems will be in place to ensure that any withdrawal of consent is promptly and accurately reflected in the Company’s records.
Minimising Data Collection
Westwood Heating & Plumbing Limited will ensure that all personal data collected and processed are adequate, relevant, and restricted to what is strictly necessary for the intended purposes.
Ensuring Data Accuracy
Westwood Heating & Plumbing Limited will take all reasonable steps to ensure that personal data is accurate and reliable.
When required by the lawful basis for processing, measures will be implemented to keep personal data up to date and correct.
Data Retention and Removal
Westwood Heating & Plumbing Limited will implement an archiving policy to ensure personal data is not kept longer than necessary. This policy will be reviewed annually for each area where personal data is processed.
The archiving policy will define which data should or must be retained, the duration of retention, and the justification for keeping it.
Data Security and Protection
Westwood Heating & Plumbing Limited is committed to ensuring that personal data is securely stored using up-to-date, modern software.
Access to personal data will be restricted to authorised personnel who require it for their role, with robust security measures in place to prevent unauthorised access or sharing.
When personal data is deleted, it will be done securely, ensuring that the data is irrecoverable.
The Company will implement appropriate backup and disaster recovery solutions to safeguard personal data.
Data Breach Response
In the event of a security breach resulting in accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access to personal data, Westwood Heating & Plumbing Limited will promptly assess the risk to individuals’ rights and freedoms. If necessary, the breach will be reported to the Information Commissioner’s Office (ICO) by legal requirements. (Further information is available on the ICO website.)
Changes to This Policy
We may update this Data Usage Policy from time to time. We will notify you of any changes by posting the new policy on our website. You are advised to review this policy periodically for any changes. This Data Usage Policy was last updated on 7th January 2025.
Contact Us
If you have any questions or concerns regarding this Data Usage Policy or our data practices, please contact us by writing to Westwood Plumbing & Heating Limited, 28 North Bar Within, Beverley, East Yorkshire HU17 8DL, calling 01482 688788 or emailing hello@westwoodplumbers.co.uk.
