Privacy Policy

1. Introduction

Whitehouse Outdoor Services ("we", "our", or "us") is committed to protecting your privacy and ensuring your personal data is handled in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website or services.

2. Information We Collect

We may collect and process the following personal data:

3. How We Use Your Information

We use your personal data for the following purposes:

• To provide quotes and estimates for our services
• To schedule and complete service appointments
• To process payments and maintain financial records
• To communicate with you about your service requests
• To send service reminders and maintenance recommendations
• To improve our website and services
• To comply with legal obligations

4. Legal Basis for Processing

We process your personal data under the following lawful bases:

• Contract: To fulfill our contractual obligations when providing services
• Legitimate Interest: To operate our business and improve our services
• Consent: For marketing communications (where applicable)
• Legal Obligation: To comply with tax, accounting, and legal requirements

5. How We Share Your Information

We do not sell your personal data. We may share your information with:

• Payment Processors: GoCardless for secure payment processing
• Service Providers: Third-party contractors who assist in delivering our services
• Legal Authorities: When required by law or to protect our legal rights

All third parties are required to keep your data secure and use it only for the purposes we specify.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Generally:

• Customer records: 7 years (for tax and accounting purposes)
• Contact form enquiries: 2 years
• Marketing communications: Until you unsubscribe
• Website analytics: 26 months

7. Your Rights

Under UK GDPR, you have the following rights:

To exercise any of these rights, please contact us using the details below.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes:

• Secure SSL/TLS encryption for data transmission
• Regular security assessments and updates
• Limited access to personal data on a need-to-know basis
• Secure backup and recovery procedures

9. Cookies

Our website uses cookies to improve your browsing experience. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

11. Complaints

If you believe your data protection rights have been breached, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the new policy on our website with an updated "Last Updated" date.