Privacy Policy
This policy explains how Prestige Flow ("we", "us", "our") collects and processes personal data when you use our website, request a quote, or book drain and plumbing services. We process data in line with UK GDPR and the Data Protection Act 2018.
Who We Are
Data controller: Prestige Flow, 39 Broomfield, Maida Vale, London W9 2EH, United Kingdom.
Contact for privacy queries: [email protected]
Data We Collect
- Identity and contact data: name, email, telephone number, service address.
- Job details: booking date/time, property notes, access details, service history.
- Communication records: messages submitted through forms, phone, or email.
- Technical data: IP address, browser type, device information, cookie identifiers.
- Transaction data: service selected, amount, Stripe payment status (we do not store full card details).
How We Use Your Data and Lawful Bases
- To provide quotes and services: contract performance.
- To schedule visits and send service updates: contract performance and legitimate interests.
- To process payments securely through Stripe Checkout: contract performance.
- To prevent fraud and keep records: legitimate interests and legal obligation.
- To improve website performance and security: legitimate interests.
- To send marketing (where applicable): consent, which you can withdraw at any time.
Sharing Data
We only share data when necessary with trusted processors, including:
- Stripe (payment processing)
- Web3Forms (form delivery)
- Website hosting and analytics providers
- Professional advisers or authorities where legally required
International Transfers
Some providers may process data outside the UK. Where this happens, we use appropriate safeguards such as UK adequacy decisions or contractual clauses.
Data Retention
- Quote and enquiry records: up to 24 months.
- Completed service records and invoices: up to 7 years for tax and legal compliance.
- Marketing consent records: until consent is withdrawn or data is no longer needed.
Your Rights
Under UK GDPR, you may request access, correction, deletion, restriction, objection, and data portability, and may withdraw consent at any time where processing relies on consent.
You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk.
Security
We apply technical and organisational measures to protect personal data, including access controls, HTTPS, and limited data access on a need-to-know basis.
Updates
We may update this policy periodically. Significant changes will be shown on this page with a revised date.