Privacy Policy

When you contact us or ask us to carry out work, we may receive your name, phone number, email address, property address or postcode, service preferences, and information about the work. This can include photographs, correspondence, survey notes, quotations, invoices and payment records. Please only send information needed for your enquiry and avoid sending sensitive personal information.

Our website hosting and security providers may process technical information such as your IP address, browser, device, requested pages and access times to deliver and protect the website.

When you submit the enquiry form, your details pass securely through our website server to Brevo, our email and SMS service provider. The full enquiry is sent to Heritage by email. A short SMS alert to our business mobile may include your name, phone number, postcode or town and requested service. We use this information to respond to you, not to subscribe you to marketing.

The website does not save a permanent copy of the enquiry in its own database. Short-lived request identifiers, hashed request fingerprints and rate-limit information help prevent duplicate submissions and abuse. Brevo and our email provider process and retain messages and delivery records under their service arrangements. If you see an error, do not assume the enquiry reached us; your fields remain on the page so you can retry or contact us directly. Closing or refreshing the page can clear unsent details.

• Enquiries, surveys and quotations: to take steps at your request before entering a contract.
• Carrying out agreed work: to perform our contract, including scheduling visits, arranging materials, invoicing and dealing with contractual aftercare.
• Accounting and legal requirements: to meet legal obligations, including tax and record-keeping requirements.
• Security, business administration and disputes: our legitimate interests in protecting the website, maintaining appropriate records, responding to general correspondence and establishing or defending legal claims. We consider your rights and only use information proportionately.
• Optional marketing: where consent is required, we will ask separately before sending marketing. Requesting a quotation is not consent to marketing. You can withdraw consent at any time without affecting earlier lawful processing.

We do not sell your personal information. Where necessary for the purposes above, information may be shared with providers supporting our hosting, email, IT, accounting and payment administration; professional advisers, insurers and regulators; and tradespeople or suppliers involved in your agreed work. We use Brevo to process enquiry emails and business SMS notifications. See Brevo’s Privacy Policy.

For coordinated roofing, solar or glazing work, we may need to share relevant contact details, property information and the agreed specification with the installers or suppliers involved. We limit sharing to what is needed and require appropriate confidentiality and data protection safeguards. Information may also be disclosed where required by law.

Some technology providers may process information outside the UK. Where a transfer is subject to UK data protection law, an appropriate safeguard is required, such as UK adequacy regulations or approved contractual safeguards. Contact us for information about the safeguards relevant to your information.

We keep personal information only for as long as needed for the purpose it was collected. For enquiries that do not lead to work, this depends on whether the enquiry remains active and whether a record is needed to resolve an issue. Customer and project records are retained as needed for the contract, aftercare, guarantees and potential legal claims.

Accounting and tax records are kept for the applicable statutory period. Some records may need to be retained longer where a dispute, legal obligation or guarantee requires it. Records no longer needed should be securely deleted or anonymised. You can ask us about the retention period applying to your records.

The website does not currently include an advertising tracker or analytics tool. It does not use a design-selection cookie or read a saved design preference. Hosting and security infrastructure may use essential technology to deliver and protect the site.

Fonts are loaded from Google Fonts. Your browser connects to Google to request those files, which can disclose technical information including your IP address and browser information. See Google’s Privacy Policy.

Maps, Google reviews, Yell and other independent ratings are external links rather than embedded review or map widgets. Their own privacy and cookie policies apply when you visit them. If non-essential tracking is introduced, this notice and any required consent controls must be updated before it is used.

We aim to use appropriate organisational and technical measures to protect personal information and restrict access to those who need it for their work. No website or email service can guarantee complete security. Do not send bank card details, passwords or sensitive documents through the enquiry form or ordinary email.

Depending on the circumstances and the lawful basis used, you can ask to access your personal information, correct inaccurate information, erase information, restrict its use, or receive and transfer information you have provided in a portable format. You may object to processing based on legitimate interests and can always object to direct marketing.

Where we rely on consent, you may withdraw it at any time. These rights are not absolute: for example, legal record-keeping requirements may prevent deletion. Contact us using the details below. We normally respond within one month, usually free of charge, and may request proportionate proof of identity. If a lawful extension is needed, we will explain why.

You do not have to provide personal information to browse the site. We need enough contact and property information to respond to an enquiry, arrange a survey or perform work; without it we may be unable to help. We do not use your information for solely automated decisions with legal or similarly significant effects, or for profiling.

Please contact us first if you have a concern so we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk/make-a-complaint or on 0303 123 1113. You do not have to contact us before approaching the ICO.

This notice covers customers, prospective customers and visitors to this website, not employment applications. We may update it when our services or information handling changes; the latest version and review date will appear here.