Privacy Policy for FluePoint Shropshire

Last updated: 31 October 2026

FluePoint Shropshire (“we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit our website or otherwise interact with us, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to personal data we process as a data controller in connection with our website and related services.

1. Who We Are

• Business name: FluePoint Shropshire
• Location: Based in Shropshire, United Kingdom
• Contact for privacy matters:  info@fluepoint.co.uk

If you have any questions about this policy or how we handle your data, please contact us using the details above. We are not currently required to appoint a Data Protection Officer, but the contact above handles all privacy enquiries.

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity and contact data: Name, email address, telephone number, postal address (e.g. when you submit a contact or enquiry form, request a quote, or book a service).
• Technical and usage data: IP address, browser type and version, device information, operating system, time zone setting, pages visited, time spent on pages, referral source, and other information collected via cookies or similar technologies.
• Communications data: Records of correspondence when you contact us by email, phone, form, or other means.
• Transaction and service data (if applicable): Details of services requested or provided, payment information (processed via third-party payment providers), and any information needed to fulfil a contract.
• Marketing preferences: Your preferences regarding receiving marketing communications from us.

We do not intentionally collect special category (sensitive) data or data relating to children under 13. Our website and services are not directed at children.

3. How We Collect Your Data

• Directly from you (contact forms, email, phone, bookings, or account creation if offered).
• Automatically via cookies, server logs, and similar technologies when you browse our website.
• From third parties where relevant (e.g. analytics providers, payment processors, or publicly available sources if you contact us via social media).

4. How and Why We Use Your Personal Data (Purposes and Lawful Bases)

We only process personal data where we have a lawful basis under UK GDPR. The main purposes and bases are:

Purpose	Examples	Lawful Basis
Responding to enquiries and providing services	Handling contact forms, quotes, bookings, or customer support	Performance of a contract or steps prior to entering a contract; Legitimate interests
Operating and improving our website	Analytics, security, troubleshooting, and site performance	Legitimate interests
Marketing (where consented)	Newsletters or promotional emails about our services	Consent (you can withdraw at any time)
Legal and regulatory compliance	Record-keeping, tax, or responding to legal requests	Legal obligation
Fraud prevention and security	Protecting our website and business	Legitimate interests

Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms. You can object to processing based on legitimate interests at any time (see Your Rights below).

5. Cookies and Similar Technologies

Our website uses cookies and similar technologies. Essential cookies are necessary for the site to function. Non-essential cookies (e.g. analytics or marketing) are only used with your consent where required.

For full details, including how to manage your cookie preferences, please see our separate Cookie Policy [link to Cookie Policy if available] or the cookie settings tool on our website.

6. Who We Share Your Data With

We may share personal data with:

• Service providers acting as processors on our behalf (e.g. website hosting, email providers, analytics tools such as Google Analytics, payment processors, CRM systems). These parties are bound by contracts requiring them to protect your data and use it only for the purposes we specify.
• Professional advisers (accountants, lawyers, insurers) where necessary.
• Law enforcement, regulators, or other third parties where required by law or to protect our rights, property, or safety.

We do not sell your personal data.

7. International Transfers

Some of our service providers may process data outside the UK (for example, in the European Economic Area or the United States). Where this occurs, we ensure appropriate safeguards are in place, such as:

• Adequacy decisions recognised by the UK,
• Standard Contractual Clauses (SCCs) approved for use in the UK, or
• Other lawful transfer mechanisms.

You can request further details of these safeguards by contacting us.

8. How Long We Keep Your Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements.

Typical retention periods:

• Enquiry/contact data: generally up to 2–3 years after the last interaction (or longer if a contract is formed).
• Customer/service records: for the duration of the relationship plus a reasonable period afterwards (often 6–7 years for accounting/tax purposes).
• Marketing data: until you withdraw consent or unsubscribe.
• Technical/analytics data: usually shorter periods in aggregated or anonymised form.

When data is no longer needed, we securely delete or anonymise it.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or alteration. These include secure hosting, access controls, encryption where appropriate, and staff awareness of data protection obligations. While no system is completely secure, we take reasonable steps to protect your information.

10. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

• Right of access – Request a copy of the personal data we hold about you.
• Right to rectification – Ask us to correct inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”) – Request deletion of your data in certain circumstances.
• Right to restrict processing – Ask us to limit how we use your data.
• Right to data portability – Receive your data in a structured, commonly used, machine-readable format (where applicable).
• Right to object – Object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent – Where processing is based on consent, withdraw it at any time (this does not affect prior processing).
• Rights related to automated decision-making and profiling – We do not currently carry out solely automated decision-making that produces legal or similarly significant effects.

To exercise any of these rights, please contact us using the details in section 1. We will respond within one month (or as otherwise required by law). You may also be asked to provide proof of identity.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:

• Website: ico.org.uk
• Telephone: 0303 123 1113

We would appreciate the chance to deal with your concerns first, so please contact us before approaching the ICO.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised “Last updated” date. Significant changes may be notified by email or a notice on our website where appropriate.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact:

FluePoint Shropshire
Email: info@fluepoint.co.uk