22 years in London
07747 078 733
I.N PlumbingI.N Plumbing
Nº 01 — Privacy

Privacy Policy

Last updated: April 2026

This Privacy Policy explains how Ilir Nuredini trading as I.N Plumbing and Central Heating (“we”, “us”, “Ilir”) collects and uses personal data when you contact us through inplumbing.co.uk, by phone, by WhatsApp, or in person. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Data controller: Ilir Nuredini trading as I.N Plumbing and Central Heating
Address: Flat 94, 25 Robsart Street, London SW9 0FD
Email: ilir@inplumbing.co.uk
Phone: 07747 078 733

What data we collect

We collect only the data you choose to give us, plus a small amount of technical data needed to operate the website. Specifically:

  • Contact form data: name, phone number, postcode, and a description of the plumbing problem you’d like help with. Email is optional.
  • Phone / WhatsApp / email: if you contact us directly, we keep a record of the conversation so we can respond and follow up.
  • Technical data: a hashed (irreversibly encrypted) version of your IP address and browser user-agent string at the time you submit a form. We hash IPs so they cannot be linked back to you, while still letting us detect spam.
  • Job records: if you become a customer, we keep records of the work carried out, parts fitted, payments and any warranty information.

What we do not collect

  • We do not use Google Analytics, Meta Pixel, Hotjar, or any third-party advertising trackers.
  • We do not place tracking cookies. The site uses no cookies that require consent.
  • We do not sell, rent or share your data with marketers.
  • We do not collect data from minors. The site is not directed at children.

Lawful basis

Under UK GDPR Article 6(1)(b) and 6(1)(f), we rely on the following lawful bases:

  • Performance of a contract (or steps to enter one) — when you ask for a quote or instruct us to do work.
  • Legitimate interests — replying to enquiries and operating the business. Our legitimate interest is balanced against your rights and freedoms.
  • Legal obligation — keeping accounting records under HMRC rules and gas safety records under UK gas safety regulations.

Who we share data with

We use the following processors to operate the website and respond to enquiries:

  • Vercel Inc. — website hosting and privacy-friendly analytics. Vercel is US-based and we rely on the UK-US Data Bridge / IDTA as a transfer safeguard.
  • Neon (Databricks) — Postgres database for storing contact form submissions. Database is hosted in an EU region (London or Frankfurt) to minimise international transfers.
  • Resend — transactional email delivery for forwarding contact form submissions to Ilir’s email.
  • Cloudflare — Turnstile spam protection on contact forms. Cloudflare Turnstile is privacy-preserving and uses no tracking cookies.

We do not share your data with any other third parties except where legally required (HMRC, courts, regulators).

International transfers

Some of our processors (Vercel, Resend, Cloudflare) are headquartered in the United States. We rely on the UK-US Data Bridge (an extension of the EU-US Data Privacy Framework) and on the International Data Transfer Addendum (UK IDTA) as appropriate safeguards. Where possible we choose EU regions to minimise international transfers (Neon database is hosted in the UK or EU).

How long we keep your data

  • Unconverted enquiries (you contacted us but did not become a customer): up to 12 months, after which we delete the record.
  • Customer records: 6 years from the date of the last job, in line with HMRC retention requirements.
  • Gas safety records and warranty paperwork: 6 years.

Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you (subject access request).
  • Have inaccurate data corrected.
  • Have your data erased (the “right to be forgotten”), subject to legal exceptions.
  • Restrict or object to our processing.
  • Data portability (where applicable).
  • Withdraw consent at any time, where consent was the lawful basis.
  • Lodge a complaint with the Information Commissioner’s Office at ico.org.uk.

To exercise any of these rights, email ilir@inplumbing.co.uk. We respond within one calendar month.

Security

Data is transmitted over TLS (HTTPS). The database is encrypted at rest and access-controlled. IP addresses are hashed before storage. We follow UK GDPR appropriate technical and organisational measures.

Changes to this policy

We may update this Privacy Policy from time to time. The “last updated” date at the top of the page reflects the most recent revision.

Call IlirWhatsApp