Privacy notice

Who we are

HEK Group is the controller of personal information collected through this website. Our business contact address is 134 Hertford Road, Enfield, EN3 5AX.

For privacy enquiries or to exercise your data protection rights, email email@hekgroup.co.uk.

Information we collect

• Information you enter into an enquiry form, including your name, organisation, email address, telephone number, property type, service interests, preferred contact time and message.
• Your separate marketing choice, together with the date, source and evidence of that choice.
• Technical information needed to operate and secure the website, such as request and security logs.
• Website usage information from Google Analytics, but only after you accept analytics cookies.

How and why we use it

• To respond to an enquiry and take steps you request before entering into a contract.
• Where you separately opt in, to send relevant HVAC advice and service updates and place your contact into an appropriate email journey. You can unsubscribe at any time.
• To manage our relationship with prospective and existing customers and pursue our legitimate interests in operating and improving the business.
• To protect the website, investigate misuse and maintain service reliability.
• To understand website performance where you have consented to analytics.

Who receives your information

We use carefully selected hosting, database, email and technology suppliers to operate the website and respond to enquiries. They may process information only for the relevant service and under appropriate contractual safeguards. Google receives analytics data only if you accept analytics cookies.

We may disclose information where required by law, to protect legal rights, or in connection with a business reorganisation. We do not sell personal information.

International transfers

Some technology suppliers may process information outside the UK. Where this occurs, we use an appropriate UK transfer mechanism or rely on another lawful safeguard recognised by UK data protection law.

How long we keep it

Website enquiries that do not become a customer relationship are normally retained for up to 24 months after the last meaningful contact. Marketing contact and consent evidence is retained while permission remains active and for a reasonable period afterwards so we can demonstrate and respect your preference, including suppression records that prevent further messages. If you become a customer, relevant information is retained in line with our customer, contractual, accounting and legal retention requirements. Security logs may be kept for shorter periods unless needed to investigate an incident.

Your rights

• Ask for a copy of your personal information.
• Ask us to correct inaccurate or incomplete information.
• Ask us to erase information in certain circumstances.
• Object to, or ask us to restrict, particular processing.
• Withdraw consent at any time where processing relies on consent.
• Ask for portable information where the right applies.

Complaints

Please contact us first so we can try to resolve your concern. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.

Changes to this notice

We may update this notice as our services, suppliers or legal obligations change. The date shown at the top identifies the latest version.