Privacy policy

Last updated 28 July 2026.

Who is responsible for your data

The data controller is Electro Heating Limited, company no. 12609754, registered in England and Wales, trading as Flame Shield London. Full company details are on our company information page.

For anything to do with your data, email [email protected], call 020 3837 0778, or write to 7A Cecil Road, London N14 5RH.

We are not required to appoint a Data Protection Officer and have not appointed one. Enquiries go to the address above.

ICO registration: [TO CONFIRM: ICO registration number and whether the annual data protection fee is paid]

What we collect

Through the booking form we collect only what we need to call you back and understand the job:

Field	Why we ask
Name	So we know who we are speaking to
Email address	To confirm the appointment and send the written quote
Telephone number	To call you back, which is how we usually respond
Postcode	To confirm the building is inside the area we cover
Preferred date and time slot	To arrange the survey
Notes you write	Whatever you choose to tell us about the building or the system
The page you came from	So the person who calls knows what you were reading

The form carries two hidden anti-spam fields: a decoy field that real people never fill in, and a timestamp recording when the form was drawn. Both exist to spot automated submissions. Neither is about you.

If you telephone or email instead, we hold whatever you tell us in that conversation.

We do not ask for special category data and we ask you not to send any. Nothing about a fire alarm survey needs your health, beliefs or biometrics. If it arrives in the notes field we delete it.

This site has no accounts, no login and no payment page, so we hold no passwords and no card details.

Why we are allowed to use it

UK GDPR requires a lawful basis for each purpose. Ours are:

Purpose	Lawful basis
Responding to your booking or enquiry	Steps taken at your request before entering a contract, Article 6(1)(b). Where you enquire on behalf of someone else, our legitimate interest in answering enquiries, Article 6(1)(f)
Carrying out work you have agreed	Performance of a contract, Article 6(1)(b)
Keeping records of work, certificates and reports	Legal obligation, Article 6(1)(c), and our legitimate interest in being able to evidence what we did, Article 6(1)(f)
Spotting automated spam submissions	Our legitimate interest in keeping the form usable and our systems secure, Article 6(1)(f)
Website analytics	Your consent, Article 6(1)(a), together with consent under PECR. Nothing loads until you accept

Where we rely on legitimate interests we have considered whether our interest is outweighed by your rights. You can object at any time and you can ask us for the reasoning.

Giving us your details is voluntary. No statute requires it. But we cannot call you back without a way to reach you.

Who else handles it

We do not sell your data and we do not share it for anyone else's marketing. Two suppliers process it on our instructions:

Who	What they do
Cloudflare	Hosts this website, runs the function that receives the booking form, and forwards email sent to our address
Google	Receives the booking through Apps Script, stores it in a spreadsheet we control, hosts the mailbox our email forwards to, and provides analytics if you accept cookies

We will also disclose data where the law requires it, for example to an enforcement authority, and to our insurers and professional advisers where a claim or dispute makes it necessary.

Where your data goes

Cloudflare and Google are United States companies and may process data outside the United Kingdom. Transfers of that kind need a safeguard recognised by UK law, normally the International Data Transfer Agreement, the UK Addendum to the European Commission's standard contractual clauses, or an adequacy decision covering the receiving organisation.

[TO CONFIRM: which transfer mechanism Cloudflare and Google rely on under the data processing terms attached to these specific accounts. Read the DPAs rather than assuming]

How long we keep it

What	How long
Enquiries that never become jobs	[TO CONFIRM: retention period for dead enquiries. It must be a stated period, not indefinite]
Customer records and job history	[TO CONFIRM: retention period for customer records, normally driven by the limitation period for contract claims and by accounting requirements]
Certificates and inspection reports	[TO CONFIRM: retention period for certification records, which may be longer because they evidence compliance work]
Your cookie choice	12 months, stored on your own device, never on our servers

We are not willing to publish invented retention periods, so these are marked for confirmation rather than filled with a plausible number.

Cookies and analytics

This site sets nothing on your device until you choose. Google Analytics is not loaded, and no request is made to Google, unless you press accept on the cookie banner. Refusing changes nothing about how the site works, and you can change your mind at any time through the cookie settings link in the footer.

The maps on our area pages are a Google service, so they are not loaded either until you press the button asking for them.

Every cookie, what it does and how long it lasts is listed on the cookie policy.

Your rights

Under UK GDPR you have the right to:

• Be informed about how we use your data, which is what this page is for
• Get a copy of the data we hold about you
• Have mistakes corrected
• Have data erased, where we no longer need it and no legal duty requires us to keep it
• Restrict what we do with it while a dispute about accuracy or about our grounds is resolved
• Receive it in a portable format, where we hold it by consent or under a contract and process it automatically
• Object, including to anything we base on legitimate interests
• Withdraw consent at any time where consent is the basis. That does not affect anything done before you withdrew it

We do not make automated decisions about you and we do not profile you.

To exercise any of these, email [email protected]. We respond within one month. There is no charge unless a request is manifestly unfounded or excessive, and we would tell you before treating one that way.

If you are unhappy

Tell us first and we will try to put it right. See our complaints procedure.

You can also complain to the Information Commissioner's Office at any time, and you do not have to come to us first. The ICO is at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, on 0303 123 1113, or at ico.org.uk/make-a-complaint.

Changes to this policy

If we change how we use your data we will update this page and change the date at the top. Where a change materially affects cookies, your stored cookie choice is invalidated and you are asked again.