Privacy policy
What we collect, why we are allowed to, and what you can require us to do about it.
Last updated 17 October 2026.
Who is responsible for your data
The data controller is Electro Heating Limited, company no. 12609754, registered in England and Wales, trading as Flame Shield London. Full company details are on our company information page.
For anything to do with your data, email info@flameshieldlondon.co.uk, call 020 3393 1661, or write to 7A Cecil Road, London N14 5RH.
We are not required to appoint a Data Protection Officer and have not appointed one. Enquiries go to the address above.
What we collect
Through the booking form we collect only what we need to call you back and understand the job:
| Field | Why we ask |
|---|---|
| Name | So we know who we are speaking to |
| Company, if you give one | So we know which business or building owner the enquiry is for. It is optional |
| Email address | To confirm the appointment and send the written quote |
| Telephone number | To call you back, which is how we usually respond |
| Postcode | To confirm the building is inside the area we cover |
| Preferred date and time slot | To arrange the survey |
| Notes you write | Whatever you choose to tell us about the building or the system |
| Files you attach | Photos or PDFs you choose to send with the homepage form, such as a picture of the panel or a certificate, to help us price the job. They are emailed to us with your request's reference and are optional |
| The page you came from | So the person who calls knows what you were reading |
The form carries two hidden anti-spam fields: a decoy field that real people never fill in, and a timestamp recording when the form was drawn. Both exist to spot automated submissions. Neither is about you.
If you telephone or email instead, we hold whatever you tell us in that conversation.
WhatsApp messages. The WhatsApp box on this site prepares a message for you to send from your own WhatsApp. When you press Send in that box, a copy of the message you wrote and the page you were on is added to our booking records, the same spreadsheet the form uses, so an enquiry that starts on WhatsApp is not lost. The copy holds no name or number. Those reach us only if you then send the message in WhatsApp, which is run by WhatsApp (Meta) under its own privacy policy.
We do not ask for special category data and we ask you not to send any. Nothing about a fire alarm survey needs your health, beliefs or biometrics. If it arrives in the notes field we delete it.
This site has no accounts, no login and no payment page, so we hold no passwords and no card details.
Why we are allowed to use it
UK GDPR requires a lawful basis for each purpose. Ours are:
| Purpose | Lawful basis |
|---|---|
| Responding to your booking or enquiry, including the copy of a WhatsApp message you prepare on this site | Steps taken at your request before entering a contract, Article 6(1)(b). Where you enquire on behalf of someone else, our legitimate interest in answering enquiries, Article 6(1)(f) |
| Carrying out work you have agreed | Performance of a contract, Article 6(1)(b) |
| Keeping records of work, certificates and reports | Legal obligation, Article 6(1)(c), and our legitimate interest in being able to evidence what we did, Article 6(1)(f) |
| Spotting automated spam submissions | Our legitimate interest in keeping the form usable and our systems secure, Article 6(1)(f) |
| Counting visits to the website | Our legitimate interest in knowing which pages are read, Article 6(1)(f). It is done with Cloudflare Web Analytics, which stores nothing on your device and does not identify you |
Where we rely on legitimate interests we have considered whether our interest is outweighed by your rights. You can object at any time and you can ask us for the reasoning.
Giving us your details is voluntary. No statute requires it. But we cannot call you back without a way to reach you.
Who else handles it
We do not sell your data and we do not share it for anyone else's marketing. Two suppliers process it on our instructions:
| Who | What they do |
|---|---|
| Cloudflare | Hosts this website, runs the functions that receive the booking form and the copy of a WhatsApp message, counts visits to the site without cookies (Cloudflare Web Analytics), and forwards email sent to our address |
| Receives the booking through Apps Script, stores it in a spreadsheet we control, and hosts the mailbox our email forwards to. Separately, Google serves the map at the foot of each page (see below) |
We will also disclose data where the law requires it, for example to an enforcement authority, and to our insurers and professional advisers where a claim or dispute makes it necessary.
Where your data goes
Cloudflare and Google are United States companies and may process data outside the United Kingdom. Transfers of that kind need a safeguard recognised by UK law, normally the International Data Transfer Agreement, the UK Addendum to the European Commission's standard contractual clauses, or an adequacy decision covering the receiving organisation.
Both providers publish standard data processing terms that incorporate the standard contractual clauses together with the UK Addendum, and those terms apply to our accounts as part of each provider's standard agreement. That is the safeguard these transfers rely on.
How long we keep it
| What | How long |
|---|---|
| Enquiries that never become jobs | While we are still in contact with you about the enquiry. Once it is clear it will not become a job, the record is deleted. We do not hold enquiry details indefinitely against a future sale |
| Customer records and job history | For as long as we work for you, and afterwards for as long as a claim about that work could still be brought or as accounting law requires, whichever ends later |
| Certificates and inspection reports | Longer than the records above, because they are the evidence that the work was done and that the building was compliant on the date stated. They are kept while that evidence could still be needed |
| Visit counts | Kept by Cloudflare as totals per page, source, country and device, which do not identify you |
These are stated as criteria rather than fixed numbers of years, which Article 13(2)(a) of the UK GDPR permits where a single period cannot sensibly be given. We would rather describe honestly what actually governs the decision than publish a figure that looks precise and is not. If you want to know how long we are holding something specific about you, ask and we will tell you.
What this website collects
This website does not use advertising trackers, social media pixels or third-party cookies for analytics, and it sets no cookies of its own, which is why there is no cookie banner. Visits are counted with Cloudflare Web Analytics, which uses no cookies, stores nothing on your device and does not identify you.
The map at the foot of each page and on the contact page is a Google map showing our Google Business Profile. It loads as you scroll to it, without a button, and when it does Google receives your IP address and may set its own cookies, under Google's privacy policy; we receive nothing from it. The maps on our area pages come from OpenStreetMap, which sets nothing on your device.
While you fill in a booking form, your answers are kept in your browser's session storage for that tab so they survive a reload. Nothing in it is sent until you press send, and it is deleted when you close the tab. The details are on the cookie policy.
Your rights
Under UK GDPR you have the right to:
- Be informed about how we use your data, which is what this page is for
- Get a copy of the data we hold about you
- Have mistakes corrected
- Have data erased, where we no longer need it and no legal duty requires us to keep it
- Restrict what we do with it while a dispute about accuracy or about our grounds is resolved
- Receive it in a portable format, where we hold it by consent or under a contract and process it automatically
- Object, including to anything we base on legitimate interests
- Withdraw consent at any time where consent is the basis. That does not affect anything done before you withdrew it
We do not make automated decisions about you and we do not profile you.
To exercise any of these, email info@flameshieldlondon.co.uk. We respond within one month. There is no charge unless a request is manifestly unfounded or excessive, and we would tell you before treating one that way.
If you are unhappy
Tell us first and we will try to put it right. See our complaints procedure.
You can also complain to the Information Commissioner's Office at any time, and you do not have to come to us first. The ICO is at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, on 0303 123 1113, or at ico.org.uk/make-a-complaint.
Changes to this policy
If we change how we use your data we will update this page and change the date at the top. If we ever add anything that sets a cookie or tracks you, this policy and the cookie policy change first, and a consent banner appears before anything of that kind loads.