Privacy policy
What we collect, why we are allowed to, and what you can require us to do about it.
Last updated 28 July 2026.
Who is responsible for your data
The data controller is Electro Heating Limited, company no. 12609754, registered in England and Wales, trading as Flame Shield London. Full company details are on our company information page.
For anything to do with your data, email info@flameshieldlondon.co.uk, call 020 3393 1661, or write to 7A Cecil Road, London N14 5RH.
We are not required to appoint a Data Protection Officer and have not appointed one. Enquiries go to the address above.
What we collect
Through the booking form we collect only what we need to call you back and understand the job:
| Field | Why we ask |
|---|---|
| Name | So we know who we are speaking to |
| Email address | To confirm the appointment and send the written quote |
| Telephone number | To call you back, which is how we usually respond |
| Postcode | To confirm the building is inside the area we cover |
| Preferred date and time slot | To arrange the survey |
| Notes you write | Whatever you choose to tell us about the building or the system |
| The page you came from | So the person who calls knows what you were reading |
The form carries two hidden anti-spam fields: a decoy field that real people never fill in, and a timestamp recording when the form was drawn. Both exist to spot automated submissions. Neither is about you.
If you telephone or email instead, we hold whatever you tell us in that conversation.
We do not ask for special category data and we ask you not to send any. Nothing about a fire alarm survey needs your health, beliefs or biometrics. If it arrives in the notes field we delete it.
This site has no accounts, no login and no payment page, so we hold no passwords and no card details.
Why we are allowed to use it
UK GDPR requires a lawful basis for each purpose. Ours are:
| Purpose | Lawful basis |
|---|---|
| Responding to your booking or enquiry | Steps taken at your request before entering a contract, Article 6(1)(b). Where you enquire on behalf of someone else, our legitimate interest in answering enquiries, Article 6(1)(f) |
| Carrying out work you have agreed | Performance of a contract, Article 6(1)(b) |
| Keeping records of work, certificates and reports | Legal obligation, Article 6(1)(c), and our legitimate interest in being able to evidence what we did, Article 6(1)(f) |
| Spotting automated spam submissions | Our legitimate interest in keeping the form usable and our systems secure, Article 6(1)(f) |
| Website analytics | Your consent, Article 6(1)(a), together with consent under PECR. Nothing loads until you accept |
Where we rely on legitimate interests we have considered whether our interest is outweighed by your rights. You can object at any time and you can ask us for the reasoning.
Giving us your details is voluntary. No statute requires it. But we cannot call you back without a way to reach you.
Who else handles it
We do not sell your data and we do not share it for anyone else's marketing. Two suppliers process it on our instructions:
| Who | What they do |
|---|---|
| Cloudflare | Hosts this website, runs the function that receives the booking form, and forwards email sent to our address |
| Receives the booking through Apps Script, stores it in a spreadsheet we control, hosts the mailbox our email forwards to, and provides analytics if you accept cookies |
We will also disclose data where the law requires it, for example to an enforcement authority, and to our insurers and professional advisers where a claim or dispute makes it necessary.
Where your data goes
Cloudflare and Google are United States companies and may process data outside the United Kingdom. Transfers of that kind need a safeguard recognised by UK law, normally the International Data Transfer Agreement, the UK Addendum to the European Commission's standard contractual clauses, or an adequacy decision covering the receiving organisation.
Both providers publish standard data processing terms that incorporate the standard contractual clauses together with the UK Addendum, and those terms apply to our accounts as part of each provider's standard agreement. That is the safeguard these transfers rely on.
How long we keep it
| What | How long |
|---|---|
| Enquiries that never become jobs | While we are still in contact with you about the enquiry. Once it is clear it will not become a job, the record is deleted. We do not hold enquiry details indefinitely against a future sale |
| Customer records and job history | For as long as we work for you, and afterwards for as long as a claim about that work could still be brought or as accounting law requires, whichever ends later |
| Certificates and inspection reports | Longer than the records above, because they are the evidence that the work was done and that the building was compliant on the date stated. They are kept while that evidence could still be needed |
| Your cookie choice | 12 months, stored on your own device, never on our servers |
These are stated as criteria rather than fixed numbers of years, which Article 13(2)(a) of the UK GDPR permits where a single period cannot sensibly be given. We would rather describe honestly what actually governs the decision than publish a figure that looks precise and is not. If you want to know how long we are holding something specific about you, ask and we will tell you.
Cookies and analytics
This site sets nothing on your device until you choose. Google Analytics is not loaded, and no request is made to Google, unless you press accept on the cookie banner. Refusing changes nothing about how the site works, and you can change your mind at any time through the cookie settings link in the footer.
The maps on our area pages come from OpenStreetMap rather than Google. They set nothing on your device, so they load without asking you.
Every cookie, what it does and how long it lasts is listed on the cookie policy.
Your rights
Under UK GDPR you have the right to:
- Be informed about how we use your data, which is what this page is for
- Get a copy of the data we hold about you
- Have mistakes corrected
- Have data erased, where we no longer need it and no legal duty requires us to keep it
- Restrict what we do with it while a dispute about accuracy or about our grounds is resolved
- Receive it in a portable format, where we hold it by consent or under a contract and process it automatically
- Object, including to anything we base on legitimate interests
- Withdraw consent at any time where consent is the basis. That does not affect anything done before you withdrew it
We do not make automated decisions about you and we do not profile you.
To exercise any of these, email info@flameshieldlondon.co.uk. We respond within one month. There is no charge unless a request is manifestly unfounded or excessive, and we would tell you before treating one that way.
If you are unhappy
Tell us first and we will try to put it right. See our complaints procedure.
You can also complain to the Information Commissioner's Office at any time, and you do not have to come to us first. The ICO is at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, on 0303 123 1113, or at ico.org.uk/make-a-complaint.
Changes to this policy
If we change how we use your data we will update this page and change the date at the top. Where a change materially affects cookies, your stored cookie choice is invalidated and you are asked again.