1. Who is responsible for your data

The data controller is:

Business name

Catrigg Air Conditioning

Who that is

Ian McKenna, trading as Catrigg Air Conditioning. A sole trader, not a limited company.

Address

The Old Dairy, Henside Lane, Langcliffe, Settle, North Yorkshire BD24 9PZ

Phone

07812 344364

There is no data protection officer. For a business of this size one is not required, and questions go straight to the owner.

2. What we collect

When you use the enquiry form, we collect only what you type into it:

• Your name
• Your full address and postcode
• Your email address
• Your phone number
• Anything you write in the comments box
• The fact that you ticked the consent box, and when

We do not ask for, and have no use for, any special category data — nothing about health, beliefs or anything similar. Please do not put that sort of information in the comments box.

Separately, and unavoidably, the company that hosts this website processes basic technical information about every visit, including your IP address, to serve the pages and to block abuse. We do not have access to that as a list of visitors and we do not use it to identify anyone.

If, and only if, you agree to analytics when the site asks you, Google Analytics also collects information about your visit: which pages you looked at, roughly where in the world you are, and what sort of device you used. Section 8 explains that in full, including who it belongs to. If you do not agree, none of it is collected.

3. Why we collect it, and our lawful basis

We use your details for one thing: to reply to your enquiry, arrange a site survey, and prepare a quote. We do not add you to a mailing list, we do not sell or rent your details, and we do not pass them to anyone for marketing.

Our lawful basis under the UK GDPR is:

• Taking steps at your request before entering into a contract (Article 6(1)(b)) — you have asked us to quote for work.
• Legitimate interests (Article 6(1)(f)) — responding to enquiries about our services. We have considered your interests and we do not think replying to a message you sent us is something you would object to.

The tick box on the form is not the lawful basis. It is there so that it is unambiguous you want us to get in touch, and so you have seen this notice before you send anything.

4. How long we keep it

The website itself stores nothing. There is no database and no copy of your enquiry is saved on this site. The form composes an email, sends it, and forgets it.

Your enquiry then sits in our email account, so retention comes down to how long we keep that email:

Enquiries that do not become work

Deleted 24 months after the last contact.

Enquiries that become work

Kept as part of the customer and accounting record for 6 years after the end of the relevant tax year, which is the period HMRC requires business records to be retained.

If you want your details removed sooner, ask, and we will remove them unless we are legally required to keep them.

5. Who else sees it

Your enquiry passes through a small number of suppliers who act as our data processors. They handle it on our instructions and are not permitted to use it for their own purposes:

Cloudflare

Hosts this website and runs the code that processes the form.

Resend

Sends the enquiry to us as an email.

Our email provider

Google, who provide the mailbox the enquiry lands in.

Google Analytics

Only if you agreed to it. Nothing you type into the enquiry form goes to Google Analytics. This is information about the visit, and section 8 explains it.

Castleberg Digital

The agency that built and looks after this website. They set up and operate the analytics described in section 8. They do not receive your enquiry.

Beyond that, we share your details with nobody, other than where we are required to by law.

Some of these suppliers are based outside the UK, or handle data outside the UK. Where that happens, the transfer is covered by the safeguards those suppliers put in place, such as the UK International Data Transfer Addendum.

6. Your rights

Under the UK GDPR you can ask us to:

• Give you a copy of the personal data we hold about you
• Correct it if it is wrong or incomplete
• Delete it, where we have no good reason to keep it
• Restrict how we use it while a question about it is sorted out
• Object to us using it where we are relying on legitimate interests
• Receive it in a portable format, or have it sent to someone else

You can also withdraw your agreement to being contacted at any time. That does not affect anything we did before you withdrew it.

To do any of these, ring us on 07812 344364, or write to us at the address in section 1. There is no charge, and we will respond within one month.

You do not have to use the enquiry form to ask. You should not have to hand over more details in order to have the ones we already hold corrected or deleted, and a letter or a phone call is enough.

7. Complaints

If you are not happy with how we have handled your data, please tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner's Office, the UK regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

8. Cookies and analytics

This website sets one cookie of its own, called cb_consent. All it records is whether you agreed to analytics, and when you were asked. It holds no name, no address and nothing that identifies you, it lasts six months, and it is set the moment you answer the question, whichever way you answer it. There is no way to use this site without that cookie being set once you have made a choice, because it is the only way we can remember not to ask you again.

If you say no, nothing else is set and nothing is loaded. No analytics, no tracking pixels, no advertising tags, no social media embeds and no third-party fonts. The site works exactly the same. If you close the banner without answering, or press Escape, that is not agreement: nothing is stored at all and you will simply be asked again next time.

If you say yes, we load Google Analytics, which sets its own cookies and tells us which pages people find useful, roughly where in the world they are, and what sort of device they used. It does not tell us who you are. Until you say yes, no request is made to Google at all. The code is not in the page, rather than being in the page and told to behave.

Who the analytics belong to. The Google Analytics property for this website is set up and operated by Castleberg Digital, the agency that built and looks after the site, and not by Catrigg Air Conditioning. Catrigg receives a monthly summary of how the site is doing and has no access to the underlying data. Google acts as a processor for that data; their own privacy notice is at policies.google.com/privacy.

Changing your mind. There is a Change your cookie choice button at the bottom of every page on this site, as long as your browser is running JavaScript. If it is not, there is nothing to turn off, because no analytics loads without it. It clears your answer and asks again, and it works whichever way you answered the first time. Saying no later stops anything further being collected; it does not delete what Google already holds, and for that you should contact us using the details in section 1.

9. Changes to this notice

If we change how we handle personal data, we will update this page and change the date at the top of it.