The Online Boiler Company | Glasgow's #1 Online Boiler Company

This Privacy Policy explains how The Online Boiler Company ("we", "us", "our") collects, uses and protects your personal data when you use our website at onlineboilercompany.co.uk or contact us about our services. We are committed to handling your data lawfully and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Data Controller: The Online Boiler Company
Registered address: Suite 2/3, 48 West George Street, Glasgow, G2 1BP
Email: info@onlineboilercompany.co.uk
Phone: 0800 433 2010

2. Data We Collect

We may collect the following personal data from you:

Category	Examples	Source
Identity data	Name	Quote forms, phone calls
Contact data	Phone number, email address, postal address	Quote forms, phone calls
Property data	Boiler type, number of radiators, postcode	Quote forms
Transaction data	Details of services purchased and payments made	Booking and payment process
Technical data	IP address, browser type, pages visited, referral URL	Automatically via cookies
Marketing preferences	Whether you have opted in to marketing	Forms, phone calls

We do not collect any special category data (such as health information) or data relating to criminal convictions.

3. How We Use Your Data

We use your personal data for the following purposes:

To respond to your quote request and provide boiler installation, repair or servicing
To contact you by phone or email about your booking or enquiry
To process payments for services
To send service reminders (e.g. annual boiler service reminders) where you have consented
To improve our website and marketing using aggregated analytics data
To comply with legal obligations (e.g. Gas Safe registration records)

4. Legal Basis for Processing

We process your data on the following legal bases under UK GDPR Article 6:

Contract — processing necessary to provide the services you have requested
Legitimate interests — to manage and improve our business, prevent fraud and ensure network security
Consent — for marketing communications where you have opted in; you may withdraw consent at any time
Legal obligation — where we are required to retain records by law (e.g. Gas Safe regulations)

We do not sell your personal data. We may share it with:

Our engineers — who need your contact and property details to carry out the boiler installation or repair
Payment processors — for card and Klarna payments (these are PCI-DSS compliant processors)
IT and website service providers — who host and maintain our website under data processing agreements
Analytics providers — such as Google Analytics (anonymised/aggregated data only)
Regulatory bodies — such as Gas Safe Register where required by law

All third parties are required to respect your data and process it only for specified, limited purposes.

6. Data Retention

We retain your personal data only for as long as necessary:

Quote enquiries that do not result in a booking: 12 months
Customer records (service and installation history): 7 years (to meet HMRC and Gas Safe requirements)
Marketing preferences: until you withdraw consent
Website analytics data: 26 months (Google Analytics default)

7. Cookies

Our website uses cookies to distinguish you from other users and to improve your experience. The cookies we use include:

Essential cookies — required for the website to function (e.g. session cookies)
Analytics cookies — Google Analytics cookies that help us understand how visitors use the site. These use anonymised data and do not identify you personally
Preference cookies — to remember your cookie consent choice

You can control cookies through your browser settings. Blocking essential cookies may affect how the website functions. Full details of the cookies we use are available in our cookie banner.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access — to request a copy of the data we hold about you
Right to rectification — to ask us to correct inaccurate data
Right to erasure — to ask us to delete your data (subject to legal retention obligations)
Right to restrict processing — to ask us to limit how we use your data
Right to data portability — to receive your data in a structured, machine-readable format
Right to object — to object to processing based on legitimate interests or for direct marketing
Rights relating to automated decision-making — we do not use automated decision-making or profiling

To exercise any of these rights, please contact us at info@onlineboilercompany.co.uk. We will respond within one calendar month. If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

9. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. Our website is served over HTTPS. Access to customer data within our business is limited to those who need it to do their job.

No method of transmission over the internet is 100% secure. While we do our best to protect your data, we cannot guarantee absolute security.

10. Contact Us & Changes to This Policy

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Email: info@onlineboilercompany.co.uk
Phone: 0800 433 2010
Post: Suite 2/3, 48 West George Street, Glasgow, G2 1BP

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically.

Privacy Policy