Privacy Policy � Fire Risk Quote

1. Introduction & Controller Information

1.1. Who We Are: "Fire Risk Quote" is operated by [Allun Edwards trading as M6 Fire Safety], We are the "data controller" for personal data processed through fireriskquote.co.uk.

1.2. Purpose of This Policy: This document explains what personal data we collect, how we use it, your rights under UK data protection law, and how to contact us.

1.3. Acceptance: By using our website and services, you acknowledge you have read and understood this Privacy Policy.

2. The Data We Collect and Our Legal Basis for Processing

2.1. Data from Clients (Quote Requesters):

What we collect: Name, email address, phone number, property address/postcode, description of the fire risk assessment needed.

Why we collect it: To match your request with suitable assessors and share your details with them so they can provide a quote.

Legal Basis: Your consent (by submitting the quote request form) and our legitimate interest in facilitating the connection between clients and assessors.

2.2. Data from Assessors (Service Providers):

What we collect: Business/sole trader name, contact person name, email, phone, business address, qualifications, insurance details, company registration number, geographic areas covered.

Why we collect it: To verify your suitability for our network, create your profile, match you with relevant client leads, and administer our service.

Legal Basis: Performance of a contract (our terms with you) and our legitimate interests in maintaining a qualified, professional network of assessors.

2.3. Website Usage Data:

What we collect: IP address, browser type, device information, pages visited, time spent on site (via cookies and similar technologies).

Why we collect it: To analyse website performance, improve user experience, and maintain website security.

Legal Basis: Our legitimate interest in operating and securing our website effectively.

3. How We Use Personal Data (Our Purposes)

We use your personal data to:

Receive and process your quote request or assessor registration
Match client requests with up to three suitable assessors based on location and service type
Share a client's contact and project details with selected assessors for the sole purpose of providing a quote
Communicate with you about your request, registration, or our services
Maintain internal records for administrative and legal compliance purposes
Improve our website and services through analysis of usage patterns

4. Data Sharing and Third Parties

4.1. Core Sharing: The fundamental function of our service involves sharing a client's data (name, contact details, project information) with up to three assessors in our network to enable them to provide quotes.

4.2. Service Providers: We use trusted third-party services that process data on our behalf under strict instructions ("data processors"), including:

Website hosting providers
Email delivery services
Analytics providers (e.g., Google Analytics)

4.3. Legal Obligations: We may disclose data if required by law, to enforce our terms, or to protect the rights and safety of ourselves or others.

4.4. We Do Not: Sell or rent your personal data to third-party marketers.

5. Data Retention (How Long We Keep Data)

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

Client Data: Retained for 24-36 months to fulfil the quote request and for legal/administrative purposes. After this period, data is anonymised or securely deleted.
Assessor Data: Retained for the duration of your active registration plus 36 months after deactivation for legal, tax, and administrative reasons.
Website Usage Data: Retained for up to 26 months for analytical purposes.

Retention periods are based on the purpose of processing, legal/regulatory requirements, and the nature of our relationship.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

Secure servers with encryption where appropriate
Access controls and authentication procedures
Regular security assessments and monitoring
Staff training on data protection

7. Your Data Protection Rights (Under UK GDPR)

Under UK data protection law, you have the following rights:

Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can ask us to correct inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten"): You can ask us to delete your data in certain circumstances.
Right to Restrict Processing: You can ask us to temporarily halt processing your data.
Right to Object: You can object to certain types of processing, including direct marketing.
Right to Data Portability: You can request your data in a structured, commonly used, machine-readable format.

To exercise any of these rights, please contact us using the details in Section 10.

8. Cookies and Similar Technologies

The Website does not currently use cookies or similar tracking technologies. However, the use of such technologies may be implemented in the future. Where this occurs, this policy will be updated accordingly to reflect any changes.

8.1. Types of Cookies:

Cookie Type	Purpose	Duration
Essential Cookies	Required for basic site functionality (e.g., form submission)	Session
Analytics Cookies	Help us understand how visitors use our site (e.g., Google Analytics)	Up to 26 months
Preference Cookies	Remember your settings and preferences	Up to 12 months

9. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify registered users of significant changes by email and will always update the "Last Updated" date at the top of this page. We encourage you to review this policy regularly.

10. How to Contact Us

For questions about this Privacy Policy or to exercise your data protection rights, please contact our Data Protection contact:

Email: hello@fireriskquote.co.uk

Postal Address: [Gilbert Avenue. Rugby. CV227BZ.]

Website: fireriskquote.co.uk

You have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO), if you believe we have not handled your personal data properly.