Privacy Policy
Zenith Crest Maintenance Service
Last updated: 21 March 2025 | Version 1.1
We handle personal data with the same standards we apply to our services: clear communication, accountable processes, and protection you can rely on.
1. Data Controller
Zenith Crest Maintenance Service ("we", "our", "us") is the data controller responsible for your personal data. Our registered address: 43 Haigh Crescent, Stainforth, Doncaster, DN7 5QX, United Kingdom. For data protection enquiries: enquiries@zenithcrestmaintenance.com or +447492198922.
2. Scope and Applicability
This Privacy Policy applies to personal data we collect through: our website (zenithcrestmaintenance.com); our contact form; email, phone, and postal communications; service enquiries and contracts; and our provision of property maintenance, renovation, and refurbishment services. It does not cover third-party websites linked from our site.
3. Categories of Personal Data
We may collect and process the following categories of personal data:
| Category | Examples | Source |
|---|---|---|
| Identity data | Name, title | Contact form, correspondence, contracts |
| Contact data | Email address, phone number, postal address | Contact form, correspondence, contracts |
| Property data | Property address, access details, property type | Service enquiries, site visits |
| Transaction data | Payment details (processed by payment provider), invoice history | Contracts, payments |
| Technical data | IP address, browser type, device, pages visited | Website, cookies |
| Communications data | Emails, letters, call recordings (if applicable) | Correspondence |
We do not routinely collect special category data (e.g. health, ethnicity, religion). If such data is necessary for a specific purpose (e.g. accessibility requirements), we will obtain explicit consent or rely on another lawful basis.
4. Purposes and Legal Bases
We process personal data for the following purposes and lawful bases under UK GDPR:
| Purpose | Legal Basis |
|---|---|
| Responding to enquiries and providing quotations | Legitimate interests / Pre-contractual steps |
| Providing and managing our services | Contract performance |
| Invoicing and payment processing | Contract performance / Legal obligation |
| Marketing (with consent) | Consent |
| Legal and regulatory compliance | Legal obligation |
| Website security and analytics | Legitimate interests |
| Establishing, exercising, or defending legal claims | Legitimate interests |
Where we rely on legitimate interests, we have balanced our interests against your rights and freedoms. You may object to processing based on legitimate interests (see Your Rights below).
5. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Our retention schedule includes:
- Enquiry data (no contract): Up to 2 years from last contact
- Contract and service records: 7 years from end of contract (tax/legal)
- Invoice and payment records: 7 years (HMRC requirements)
- Website logs: Up to 90 days
- Marketing consent: Until withdrawn; we will not contact you for marketing without consent
After the retention period, data is securely deleted or anonymised.
6. Recipients and Sharing
We may share personal data with:
- Service providers: Hosting, email delivery, payment processors (who process data on our behalf under contract)
- Professional advisers: Lawyers, accountants, insurers where necessary
- Regulators and authorities: When required by law (e.g. HMRC, courts)
- Subcontractors: Where necessary to deliver services (e.g. specialist trades); they are bound by confidentiality
We do not sell your personal data to third parties. We require processors to implement appropriate security and use data only for specified purposes.
7. International Transfers
We primarily store and process data within the UK. Where we use service providers outside the UK/EEA, we ensure appropriate safeguards are in place (e.g. UK adequacy decisions, Standard Contractual Clauses, or Binding Corporate Rules) as required by UK GDPR.
8. Automated Decision-Making
We do not use automated decision-making or profiling that significantly affects you.
9. Children
Our services are not directed at individuals under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it.
10. Your Rights
Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:
- Right of access: Request a copy of your data (subject access request)
- Right to rectification: Request correction of inaccurate data
- Right to erasure: Request deletion in certain circumstances
- Right to restrict processing: Request limitation of processing in certain circumstances
- Right to data portability: Receive your data in a structured, machine-readable format (where applicable)
- Right to object: Object to processing based on legitimate interests or direct marketing
- Right to withdraw consent: Where processing is based on consent
- Right to lodge a complaint: With the Information Commissioner's Office (ICO)
To exercise any of these rights, contact us at enquiries@zenithcrestmaintenance.com. We will respond within one month. For complaints, you may contact the ICO: ico.org.uk or 0303 123 1113.
11. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include: access controls; secure communications; staff training; and procedures for handling data breaches. In the event of a breach that poses a risk to your rights, we will notify you and the ICO as required.
12. Cookies and Similar Technologies
Our website may use cookies and similar technologies. A cookie is a small file stored on your device. We use:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly necessary | Essential site functionality, security | Session / Persistent |
| Analytics (if used) | Understanding usage, improving site | As per provider |
You can control cookies through your browser settings. Disabling cookies may affect site functionality.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will be revised. Material changes will be communicated via our website or direct contact where appropriate. We encourage you to review this policy periodically.
14. Contact
Data protection enquiries: Zenith Crest Maintenance Service, 43 Haigh Crescent, Stainforth, Doncaster, DN7 5QX, United Kingdom. Email: enquiries@zenithcrestmaintenance.com. Phone: +447492198922 | 03300162030.