SMD Heating (“we”, “our”, “us”) is committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

  • Identity Data: name, title, date of birth.
  • Contact Data: email address, phone number, postal address.
  • Technical Data: IP address, browser type, operating system.
  • Usage Data: information about how you use our website, products, and services.
  • Marketing and Communications Data: your preferences in receiving marketing from us.

2. How We Use Your Data

  • To provide our products and services.
  • To manage our relationship with you.
  • To improve our website and services.
  • To send you marketing communications (only if you have opted in).
  • To comply with legal or regulatory obligations.

3. Legal Basis for Processing

  • Consent.
  • Performance of a contract.
  • Compliance with a legal obligation.
  • Legitimate interests (where your rights do not override our interests).

4. Data Sharing

  • Service providers (e.g., hosting, analytics, payment processors).
  • Regulators, law enforcement, or authorities where required by law.
  • Business partners in connection with a merger, acquisition, or restructuring.
  • We do not sell your data to third parties.

5. International Transfers

  • If we transfer data outside the UK, we will ensure appropriate safeguards are in place (such as adequacy regulations or Standard Contractual Clauses).

6. Data Retention

  • We keep your personal data only for as long as necessary to fulfil the purposes we collected it for, or as required by law.

7. Your Rights

  • Access your data.
  • Rectify inaccuracies.
  • Request erasure.
  • Restrict processing.
  • Object to processing.
  • Request data portability.
  • Withdraw consent at any time.

8. Security

  • We use appropriate technical and organisational measures to safeguard your personal data against unauthorised access, loss, or misuse.

9. Contact Us