Privacy Policy.

1. Who we are

H&B Electrical Services Ltd ("H&B", "we", "us") is a commercial and industrial electrical contractor registered in England and Wales under company number 08784676. Our registered office is 49a London Road, Chesterton, Newcastle-under-Lyme, Staffordshire, ST5 7EL.

We are the data controller for the personal data described in this policy. You can contact us about data protection at sales@handbelectrical.co.uk or on 01782 479296.

This policy applies to this website (handbelectrical.co.uk), to enquiries you make to us by phone, email or social media, and to the personal data we handle when we quote for and carry out work for our clients.

2. The personal data we collect

Information you give us

• Enquiries and contact forms: your name, email address, phone number, company name, site or project address and the details of your enquiry.
• Quotations and contracts: contact details for the people we deal with at a client organisation, site details, drawings and specifications, purchase orders and billing information.
• Correspondence: the content of emails, calls, messages and meeting notes.
• Site and compliance records: names and contact details of site contacts, permit-to-work and induction records, and the names of people appearing in test certificates, O&M documentation or handover records.

Information we collect automatically

• Website usage: pages viewed, referring site, approximate location (country/region), device type and browser. We use Plausible Analytics for this, which does not use cookies and does not identify individuals (see section 6).
• Advertising data: where you have consented to marketing cookies, Meta (Facebook and Instagram) and Google advertising tools may collect data about your visit so that we can show relevant adverts and measure campaign performance (see sections 5 and 6).
• Technical data: IP address, server logs and security information collected by our hosting provider to keep the site running and secure.

Information from other sources

• Publicly available business information (for example Companies House, LinkedIn or a client's own website) used to understand who we are dealing with.
• Referrals from main contractors, consultants, designers or existing clients who introduce us to a project.

We do not knowingly collect personal data from anyone under 18, and this website is not intended for children.

3. How we use your data

• To respond to enquiries, prepare quotations and discuss projects.
• To deliver, manage and invoice electrical installation, maintenance and life-safety work, including coordination with main contractors, consultants and site teams.
• To issue test certificates, fire alarm and emergency lighting documentation and other records required by law or by industry schemes (for example NICEIC and BAFE).
• To manage our customer relationships and keep records of the work we have done.
• To send you information about our services where you have agreed to receive it or where we are entitled to contact you as an existing business customer (see section 5).
• To run and improve this website and understand how it is used.
• To advertise our services online, including showing adverts to people who have visited this website (see section 5).
• To comply with our legal, health and safety, accounting and insurance obligations and to establish, exercise or defend legal claims.

4. Our lawful basis for using your data

Purpose	Lawful basis (UK GDPR Article 6)
Responding to enquiries and preparing quotations	Taking steps at your request before entering into a contract; our legitimate interest in winning and pricing work
Delivering work under a contract, invoicing, certification and handover	Performance of a contract; compliance with legal obligations (Building Regulations, electrical safety and fire safety law)
Keeping business records, accounting and insurance	Legal obligation; legitimate interests
Marketing to business contacts and existing customers	Legitimate interests (business-to-business marketing), with your right to object at any time; consent where required by PECR
Online advertising and remarketing cookies	Consent, given through the cookie controls on this website
Website analytics (cookieless, aggregated)	Legitimate interests in understanding and improving the website
Site security and fraud prevention	Legitimate interests; legal obligation

5. Marketing, advertising and remarketing

We market our services mainly to businesses and the people who work for them. We may contact you by email or phone about services relevant to your organisation where you have enquired with us, worked with us, or your role makes our services relevant to you. You can ask us to stop at any time by replying to any email, using the unsubscribe link, or contacting us using the details in section 12.

We use GoHighLevel (HighLevel Inc.) as our customer relationship management and marketing platform. Enquiries submitted through this website, and contact details we collect in the course of business, may be stored in GoHighLevel and used to send email or SMS communications, to track whether those communications are opened and to manage follow-up.

We advertise on Facebook and Instagram (Meta Platforms Ireland Ltd) and on Google (Google Ireland Ltd). With your consent, these platforms place cookies or similar technologies on your device when you visit this website so that we can:

• show adverts for our services to people who have previously visited this website ("remarketing" or "retargeting");
• measure which adverts led to visits and enquiries;
• build audiences of people with similar characteristics to our visitors.

Meta and Google act as independent controllers for some of this processing and their own privacy policies apply: Meta Privacy Policy and Google Privacy Policy. You can manage advertising preferences in your Facebook and Google account settings, and you can withdraw cookie consent on this website at any time (see section 6).

6. Cookies and analytics

Cookies are small files placed on your device by a website. We use the following categories:

Category	What it does	Examples	Consent?
Strictly necessary	Keeps the site working and secure, remembers your cookie choices	WordPress, hosting and caching cookies; cookie consent preference	No — always on
Analytics (cookieless)	Counts visits and page views in aggregate without identifying you or using cookies	Plausible Analytics	No cookies used; no personal data stored
Advertising / remarketing	Lets Meta and Google recognise your browser so we can show relevant adverts and measure campaigns	Meta Pixel (_fbp, _fbc), Google Ads / Google tag (_gcl_*, _ga if enabled)	Yes — only set if you accept

Plausible Analytics is a privacy-focused service that processes visit data in aggregate and does not use cookies or track individuals across websites. Google Search Console provides us with aggregated information about how our site appears in Google search results; it does not give us data about individual visitors.

You can accept or decline non-essential cookies using the cookie controls on this website, and you can delete or block cookies through your browser settings. Blocking strictly necessary cookies may stop parts of the site working.

7. Who we share your data with

We do not sell personal data. We share it only where needed to run our business:

• Service providers who process data on our behalf under contract: GoHighLevel (CRM, email and SMS), our website hosting provider, email and form-handling services, accounting software, and IT support.
• Advertising and analytics platforms: Meta, Google and Plausible, as described in sections 5 and 6.
• Project parties: main contractors, consultants, designers, building managers, suppliers and sub-contractors where necessary to deliver a project, and certification and registration bodies (for example NICEIC and BAFE) where required for compliance.
• Professional advisers and insurers: accountants, solicitors and insurers where necessary.
• Authorities: HMRC, regulators, building control bodies and law enforcement where we are legally required to do so.

8. International transfers

Some of our service providers, including GoHighLevel, Meta and Google, are based in or process data in the United States and other countries outside the UK. Where personal data is transferred outside the UK we rely on safeguards recognised under UK data protection law, such as the UK Extension to the EU-US Data Privacy Framework, the UK International Data Transfer Agreement or the International Data Transfer Addendum to the EU Standard Contractual Clauses.

9. How long we keep your data

• Enquiries that do not lead to work: up to 24 months from last contact, so we can respond if you come back to us.
• Quotations, contracts, invoices and project records: 7 years from the end of the financial year in which the work was completed, to meet accounting, tax and insurance requirements and to deal with any defects or claims.
• Electrical and fire safety certification: for the period required by the relevant regulations and scheme rules, which may be longer than 7 years.
• Marketing contacts: until you ask us to stop or we become aware the details are no longer current.
• Website analytics: Plausible data is aggregated and does not identify you. Advertising cookie lifetimes are set by Meta and Google (typically up to 90 days for Meta Pixel cookies).

10. Security

We use appropriate technical and organisational measures to protect personal data, including access controls, encrypted connections (HTTPS), reputable hosting and software providers, and limiting access to those who need it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we will notify you and the Information Commissioner's Office where the law requires it if a breach affects you.

11. Your rights

Under UK data protection law you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data in certain circumstances;
• Restrict or object to processing, including an absolute right to object to direct marketing;
• Data portability for data you provided to us that we process by automated means on the basis of contract or consent;
• Withdraw consent at any time where we rely on it, without affecting processing already carried out.

To exercise any of these rights, contact us using the details below. We will respond within one month and may ask you to verify your identity. We do not make decisions about you using automated decision-making or profiling that produces legal or similarly significant effects.

12. Contact and complaints

Questions, requests or concerns about this policy can be sent to:

H&B Electrical Services Ltd
49a London Road, Chesterton
Newcastle-under-Lyme, Staffordshire, ST5 7EL
Email: sales@handbelectrical.co.uk
Telephone: 01782 479296

If you are not satisfied with our response you have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: ico.org.uk/make-a-complaint or 0303 123 1113.

We may update this policy from time to time. The date at the top shows when it was last changed, and the current version will always be available on this page.