This policy describes how we collect, store, transfer and use personal data. It tells you about your privacy rights and how the law protects you.
In the context of the law and this policy, ‘personal data’ is information that clearly identifies you as an individual or which could be used to identify you if combined with other information. Acting in any way on personal data is referred to as ‘processing’.
We do not sell your personal data. We share personal data only where necessary to provide our services, operate and improve our business, process payments, communicate with you, comply with legal obligations or protect our rights. The categories of recipients are described below.
We may collect and use the following categories of personal data:
We collect personal data:
When you use our address lookup, the address text you enter and technical request information are sent to Google Maps Platform to provide address suggestions and check our service area. Google processes this information as described in Google's Privacy Policy.
We may aggregate anonymous information such as statistical or demographic data for any purpose. Anonymous information is that which does not identify you as an individual. Aggregated information may be derived from your personal data but is not considered as such in law because it does not reveal your identity.
For example, we may aggregate usage information to assess whether a feature of our website is useful.
However, if we combine or connect aggregated information with your personal data so that it can identify you in any way, we treat the combined information as personal data, and it will be used in accordance with this Privacy Policy.
We do not require or intentionally collect health information or other special-category personal data through our website. Please do not provide this information in free-text fields or other communications with us.
We process personal data only where one or more of the following lawful bases applies.
We process identity, contact, property, quote, job and transaction information where necessary to:
We rely on the performance of a contract or steps you ask us to take before entering into a contract.
Where we mark information as required, we need it to respond to your request, prepare a quote or provide the requested service. You are not normally legally required to provide it, but without it we may be unable to respond or provide the relevant quote or service.
For analytics and marketing technologies, you can withdraw consent using the “Cookie settings” link in the website footer. For other processing based on consent, contact us at contact@boiler-right.co.uk.
We do not take card details over the telephone or collect them directly through our website. All card details are entered directly into Stripe's secure checkout and are processed by Stripe.
We may provide Stripe with limited information, such as your email address, the payment amount and a description of the products or services being purchased, so that Stripe can process the transaction. We may receive and retain transaction information such as the amount paid, payment status and a transaction reference, but we do not receive or store your full card number or security code.
We may share relevant personal data with:
We share only the personal data reasonably necessary for the relevant purpose. Where another organisation processes personal data on our behalf, we require it to protect that information and use it only for the agreed services, where applicable.
When you use our online quote tool, the information you provide about your property, existing heating system and installation requirements is processed automatically to calculate an estimated price. The calculator applies predefined pricing rules to the information you provide.
The estimate depends on the information you provide being complete and accurate. It is not a final price and is subject to a site survey. The person carrying out the survey will review the estimate and the installation requirements. The price or proposed work may change if the survey identifies inaccurate information, different circumstances or additional work.
The automated calculation does not by itself result in a final or legally binding decision.
We use cookies and other browser storage to operate the website, remember your choices and understand how our services are used.
If you reject optional cookies, Google's advanced consent mode may still send limited cookieless signals for measurement and modelling. Google describes its Analytics signals as anonymous and non-identifiable and says that Google Analytics does not store or log their IP addresses.
You can accept all optional technologies, reject them, or choose analytics and marketing separately. You can change your choice at any time using the “Cookie settings” link in the footer. Rejecting optional technologies does not prevent you from using the essential features of the website. You can also remove existing cookies and browser storage through your browser settings.
Further information is available in Google's information about cookies and Google's Privacy Policy.
Our website and technical service providers may process information such as your IP address, browser or device details, requested pages and timestamps where necessary to deliver and secure the website and diagnose faults. Analytics and marketing processing is described in the cookies section above.
Re-marketing involves placing a ‘tracking technology’ such as a cookie, a ‘web beacon’ (also known as an ‘action tag’ or a ‘single-pixel GIF’) to track which pages you visit and to serve you relevant adverts for our services when you visit some other website.
The benefit of re-marketing technology is that we can provide you with more useful and relevant adverts, and not show you ones repeatedly that you may have already seen.
Where this feature is enabled and you have given marketing consent, we may use Google Ads to measure advertising enquiries and provide re-marketing services. Google may receive online identifiers and information about your use of our website for these purposes. You may then see advertisements for our services on other websites.
You can withdraw marketing consent at any time using the “Cookie settings” link in the footer. We do not sell your personal data.
BoilerRight is a trading name of Michael Talu. Michael Talu is the data controller responsible for the personal data described in this Privacy Policy.
Business address: 99 Messingham Road, Scunthorpe, DN17 2LN
Email: contact@boiler-right.co.uk
Telephone: 01724 656427
Depending on the circumstances, you may have the right to ask us to:
Where we rely on your consent, you may withdraw that consent at any time. Withdrawing consent does not affect processing carried out before its withdrawal.
To exercise your rights, contact us using the details in the “Who we are and how to contact us” section. We may need to confirm your identity before responding.
Your right to object: You may object when we process your personal data on the basis of legitimate interests. You have an absolute right to object to the use of your personal data for direct marketing.
Our website and services are intended for adults. We do not knowingly collect personal data from anyone under the age of 18. If you believe that a child has provided us with personal data, please contact us so that we can investigate and, where appropriate, delete it.
We use appropriate technical and organisational measures to protect personal data. These include encryption in transit, access controls, authentication and restricting access to people who need the information for their work. However, no method of storing or transmitting information can be guaranteed to be completely secure.
Some of our service providers and other recipients may process personal data outside the United Kingdom.
When personal data is transferred to a country that is not covered by UK adequacy regulations, we take steps to ensure that it remains appropriately protected. Depending on the provider and destination, these safeguards may include the UK International Data Transfer Agreement, the UK Addendum to the European Commission's Standard Contractual Clauses, or another transfer mechanism permitted under UK data-protection law.
Where required, we also consider the risks associated with the destination and the safeguards provided by the recipient.
You may contact us using the details in the “Who we are and how to contact us” section if you would like further information about the countries in which your personal data is processed or the safeguards used for a particular transfer.
At any time, you may contact us to request that we provide you with the personal data we hold about you.
When you contact us, whether by telephone, through our website or by email, we collect the data you have given to us in order to reply with the information you need.
We record your request and our reply in order to increase the efficiency of our business.
We may keep personally identifiable information associated with your message, such as your name and email address so as to be able to track our communications with you to provide a high quality service.
If you wish to make a complaint about how we use your personal data, email contact@boiler-right.co.uk or write to our business address. We will acknowledge your complaint within 30 days, investigate it without undue delay, keep you informed where appropriate and tell you the outcome. You also have the right to complain to the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/.
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including providing our services, administering warranties, meeting legal and accounting obligations, and dealing with complaints or legal claims.
As a general rule:
We may retain information for longer where this is necessary because of an unresolved complaint, warranty issue, legal claim, investigation or another legal requirement. When personal data is no longer required, we delete it or anonymise it so that it can no longer identify an individual.
We process personal data in accordance with applicable UK data-protection law, including the UK GDPR and the Data Protection Act 2018. The Privacy and Electronic Communications Regulations apply where we use electronic communications, cookies or similar technologies.
Last updated: 22 July 2026.
We may update this Privacy Policy when our services, suppliers or use of personal data changes. The date above shows when it was last revised. Where a change materially affects how we use existing personal data, we will take reasonable steps to bring it to the attention of affected individuals before the new use begins.