Privacy Policy
Last updated:
What we do with the information you give us through this website, why we hold it, how long we keep it, and what you can ask us to do about it.
On Heating is a trading name of Pierson Heating Ltd, a company registered in England and Wales under company number 11909173, with its registered office at Projects Nile House, Nile Street, Brighton, East Sussex, BN1 1HW. We trade from 12 Margery Rd, Hove, BN3 7GQ.
We are the data controller for the information described on this page. That means we decide what is collected and why, and we are responsible for looking after it.
If you have a question about this policy, or you want to exercise any of the rights set out below, email [email protected], call 01273 110667, or write to us at the trading address above.
Is there a data protection officer?
No, and we are not required to appoint one. A data protection officer is only mandatory for public authorities, and for organisations whose main activity is large scale monitoring of people or large scale handling of health, criminal or similar information. A heating and plumbing business does not meet that test.
Privacy questions go to the email address above, which is monitored by a person. This website is built and looked after for us by Begin Group Ltd, and their named data protection contact, Luca Lopalco, deals with anything technical about how the site handles information. You never have to go to them directly: ask us and we will sort it out.
What we collect, and why
The enquiry form on our home page
This form asks for your name, a phone number, an email address and a short description of what you need help with. It also records which page of the site you were on when you sent it, so we know what you were reading. You need to give us either a phone number or an email address, not both.
We use it to reply to you, to answer your question, and where relevant to quote for the work or arrange a visit. Our lawful basis is legitimate interests, specifically replying to somebody who has asked us to get in touch. We think that is fair because anyone who fills in a form asking for a quote expects to be contacted about it. We use it for nothing else, unless you separately ticked the box asking for our newsletter, which is described under Marketing below.
The form on our contact page
This form asks for your name, an email address, a phone number, the town or area you are in, which service you are asking about, and your message. It also records that you ticked the box to say you had read this policy. We use it, and rely on the same lawful basis, exactly as described for the enquiry form above.
The Home Care Plan application form
This form asks for your name, email address, phone number and the address of the property the plan would cover, and then, optionally, the type of property, the make, model and rough age of your boiler and when it was last serviced. There is a free text box for anything else you want to tell us.
We use it to decide whether we can offer you the plan and to talk it through with you before anything starts. The answers about the boiler and the property are what make that possible without telephoning you first, which is why we ask for them, and why all of them are optional. Our lawful basis is again legitimate interests, specifically responding to somebody who has asked to be considered for a service we sell. No payment details are collected anywhere on this website.
If you call or email us instead
If you phone or email us, we hold whatever you tell us for as long as it takes to deal with your enquiry, on the same basis. We do not record telephone calls.
Do you have to give us any of this?
No. There is no legal or contractual requirement to give us anything, and nothing on this website is withheld from you if you do not. The practical limit is simply that we cannot reply to you without a way of reaching you, and we will have to ask follow up questions if we do not know what the job is.
Information about your visit to the site
Our hosting provider handles technical information about every request to the website, including your IP address, the page requested and details of your browser. This is what makes it possible to serve you the page and to protect the site from attack and automated abuse. Our lawful basis is legitimate interests, namely keeping the website available, working and secure. We do not use that information to identify you or to build a profile of you.
We do not currently use any analytics, advertising or tracking tools on this website at all. Nothing measures your behaviour across the site, and nothing follows you to any other site.
Children
This website is aimed at property owners and occupiers arranging heating and plumbing work. It is not aimed at children, and we do not knowingly collect information about anyone under eighteen.
Sensitive information
We do not ask for information about health, ethnicity, religion, sexuality, criminal history, trade union membership or biometrics, and we have no use for any of it. Please do not send us any of that through the forms on this site.
Marketing
We send an email newsletter about once a month, with seasonal heating advice and the occasional offer. You will only ever receive it if you asked for it.
Every form on this website has a second, separate tick box for this, underneath the one about your enquiry. It reads:
That box is empty when the page loads and we never fill it in for you. It is optional, it is not connected to your enquiry, and leaving it alone changes nothing about the reply you get from us. Our lawful basis for the newsletter is your consent, and we record the date you gave it and the exact wording you were shown, so we can always tell you what you agreed to.
Every email we send has an unsubscribe link, and it works immediately. You can also just reply and ask, or email us at the address above. Withdrawing your consent takes nothing else away: we will still deal with your enquiry and still do your work.
The list is held in Mailchimp, which is what sends the emails. We do not sell your information, and we do not share it for anybody else's marketing. Not now, and not later.
Who else sees your information
We use a small number of suppliers to run this website and to send our newsletter. Each of them handles your information only on our instructions, under a written contract.
| Supplier | What they do with it | Where | Protection |
|---|---|---|---|
| Begin Group Ltd | Builds and looks after this website for us. The store holding enquiries sent through the forms sits inside their Cloudflare account, so they can reach it in the course of keeping the site working. Registered with the Information Commissioner's Office under number ZC181845. | United Kingdom | Written processing terms with us |
| Cloudflare | Hosts the website, delivers the pages, filters malicious traffic, and stores the enquiries sent through the three forms. Handles IP addresses and request details, and the contents of your enquiry. | Global network, United States parent company | International Data Transfer Agreement or the UK Addendum, in the Cloudflare data processing terms |
| Mailchimp | Holds our newsletter list and sends the emails. Only reaches this supplier if you ticked the optional box asking for the newsletter. Handles your name, your email address, and whether you opened an email. | United States | Standard Contractual Clauses with the UK Addendum, in the supplier's data processing terms |
Beyond that, we share your information only where we have to: with a tradesperson or supplier we bring in to carry out work you have asked for, and then only what they need in order to do it; with our accountant, for the records a business is required to keep; and with anybody the law obliges us to tell. We do not sell personal information to anyone, ever.
Information that leaves the United Kingdom
Cloudflare is a global service with a parent company in the United States, and Mailchimp is a United States company, so some of the handling described above happens outside the United Kingdom. Where that is the case the transfer is protected by an International Data Transfer Agreement, or by the UK Addendum to the Standard Contractual Clauses. You can ask us for details of the safeguards that apply.
How long we keep it
| What | How long | Why |
|---|---|---|
| An enquiry that did not lead to work | 12 months, then deleted | Long enough for you to come back to us about it, short enough that we are not keeping something with no purpose. The deletion is automatic, not something anybody has to remember to do. |
| An enquiry that became a job | Six years after we last did work for you | It becomes part of your customer record. Six years is the period during which a dispute about the work could still be raised, under the Limitation Act 1980. |
| Invoices and accounting records | Six years from the end of the accounting period | Required by the Companies Act 2006 and by HM Revenue and Customs. This one survives a request to delete, and we explain that below. |
| Your place on the newsletter list, if you asked for it | Until you unsubscribe, then deleted | It exists only because you asked for it, so the moment you say stop there is no reason left to keep it. We keep a minimal record that you unsubscribed, which is what stops you being added back by mistake. |
| Technical and security logs | A short period held by our hosting provider | Enough to investigate an incident or an attack. We do not keep our own copy. |
Cookies
Cookies and similar technologies are covered by a different set of rules, so they have a page of their own. Our Cookie Policy lists everything this website stores on your device, what each item does, and how to change your choices at any time.
How we look after it
The website is served only over an encrypted connection. Enquiries are stored in access controlled systems, and only the people who need to deal with your enquiry can see it. The forms limit the size of what can be submitted and carry a trap for automated submissions, so the store cannot be flooded by a bot. Accounts on the systems we use are protected by strong passwords and, where the system supports it, two factor authentication.
Your rights
You have the right to:
- ask for a copy of the information we hold about you;
- have it corrected if it is wrong or incomplete;
- have it deleted, in some circumstances;
- ask us to restrict what we do with it;
- object to us using it;
- receive it in a portable format, where you gave it to us and it is handled by automated means; and
- object to direct marketing at any time, which is absolute and which we will action immediately.
Where we rely on your consent for anything, you can withdraw it at any time, and withdrawing it does not affect anything we did before you withdrew it.
Deletion is not absolute. If we are required to keep something, such as an invoice for the accounts, we will keep that record and tell you why rather than quietly refuse.
To exercise any of these rights, email [email protected]. It is free, you do not have to use any particular form of words, and we will respond within one calendar month. If your request is complicated we may need up to two further months, and if so we will tell you inside the first month.
Automated decisions
We do not make decisions about you by automated means alone, and we do not carry out any profiling that has legal or similarly significant effects on you.
Complaints
If you are unhappy with how we have handled your information, please tell us first at [email protected]. We will acknowledge your complaint within thirty days and tell you what we are doing about it.
You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. Complaining to us first does not take away your right to complain to them.
Changes to this policy
We review this policy at least once a year, and whenever we change what we do with personal information. The date at the top of the page shows when it last changed.
- 12 August 2026
- Added Begin Group Ltd and Mailchimpto the list of suppliers who handle your information, and named Begin's ICO registration. Rewrote the Marketing section: this policy previously said we did not add website enquiries to a marketing list, which was wrong, and there is now an optional tick box on every form and a description of exactly what it does. Added the Home Care Plan application form and a retention period for the newsletter list.
- 11 August 2026
- First published. Replaces the holding page that stood here while the policy was written.
