Privacy Policy

The data controller for your personal information is:

2.1 Information You Provide

When you contact us or use our services, we may collect:

• Name and contact details (phone number, email address)
• Property or vehicle address for service delivery
• Details of the locksmith service you require
• Payment information (processed securely via third-party providers)

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address and approximate location
• Browser type, device type, and operating system
• Pages visited, time spent, and referral source
• Analytics data via Google Analytics 4 (see Cookies section)

We process your personal data for the following purposes:

• Service delivery: To provide the locksmith services you have requested (contractual necessity)
• Communication: To contact you regarding your booking or enquiry (legitimate interest)
• Payment processing: To process payments and maintain financial records (legal obligation)
• Website improvement: To analyse how visitors use our site and improve your experience (legitimate interest)
• Legal compliance: To comply with applicable laws and regulations (legal obligation)

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4.1 Google Analytics 4 (GA4)

We use Google Analytics 4 to understand how visitors interact with our website. GA4 collects anonymised data including pages viewed, session duration, and traffic sources. This helps us improve our website and services.

GA4 uses first-party cookies. Data is processed by Google in accordance with their Privacy Policy.

4.2 Essential Cookies

Some cookies are strictly necessary for the website to function correctly. These do not require consent and cannot be disabled.

4.3 Managing Cookies

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.

5.1 Retention Periods

• Service records: 6 years (HMRC requirement)
• Contact form submissions: 12 months, then deleted
• Analytics data: 14 months (GA4 default)
• Communication records: 2 years

5.2 Security Measures

We use industry-standard security measures to protect your personal data, including encrypted connections (HTTPS), secure hosting, and access controls. Payment data is processed by PCI-compliant third-party providers — we never store card details.

Under UK GDPR, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to restrict processing: Request limitation of how we process your data
• Right to data portability: Request transfer of your data in a machine-readable format
• Right to object: Object to processing based on legitimate interests

To exercise any of these rights, contact us at deevalleylocksmiths@gmail.com. We will respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

We use the following third-party services that may process your data:

• Google Analytics 4: Website analytics and visitor insights
• Google Business Profile: Business listing and customer reviews
• Featurable: Displaying Google review widgets on our website

Each third party processes data in accordance with their own privacy policies. We encourage you to review their policies for more information.