Effective date: 24 October 2026
JBP Plumbing Solutions Ltd is responsible for the personal information described in this notice. Our website is https://jbp.ltd.
For privacy enquiries or to exercise your data protection rights, contact info@jbp.ltd or telephone 07497 083412.
Our Contact Us form collects your name, telephone number, email address and message. Our Request a Quote form also collects the service required, postcode and description of the proposed work. These forms do not accept photographs or attachments. Please do not include passwords, payment-card details or unnecessary sensitive information.
We also receive information you provide by telephone or email. If you become a customer, we may need your installation address, appointment arrangements, agreed work, correspondence, invoices and relevant installation, completion or safety records. Photographs received separately may form part of these records where necessary.
Website and security systems may process technical information such as your IP address, browser details, request times and security events. Enquiry records may include the submission time and page used.
Required form fields help us assess and respond to your request. Without suitable contact and project details, we may be unable to provide a useful response or quotation.
We use your information to respond to enquiries, prepare quotations, arrange appointments, carry out agreed work and maintain appropriate business records.
Our lawful bases are:
An enquiry does not subscribe you to marketing. We do not use these forms for solely automated decisions that produce legal or similarly significant effects. Receiving a photograph does not authorise us to publish it; we seek separate permission where required for promotional use.
We use Contact Form 7 for our forms and Flamingo to store text enquiries in our WordPress database. Flamingo may also create an address-book entry. This helps us retain an enquiry if its email notification fails; it does not subscribe you to marketing.
Enquiries are sent to info@jbp.ltd through our business email service. These emails contain the submitted contact details and enquiry text. The forms do not accept or attach photographs.
Access to enquiry records and the address book is restricted to individually authorised JBP administrators after login. Database storage provides an additional copy, but no system can guarantee against every service interruption or loss of data.
Hostinger provides our website hosting, content delivery network and business email services. These services process information needed to deliver and protect the website and email, including relevant network and request information. Hostinger's data-processing terms are available at https://www.hostinger.com/legal/dpa.
We may share necessary information with professional advisers, insurers, regulators or authorities where appropriate for a legal obligation, business advice or a claim. This does not mean that every enquiry is routinely shared with those recipients. We do not sell your personal information.
Our hosting and email services may involve processing outside the UK, including by Hostinger's authorised subprocessors. We do not represent that all website, email, support, delivery-network or backup processing takes place in one country.
Hostinger processes customer information on our behalf under the applicable service terms and its Data Processing Addendum. The Addendum sets out international-transfer arrangements, including Standard Contractual Clauses and the UK International Data Transfer Addendum where applicable. Where a transfer benefits from applicable UK adequacy regulations, those arrangements may provide the transfer basis instead. You may contact info@jbp.ltd for information about the relevant safeguards and how to obtain a copy. We do not identify a particular transfer destination or claim that a contractual transfer mechanism is required for every transfer.
| Information | Retention period |
|---|---|
| Unsuccessful enquiries | 12 calendar months after the last customer contact. |
| Non-essential enquiry photographs received separately | 90 days after the enquiry is closed. |
| Essential completed-job records and relevant installation photographs | Six calendar years after job completion, subject to applicable legal requirements and documented safety, warranty or dispute holds. |
These periods also apply, as appropriate, to related Flamingo records, address-book entries and email correspondence. Not every enquiry or photograph becomes an essential completed-job record. An internal review does not restart the last-customer-contact period, and the submission date is not automatically the job-completion or enquiry-closure date.
Accounting and tax records have separate legal requirements. Company accounting records generally need to be kept for six years from the end of the financial year to which they relate, and longer in applicable circumstances. This may extend beyond six years from job completion. Relevant safety obligations, warranties or ongoing disputes may also justify longer retention of particular records. We document and review such holds rather than retaining unrelated information indefinitely.
We review records manually and remove or anonymise information when it is no longer needed, taking account of applicable obligations and valid erasure requests. Automatic deletion is not currently enabled.
Hostinger has advised us that website access logs are retained for up to 30 days and that error logs are files within our hosting account which we manage. We use relevant logs to investigate faults and protect our systems. Information necessary for an incident or claim may be kept separately for as long as justified.
Other service-provider security logs and backup copies are subject to separate provider retention arrangements. We do not apply the 30-day access-log period to those categories or state an unverified provider backup frequency or expiry period.
For records managed by JBP, we determine retention by the purpose of the record, the period needed to investigate a fault or security incident, any applicable legal obligation and any documented claim or preservation hold. Recovery copies are managed separately from day-to-day customer records, with access restricted to recovery purposes.
The 30-day access-log period does not establish the retention period for all logs or backups. Likewise, the six-year completed-job period does not mean that every backup is kept for six years.
We maintain restricted recovery copies under our backup procedures. Where selective removal from a backup is not practicable, information removed from active systems remains restricted until the backup expires or is replaced under the applicable rotation. Following a restoration, previous deletion decisions must be reconciled before ordinary use resumes. Backups are not intended for routine access to information that has been removed from active use.
Our reviewed public pages do not use advertising or analytics cookies. WordPress uses authentication and preference storage for staff login and administration. Where a technology requires consent, it must not be activated before valid consent is obtained.
Installation photographs and videos are served with our website, including through our hosting provider's delivery service, rather than embedded from a third-party video platform.
Google review buttons are external links. If you follow one, Google's own privacy terms apply. A link does not give Google access to the information you submit in our enquiry forms.
The staff administration environment may request profile images from Gravatar. This is separate from the reviewed public visitor pages. We review privacy and consent requirements before introducing additional tracking or external services.
We use access controls, authenticated staff access, encrypted connections and protected recovery copies to help safeguard personal information. Enquiries stored in Flamingo are not protected by a separate custom application-encryption system; appropriate database, hosting and backup protections therefore remain important.
Please avoid sending unnecessary sensitive information through the forms. No internet service or security measure can guarantee absolute security.
Depending on the circumstances, you may request access, correction, erasure, restriction or portability of your personal information. You may also object to processing based on legitimate interests. Where we rely on consent, you may withdraw it without affecting the lawfulness of earlier processing.
These rights are subject to applicable conditions and exceptions. We may need to verify your identity proportionately and retain information where a legal obligation or justified claim requires it.
Contact info@jbp.ltd. We will respond within the applicable legal timescales. You may complain to the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/. We also welcome the opportunity to address your concerns directly.
We will update this notice when our practices change. Its effective date will be shown when the policy is published.