Last updated: 29 June 2026

Privacy Policy for Henco Heating Ltd t/a Gas Mark 1 and Herts Bathrooms and Kitchens

Henco Heating Ltd trading as Gas Mark 1 and Herts Bathrooms and Kitchens (“we”, “our”, “us”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store and protect your personal information when you use our services, contact us, visit our website, or interact with us in any other way.

We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable data protection legislation.

1. Who We Are

The Data Controller responsible for your personal information is:
Henco Heating Ltd
Trading as Gas Mark 1 and Herts Bathrooms and Kitchens
15-21 Market Street
Watford
Hertfordshire
WD18 0PA

Telephone: 01923 231780
Email: office@gasmark1.com

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us using the details above.

2. Personal Information We Collect

We may collect and process the following categories of personal information:

Information You Provide to Us

  • Full name
  • Property address
  • Billing address
  • Email address
  • Telephone number
  • Details of your enquiry
  • Details relating to your boiler, heating system, plumbing installation or property
  • Photographs of installations, equipment or property areas relevant to quotations, servicing, repairs or installations
  • Correspondence between you and us
  • Information required for quotations, installations, servicing and repairs

Information Collected Automatically

When you visit our website, we may automatically collect:

  • IP address
  • Browser type and version
  • Device information
  • Operating system
  • Website usage information
  • Pages visited
  • Time spent on pages
  • Referring website addresses

CCTV Footage

Where CCTV systems are in operation and appropriate signage is displayed, we may collect video footage for security and safety purposes.

3. How We Collect Your Information

We collect information when you:

  • Contact us by telephone, email or post
  • Submit an enquiry through our website
  • Request a quotation
  • Book an appointment
  • Purchase our services
  • Leave reviews or feedback
  • Interact with us through social media
  • Visit premises where CCTV is operating

4. How We Use Your Information

We use your personal information to:

  • Provide gas engineering, heating and plumbing services
  • Arrange boiler servicing, repairs and installations
  • Carry out bathroom and kitchen installations
  • Carry out site surveys for the purpose of generating quotations
  • Assess properties and prepare quotations
  • Schedule appointments and engineer visits
  • Communicate with you regarding annual servicing when it is due
  • Process payments and maintain accounting records
  • Register warranties and manufacturer guarantees
  • Comply with Gas Safe and other regulatory requirements
  • Improve our services and website
  • Manage customer relationships
  • Investigate complaints
  • Protect our business, employees and customers
  • Operate CCTV systems for security purposes

5. Lawful Bases for Processing

Under UK GDPR, we rely on the following lawful bases:

Contractual Necessity

We process personal information where necessary to provide services requested by you, including quotations, repairs, servicing and installations.

Legal Obligations

We process personal information where required to comply with legal and regulatory obligations, including:

  • Gas safety regulations
  • Tax legislation
  • Accounting requirements
  • Health and safety obligations
  • Insurance requirements

Legitimate Interests

We process information where necessary for our legitimate business interests, including:

  • Managing customer relationships
  • Improving services
  • Website administration
  • Preventing fraud
  • Ensuring security
  • Operating CCTV systems
  • Contacting existing customers regarding recommended boiler servicing, maintenance reminders and safety-related follow-up communications

Consent

Where required by law, we will obtain your consent before:

  • Sending marketing communications
  • Placing non-essential website cookies

You may withdraw consent at any time.

6. Sharing Your Information

We do not sell or rent your personal information.

We may share your information with:

  • Employees and engineers working on your project
  • Approved subcontractors
  • Product manufacturers
  • Warranty providers
  • Gas Safe Register and certification bodies
  • Accountants and professional advisers
  • IT and website service providers
  • Payment processing providers
  • Regulatory authorities where legally required
  • Law enforcement agencies where required by law

All third parties are required to protect your personal information and only use it for authorised purposes.

7. International Data Transfers

Some of our service providers may store or process personal information outside the United Kingdom.

Where this occurs, we ensure appropriate safeguards are in place to protect your personal information in accordance with UK data protection laws.

8. Data Retention

We retain personal information only for as long as necessary.

Typical retention periods include:

  • Customer and Job Records
  • Up to 6 years after completion of works to comply with legal, tax and contractual obligations.
  • Financial Records
  • Up to 6 years in accordance with HMRC requirements.
  • Warranty and Installation Records
  • For the duration of any applicable warranty period and related legal obligations, usually up to 10 years.

CCTV Footage

Normally retained for up to 30 days unless required for:

  • Incident investigations
  • Insurance claims
  • Legal proceedings
  • Law enforcement requests

When information is no longer required, it is securely deleted or destroyed.

9. CCTV Monitoring

CCTV systems may operate at our premises and other locations where appropriate signage is displayed.

CCTV is used for:

  • Crime prevention and detection
  • Protection of property
  • Staff and visitor safety
  • Investigation of incidents

Access to CCTV footage is restricted to authorised personnel only.

10. Marketing Communications

Where you have consented, we may contact you regarding:

  • Company updates
  • Promotions
  • New services
  • Customer information

You may opt out of marketing communications at any time by:

  • Clicking the unsubscribe link in relevant emails
  • Contacting us directly by email, phone or post

11. Cookies and Website Tracking

Our website uses cookies and similar technologies to improve functionality, analyse website traffic and enhance user experience.

Cookies may include:

  • Essential Cookies
  • Required for the operation and security of the website.
  • Analytics Cookies
  • Used to understand how visitors use our website and improve performance.
  • Marketing Cookies
  • Used to measure advertising effectiveness where applicable.
  • Non-essential cookies will only be placed on your device with your consent.

You can manage cookie preferences through our cookie banner or your browser settings.

12. Data Security

We take appropriate technical and organisational measures to protect personal information from:

  • Unauthorised access
  • Accidental loss
  • Disclosure
  • Alteration
  • Destruction

These measures include secure systems, restricted access controls and appropriate staff training.

While we strive to protect your information, no method of electronic transmission or storage is completely secure.

13. Your Rights

Under UK GDPR, you have the right to:

  • Be informed about how your information is used
  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of personal information where applicable
  • Restrict processing in certain circumstances
  • Object to processing based on legitimate interests
  • Request transfer of your personal information
  • Withdraw consent at any time where processing relies on consent

To exercise any of these rights, please contact us using the details provided above.

Requests relating to your data rights should be submitted to office@gasmark1.com. We will normally respond within one month in accordance with applicable data protection legislation.

14. Children’s Privacy

Our services are not directed at children.

We do not knowingly collect personal information from anyone under the age of 16.

If we become aware that such information has been collected, we will take appropriate steps to delete it.

15. Complaints

If you have concerns about how we use your personal information, please contact us first so we can attempt to resolve the issue.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection regulator.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: www.ico.org.uk

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or business operations.

Any updates will be published on this page and the “Last Updated” date will be amended accordingly.

We encourage you to review this Privacy Policy periodically.