Privacy policy

Website: www.centralheating.com
Last updated: 12 October 2026

1. Introduction

Welcome to CentralHeating.com.

We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, submit an enquiry or interact with our services.

In this policy, “we”, “us” and “our” refer to the organisation operating CentralHeating.com.

We process personal information in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, where applicable.

2. Who We Are

The organisation responsible for your personal information is:

Business name: [Insert full legal business name]
Website: https://www.centralheating.com
Registered address: [Insert registered business address]
Email: [Insert privacy contact email]
Telephone: [Insert contact telephone number]
Company registration number: [Insert number, if applicable]

For the purposes of applicable data protection legislation, we act as the data controller when we determine how and why your personal information is processed.

If you have any questions about this Privacy Policy or how your information is handled, please contact us using the details above

3. Personal Information We Collect

Depending on how you interact with our website and services, we may collect the following categories of personal information.

3.1 Information You Provide to Us

When you contact us, submit an enquiry or request information about heating-related products or services, we may collect:

  • Your name and title.
  • Your email address.
  • Your telephone number.
  • Your home, business or service address.
  • Details of your enquiry or requested service.
  • Information you provide about your heating system, boiler, property or heating requirements.
  • Preferred appointment dates and times, where applicable.
  • Any other information you voluntarily provide when communicating with us.


Please avoid submitting unnecessary personal or sensitive information through website forms.

3.2 Information Collected Automatically

When you visit our website, certain technical information may be collected automatically, including:

  • Your IP address.
  • Browser type and version.
  • Device and operating system information.
  • Pages visited and how you interact with the website.
  • The date, time and duration of your visit.
  • The website or search engine that referred you to us.
  • Website performance, diagnostic and security information.

We use this information where necessary to operate, maintain, protect and improve our website and understand how visitors use it.

3.3 Information from Other Sources

Where permitted by law, we may receive personal information from third parties, such as service providers, business partners, referral platforms or contractors involved in responding to your enquiry.

Where we obtain personal information from another source, we will provide any privacy information required by applicable law.

4. How We Use Your Personal Information

We may use your personal information for the following purposes:

  • Responding to enquiries: To answer your questions and provide requested information.
  • Providing services: To arrange appointments, prepare quotations and coordinate heating-related work, where these services are offered.
  • Customer communications: To contact you about your enquiry, appointment or service request.
  • Website operation: To maintain website functionality and provide a reliable user experience.
  • Security and fraud prevention: To protect our website, systems, customers and business from fraudulent or unauthorised activity.
  • Service improvement: To understand website usage, improve our content and develop our services.
  • Legal obligations: To comply with applicable laws, regulations and lawful requests.
  • Marketing: To send relevant promotional communications where permitted by law and, where required, with your consent.


We will not use your personal information for purposes that are incompatible with the purposes explained in this policy unless we have a lawful basis to do so.

5. Our Lawful Bases for Processing

We process personal information only where an appropriate lawful basis applies.

Depending on the circumstances, these bases may include:

Consent: Where you have freely given consent to a specific activity, such as receiving certain marketing communications or allowing non-essential cookies.

Contract: Where processing is necessary to take steps at your request before entering into a contract or to perform a contract with you.

Legitimate interests: Where processing is necessary for our legitimate business interests, such as responding to general enquiries, maintaining website security or improving our services, provided those interests are not overridden by your rights and interests.

Legal obligation: Where processing is necessary to comply with a legal requirement.

Where we rely on legitimate interests, we consider the potential impact on your privacy and take appropriate steps to protect your rights.

If we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

6. Sharing Your Personal Information

We do not sell your personal information to third parties.

We may share personal information with the following categories of recipients when necessary and lawful:

  • Website and hosting providers: To host, maintain and secure our website.
  • IT and software providers: To support business systems, communications and data storage.
  • Analytics providers: To help us understand website traffic and usage, where applicable.
  • Heating engineers, installers or contractors: Where necessary to fulfil a service request or arrange work.
  • Business partners or referral providers: Where necessary to respond to an enquiry or provide a service you have requested.
  • Professional advisers: Such as solicitors, accountants or insurers, where appropriate.
  • Authorities and regulators: Where disclosure is required by law or necessary to protect our legal rights.


We require relevant service providers to handle personal information appropriately and to apply suitable security and confidentiality measures.

We only share information that is reasonably necessary for the relevant purpose.

7. International Data Transfers

Some of our service providers may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we will ensure that the transfer complies with applicable data protection legislation. This may include relying on an adequacy regulation or decision, an appropriate safeguard such as an approved contractual mechanism, or another lawful transfer mechanism where available.

You may contact us for further information about relevant international transfers and the safeguards used.

8. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including any applicable legal, accounting, contractual or reporting requirements.

Retention periods may vary depending on the type of information and our relationship with you.

For example:

  • General enquiries: We retain enquiry information for as long as necessary to respond and manage any resulting follow-up.
  • Customer and service records: We retain relevant records for the duration of our relationship and any additional period required for legal obligations or legitimate business needs.
  • Marketing information: We retain marketing preferences and contact details until you unsubscribe, withdraw consent where applicable, or the information is no longer needed.
  • Technical and website records: We retain logs and analytics information according to their purpose, applicable settings and operational requirements.


When personal information is no longer required, we will securely delete it or anonymise it where appropriate.

Our actual retention periods should be documented internally and applied consistently.

9. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support functionality, remember preferences, measure website performance and understand visitor behaviour.

Cookies are small files stored on your device when you visit a website.

Depending on the cookies and technologies used, they may fall into the following categories:

Strictly necessary cookies: These support essential website functions, security and other services you have requested.

Analytics cookies: These help us understand how visitors use our website and identify areas for improvement.

Functional cookies: These may remember your preferences and improve your experience.

Advertising and marketing cookies: Where used, these may help measure advertising performance or deliver relevant advertising.

We will obtain consent before using cookies or similar technologies that require consent under applicable law. You can manage your preferences through our cookie settings where available.

You may also be able to manage or delete cookies through your browser settings. Disabling certain cookies may affect website functionality.

For more information, please refer to our Cookie Policy, if provided separately on the website.

10. Marketing Communications

We may use your contact information to send you information about our services, offers or updates where permitted by applicable marketing and privacy laws.

Where consent is required, we will obtain it before sending marketing communications.

You can opt out of marketing communications at any time by following the unsubscribe instructions in the relevant message or contacting us directly.

Opting out of marketing will not prevent us from sending necessary non-marketing communications relating to an existing enquiry, appointment, contract or service.

We do not knowingly send marketing communications in breach of applicable electronic marketing rules.

11. How We Protect Your Information

We take appropriate technical and organisational measures to protect personal information against unauthorised access, accidental loss, alteration, disclosure or destruction.

Depending on the nature of the information and the risks involved, these measures may include access controls, secure hosting, staff training, system monitoring, backups and appropriate security procedures.

However, no method of transmitting or storing information electronically is completely secure. Although we take reasonable steps to protect your information, we cannot guarantee absolute security.

If a personal data breach occurs, we will respond in accordance with applicable legal requirements.

12. Your Data Protection Rights

Depending on the circumstances and applicable law, you may have the following rights in relation to your personal information:

  • Right of access: To request a copy of the personal information we hold about you.
  • Right to rectification: To ask us to correct inaccurate or incomplete information.
  • Right to erasure: To request deletion of your personal information where the legal conditions are met.
  • Right to restriction: To ask us to restrict the processing of your information in certain circumstances.
  • Right to data portability: To receive certain information in a commonly used, machine-readable format or request its transfer to another organisation, where applicable.
  • Right to object: To object to processing based on legitimate interests or to certain other processing in the circumstances provided by law.
  • Rights relating to consent: To withdraw consent at any time where processing is based on consent.
  • Rights relating to automated decision-making: To be protected against certain solely automated decisions with legal or similarly significant effects, where applicable.


These rights are subject to legal conditions and exceptions. They may not apply in every situation.

To exercise a right, please contact us using the details in Section 2. We may need to verify your identity before responding.

We will respond within the time limits required by applicable law. In most cases, this is one month, although extensions may be permitted in certain circumstances.

We will not normally charge a fee for handling a valid request unless the law permits us to do so.

13. Complaints

If you have concerns about how we use your personal information, please contact us first so that we can try to resolve the issue.

If you are based in the United Kingdom, you also have the right to complain to the Information Commissioner’s Office (ICO).

Website: https://ico.org.uk/
Telephone: 0303 123 1113

You can contact the ICO without first contacting us, although we welcome the opportunity to address your concerns directly.

14. Third-Party Websites and Services

Our website may contain links to external websites, platforms or services operated by third parties.

We are not responsible for the privacy practices, content or security of websites that we do not operate. When you follow an external link, we recommend reviewing the relevant provider’s privacy policy before submitting personal information.

This Privacy Policy applies to our own website and the personal information we process as described above.

15. Children's Privacy

Our website and services are not intended to collect personal information directly from children unless this is appropriate for the service and permitted by law.

We do not knowingly collect children’s personal information unnecessarily. If we become aware that we have collected personal information in circumstances where we should not have done so, we will take appropriate steps to address the situation.

If you believe a child has provided us with personal information inappropriately, please contact us.

16. Automated Decision-Making

We do not intend to make decisions about you based solely on automated processing that produce legal effects or similarly significant effects, unless we have a lawful basis and have complied with applicable legal requirements.

If this practice changes, we will update this policy and provide any additional information required by law.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website, services, technology or legal obligations.

Any revised version will be published on this page with an updated “Last updated” date.

We encourage you to review this page periodically to remain informed about how we handle personal information.

Where required by law, we will provide additional notice of significant changes.

18. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights or would like further information about our handling of personal information, please contact us:

CentralHeating.com

Website: https://www.centralheating.com
Email: contact@centralheating.com
Telephone: [Insert contact telephone number]
Postal address: [Insert registered or business address]

We will review your enquiry and respond in accordance with applicable data protection requirements.