Privacy Policy

1. Introduction

TekSpert LTD ("TekSpert", "we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website tekspert.co.uk, use our mobile application, or engage with our electrical services.

We are registered under the UK Data Protection Act 2018 and comply with the UK General Data Protection Regulation (UK GDPR). Our Information Commissioner's Office (ICO) registration number will be provided upon registration completion.

2. Information We Collect

2.1 Personal Information You Provide

When you use our services, we may collect the following personal information:

• Contact Information: Name, email address, phone number, postal address
• Service Address: Property address where electrical services are required
• Booking Information: Emergency type, urgency level, service requirements, appointment details
• Payment Information: Billing address, payment card details (processed securely through our payment provider)
• Account Information: Username, password (encrypted), account preferences
• Communication Records: Emails, phone calls, messages, and correspondence with our team
• Engineer Information: For registered engineers - professional qualifications, certifications, work history

2.2 Information Automatically Collected

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, links clicked, referring website
• Location Data: Approximate geographic location based on IP address (with your consent, precise GPS location for mobile app users)
• Cookies and Tracking Technologies: See our Cookie Policy for detailed information

2.3 Information from Third Parties

• Payment Processors: Transaction confirmations and payment status
• Credit Reference Agencies: For business customers requiring credit terms
• Professional Bodies: Verification of engineer qualifications (NICEIC, ECS, etc.)
• Review Platforms: Customer reviews and ratings from third-party platforms

3. How We Use Your Information

We use your personal information for the following purposes, based on the legal grounds specified under UK GDPR:

3.1 Contractual Necessity

• Processing and fulfilling your emergency or planned electrical service bookings
• Scheduling engineer appointments and managing service delivery
• Processing payments and issuing invoices
• Communicating about your service requests and bookings
• Providing customer support and responding to inquiries

3.2 Legitimate Interests

• Improving and optimizing our website and mobile application
• Analyzing usage patterns to enhance user experience
• Preventing fraud and ensuring platform security
• Managing our engineer network and ensuring service quality
• Conducting market research and business development
• Sending service updates and operational communications

3.3 Legal Obligations

• Complying with electrical safety regulations and Part P requirements
• Maintaining records for VAT, tax, and accounting purposes
• Responding to legal requests from authorities
• Meeting insurance and professional indemnity requirements
• Maintaining certification and compliance records

3.4 Consent (where obtained)

• Sending marketing communications about our services
• Using precise location data from your mobile device
• Setting non-essential cookies on your device
• Sharing information with third-party marketing partners

4. How We Share Your Information

We may share your personal information with the following categories of recipients:

4.1 Service Providers

• Payment Processors: Secure handling of payment transactions
• Cloud Hosting Providers: Secure data storage and infrastructure
• Email Service Providers: Delivery of transactional and marketing emails
• SMS Providers: Emergency notifications and appointment reminders
• Analytics Providers: Website and app performance analysis
• Customer Support Tools: Managing customer inquiries and support tickets

4.2 Professional Partners

• Registered Engineers: Your booking details to fulfill service requests
• Sub-contractors: When additional expertise or capacity is required
• Professional Bodies: For qualification verification (NICEIC, ECS, Part P)
• Insurance Providers: For claims processing and coverage verification

4.3 Legal and Regulatory Bodies

• Law enforcement agencies when required by law
• Regulatory authorities (Electrical Safety First, HSE, Local Authority Building Control)
• Courts and dispute resolution bodies
• HMRC for tax compliance

4.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your personal information may be transferred to the acquiring entity, subject to the same privacy protections.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law:

• Customer Records: 7 years from last service (UK tax and accounting requirements)
• Electrical Certificates: Indefinitely (legal requirement for electrical work)
• Payment Records: 7 years (HMRC requirements)
• Marketing Consent: Until withdrawn, or 3 years of inactivity
• CCTV Footage: 30 days (if applicable at our premises)
• Website Analytics: 26 months (Google Analytics standard)
• Support Communications: 3 years from last contact

6. Your Data Protection Rights

Under UK GDPR, you have the following rights regarding your personal information:

To exercise your rights, please contact us:
Email: privacy@tekspert.co.uk
Post: Data Protection Officer, TekSpert LTD, [Address to be added]
Phone: [Phone number to be added]

We will respond to your request within one month. If your request is complex, we may extend this by two months and will notify you accordingly.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmitted over the internet is encrypted using SSL/TLS technology
• Secure Storage: Personal data is stored on secure servers with restricted access
• Access Controls: Role-based access ensures only authorized personnel can access personal data
• Payment Security: PCI DSS compliant payment processing; we do not store full card details
• Regular Audits: Security practices reviewed and updated regularly
• Staff Training: All employees receive data protection and security training
• Incident Response: Procedures in place for detecting, reporting, and investigating data breaches

While we strive to protect your personal information, no method of transmission over the internet is 100% secure. You are responsible for keeping your account credentials confidential.

8. International Data Transfers

Your personal information is primarily stored and processed within the United Kingdom. In some cases, data may be transferred to and processed in countries outside the UK/EEA where our service providers are located.

When we transfer personal information internationally, we ensure appropriate safeguards are in place, including:

• Transfers to countries with adequacy decisions from the UK government
• Standard Contractual Clauses (SCCs) approved by the ICO
• Binding Corporate Rules for intra-group transfers
• Certification schemes ensuring appropriate data protection levels

You can request information about the safeguards we use for international transfers by contacting us.

9. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you are under 18, please do not provide any personal information through our website or services.

If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information as quickly as possible.

10. Third-Party Links and Services

Our website may contain links to third-party websites, applications, or services (e.g., payment processors, review platforms, social media). We are not responsible for the privacy practices of these third parties.

We encourage you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies only to information collected by TekSpert.

11. Marketing Communications

With your consent, we may send you marketing communications about our services, special offers, and updates:

• Email newsletters and service updates
• SMS messages for promotions (with explicit consent)
• Push notifications through our mobile app (if enabled)

You can opt-out at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Texting "STOP" to any marketing SMS
• Contacting us at privacy@tekspert.co.uk
• Updating your preferences in your account settings

Note: You cannot opt-out of transactional communications related to your service bookings (appointment confirmations, invoices, etc.).

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email if you have an account with us
• Display a prominent notice on our website
• Request your renewed consent where required by law

We encourage you to review this Privacy Policy periodically. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.

13. Complaints and Regulatory Authority

If you have concerns about how we handle your personal information, please contact us first so we can address your concerns.

You have the right to lodge a complaint with the UK's supervisory authority:

14. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

15. Additional Information

CCTV

If we operate CCTV at our business premises, signage will be clearly displayed. CCTV footage is retained for 30 days and is used for security and safety purposes only.

Job Applicants

If you apply for a position with us, we will collect information about your employment history, qualifications, and references. This information is used solely for recruitment purposes and is retained for 6 months after the recruitment process concludes, unless you are hired.

Supplier Information

If you are a supplier or business partner, we collect information necessary for our business relationship, including contact details, payment information, and contractual documentation.