PRIVACY POLICY

EOS Electrical Ltd

Last updated: 2 June 2026

1.  Introduction

EOS Electrical Ltd ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose personal data relating to individuals who visit our website at www.eos-electrical.co.uk or who engage with our services, and sets out your rights in relation to that data.

We process personal data in accordance with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018. Please read this policy carefully to understand our practices regarding your personal data and how we will treat it.

2.  Who We Are

EOS Electrical Ltd is the data controller responsible for the personal data described in this policy. Our details are as follows:

Registered company name: EOS Electrical Ltd

Companies House registration number: 15677910

Registered address: Wittas House, Station Lane, Witney, Oxfordshire, OX28 4BH

ICO registration number: [ICO REGISTRATION NUMBER]

Email: [email protected]

Telephone: 07488 896279

If you have any questions about this Privacy Policy or about the way in which we process your personal data, please contact us using the details set out above.

3.  Personal Data We Collect

Depending on how you interact with us, we may collect and process the following categories of personal data:

• Identity data — your name.
• Contact data — your email address, telephone number, and postal address or property address.
• Enquiry and service data — details of the electrical work you require or have requested, the nature of your enquiry, and any other information you provide when requesting a quote or booking a service.
• Communications data — records of correspondence between us, including emails, SMS messages, and notes made during telephone calls or site visits.
• Technical data — your Internet Protocol (IP) address, browser type and version, time zone setting, operating system and platform, and other technical information relating to the devices and software you use to access our website.
• Usage data — information about how you use our website, including pages visited, time spent on pages, and links clicked.

We do not collect any special categories of personal data (such as data concerning racial or ethnic origin, religious beliefs, health, sexual orientation, or biometric data). We do not process personal data relating to criminal convictions or offences.

4.  How We Collect Your Personal Data

We collect personal data through the following means:

• Direct interactions — when you complete and submit an enquiry or quote request form on our website; when you contact us by telephone, email, or any other means; and when you engage our services, including during site visits and in the course of carrying out electrical work.
• Automated technologies — when you visit our website, we automatically collect technical and usage data through cookies and similar tracking technologies. Further information is provided in Section 11 of this policy.
• Third-party platforms — our website is built and operated in part using a third-party platform (GoHighLevel / LeadConnector). Personal data submitted through forms on our website is processed by this platform on our behalf.

5.  Purposes and Lawful Bases for Processing

We process your personal data only where we have a lawful basis for doing so under Article 6 of the UK GDPR. The purposes for which we process your personal data, and the corresponding lawful basis for each, are set out below.

• Responding to your enquiry and providing a quote
  • Lawful basis: Article 6(1)(f) — Legitimate interests (it is in our legitimate interest to respond to prospective customer enquiries).
• Taking steps at your request prior to entering into a contract
  • Lawful basis: Article 6(1)(b) — Pre-contractual necessity.
• Performing our contract with you, including carrying out the electrical work you have instructed us to undertake
  • Lawful basis: Article 6(1)(b) — Performance of a contract.
• Sending automated transactional communications, including enquiry acknowledgements, booking confirmations, appointment reminders, and job completion follow-ups
  • Lawful basis: Article 6(1)(f) — Legitimate interests (it is in our and your legitimate interest to communicate relevant information about your booking or engagement).
• Maintaining accurate business and financial records and complying with our legal and regulatory obligations, including those arising from our NAPIT registration
  • Lawful basis: Article 6(1)(c) — Legal obligation.
• Analysing and improving the performance and usability of our website
  • Lawful basis: Article 6(1)(f) — Legitimate interests.
• Preventing fraud, protecting our rights, and enforcing our legal claims
  • Lawful basis: Article 6(1)(f) — Legitimate interests.

Where we rely on legitimate interests as our lawful basis, we have assessed the potential impact on your interests and rights and are satisfied that our legitimate interests are not overridden by those rights and freedoms. You have the right to object to processing carried out on the basis of legitimate interests; further information is set out in Section 10 of this policy.

We do not carry out any automated decision-making or profiling that produces legal or similarly significant effects on you.

6.  Automated Communications

Where you submit an enquiry, make a booking, or engage us to carry out work, our systems will automatically send SMS and/or email messages to the contact details you have provided. These communications are transactional in nature and are not marketing communications. They include:

• acknowledgement that your enquiry has been received;
• confirmation of a scheduled appointment or booking;
• a reminder prior to a scheduled visit; and
• a follow-up message upon completion of the work.

These communications are sent on the basis of our legitimate interests in administering our services effectively and ensuring that you are kept informed in relation to your booking or engagement. If you wish to opt out of receiving such communications, please contact us at [email protected]. Please be aware that doing so may affect our ability to administer your booking effectively.

7.  Third-Party Service Providers

We engage third-party service providers to assist us in operating our website and delivering our services. Where these providers process personal data on our behalf, they act as data processors and are bound by contractual obligations to process that data only on our instructions and in a manner consistent with this policy and applicable data protection legislation.

Our current data processors are as follows:

(a)  GoHighLevel Inc. ("HighLevel")

GoHighLevel provides our customer relationship management (CRM) platform, website infrastructure, automated communications system, and enquiry management tools. Personal data processed by GoHighLevel may include your name, email address, telephone number, and enquiry details. GoHighLevel is incorporated in the United States. Please refer to Section 8 regarding international data transfers.

(b)  Google LLC

Google provides Google Tag Manager and Google Analytics, which we use to understand how visitors interact with our website. Google may process technical and usage data, including anonymised or pseudonymised IP addresses. Google is incorporated in the United States. Please refer to Section 8 regarding international data transfers.

We do not sell your personal data to any third party. We do not share your personal data with any other person or organisation except as described in this policy or as required by applicable law or regulatory authority.

8.  International Transfers of Personal Data

Some of the third-party service providers we engage are based outside the United Kingdom. Where we transfer personal data to countries or territories that do not benefit from an adequacy decision under UK GDPR — that is, countries not considered to provide a level of data protection equivalent to that afforded in the United Kingdom — we take steps to ensure that appropriate safeguards are in place.

GoHighLevel and Google are both headquartered in the United States. Transfers to these providers are made subject to appropriate safeguards, including the International Data Transfer Agreement (IDTA) as approved by the Information Commissioner's Office, or Standard Contractual Clauses (SCCs) incorporating UK addenda, as applicable.

If you would like further information about the safeguards in place in respect of international data transfers, please contact us at [email protected].

9.  Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, having regard to applicable legal, accounting, or reporting requirements. The following retention periods apply as a general guide:

• Enquiry data (where no contract is entered into): Retained for up to 12 months from the date of your last contact with us, after which it will be securely deleted or anonymised.
• Customer data (where we have provided services to you): Retained for 7 years from the date on which the services were completed. This period reflects our obligations under HMRC guidance on business record-keeping and the reasonable period within which warranty or liability claims may arise.
• Electrical certificates and NAPIT records: Retained for a minimum of 7 years, or for such longer period as may be required by applicable regulations or our NAPIT registration obligations.
• Website analytics data: Retained in accordance with the retention settings configured within Google Analytics, which we have set to 26 months.

Upon expiry of the applicable retention period, personal data will be securely deleted or, where deletion is not possible, anonymised such that it can no longer be associated with you.

10.  Your Rights

Under the UK GDPR, you have the following rights in relation to your personal data:

(a)  The right to be informed — you have the right to receive clear and transparent information about how we process your personal data. This Privacy Policy fulfils that obligation.

(b)  The right of access — you have the right to request a copy of the personal data we hold about you (commonly referred to as a subject access request or SAR). We will respond to a valid request within one calendar month of receipt.

(c)  The right to rectification — you have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

(d)  The right to erasure — you have the right to request that we delete your personal data in certain circumstances, for example where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent on which processing is based (where applicable).

(e)  The right to restrict processing — you have the right to request that we limit our use of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to our processing.

(f)  The right to data portability — where processing is based on consent or on a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and, where technically feasible, to have it transmitted directly to another data controller.

(g)  The right to object — you have the right to object at any time to the processing of your personal data where we rely on legitimate interests as our lawful basis. We will cease such processing unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.

(h)  Rights in relation to automated decision-making and profiling — as stated in Section 5, we do not carry out automated decision-making or profiling that produces legal or similarly significant effects on you.

To exercise any of the above rights, please contact us in writing at [email protected] or by post to Wittas House, Station Lane, Witney, Oxfordshire, OX28 4BH. We will not charge a fee for handling a data subject request unless the request is manifestly unfounded or excessive. We may need to verify your identity before responding to your request.

11.  Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies. Cookies are small text files placed on your device when you visit a website. They are widely used to enable websites to function correctly, to improve performance, and to provide information to the website operator.

We use the following types of cookies:

(a)  Strictly necessary cookies — these cookies are essential to the operation of our website and cannot be switched off. They enable core functionality such as page navigation and form submission. They do not store any personally identifiable information.

(b)  Analytics cookies — we use Google Analytics, deployed via Google Tag Manager, to collect anonymised data about how visitors interact with our website. This data helps us to understand which pages are visited most frequently, how users navigate through the site, and where improvements can be made. Google Analytics cookies do not identify you personally.

You can control and manage cookies through your browser settings. Most browsers allow you to refuse some or all cookies, or to be notified when a cookie is set. Please note that restricting cookies may affect the functionality of our website.

To opt out of being tracked by Google Analytics across all websites, you may install the Google Analytics Opt-out Browser Add-on, available at: https://tools.google.com/dlpage/gaoptout

For general information about cookies and how to manage them, please visit: www.allaboutcookies.org

12.  Links to Third-Party Websites

Our website may contain links to third-party websites, including our social media profiles on Facebook and Instagram. This Privacy Policy applies solely to personal data collected and processed by EOS Electrical Ltd. We have no control over, and are not responsible for, the privacy practices or content of any third-party websites. We recommend that you read the privacy policy of any website you visit.

13.  Changes to This Privacy Policy

We review this Privacy Policy periodically and may update it from time to time to reflect changes in our practices, the services we provide, applicable legislation, or other factors. Any changes will be published on this page with a revised "Last updated" date at the top of the document. We encourage you to check this page periodically to ensure you are familiar with the most current version.

14.  How to Make a Complaint

If you have any concerns about the way in which we handle your personal data, we would ask that you contact us in the first instance so that we may attempt to resolve the matter. Please contact us at [email protected] or by post to Wittas House, Station Lane, Witney, Oxfordshire, OX28 4BH.

You also have the right to lodge a complaint at any time with the Information Commissioner's Office (ICO), the supervisory authority responsible for data protection in the United Kingdom. The ICO's contact details are:

We would, however, appreciate the opportunity to address your concerns before you approach the ICO, and ask that you contact us in the first instance.