Last updated: 13 August 2026.
This Privacy Policy explains how Plumbstar Ltd (“Plumbstar”, “we”, “us”) collects, uses and protects your personal data when you visit www.plumbstar.co.uk or contact us about our services. We handle data in line with the UK GDPR and the Data Protection Act 2018.
Who we are
Plumbstar Ltd is a company registered in England and Wales, company number 11263677, registered office 21 Finglesham Court, Maidstone, Kent, ME15 7HZ. We are Gas Safe registered under number 602922. For data protection matters our data controller contact is info@plumbstar.co.uk.
What we collect
- Contact details you give us via the website form, email, phone or WhatsApp — name, address, postcode, phone number, email address, and any details of the job you describe.
- Booking details if you use the LatePoint booking area on this site — appointment date, service selected, contact details and any notes.
- Technical data collected automatically when you visit the site: IP address, browser type, pages viewed, referring URL, and session length. Handled via server logs and standard analytics cookies (see the Cookie Policy).
- Job records we hold as part of servicing your property — Gas Safe notification records, Benchmark logs, quote and invoice history, and photos of work carried out.
How we use it
- To respond to your enquiry, provide a quote and carry out the work you asked us for — lawful basis: contract or steps to enter into a contract.
- To notify Gas Safe of work carried out and register manufacturer warranties on your behalf — lawful basis: legal obligation and contract.
- To keep records for tax, warranty and complaint-handling purposes for the periods required by UK law — lawful basis: legal obligation.
- To improve the website and understand how visitors use it — lawful basis: legitimate interests.
Who we share it with
We only share personal data where we have a lawful reason to do so:
- Gas Safe Register — installation notifications where the law requires them.
- Boiler manufacturers (Vaillant, Worcester Bosch, Ideal and equivalent) — to register your warranty.
- Our hosting provider (One.com), form-handler (SureForms), booking plugin (LatePoint), payment processors and email provider — strictly as data processors on our instructions.
- HMRC and our accountants — for tax and accounting records.
- Legal, insurance or regulatory bodies — if we are required to disclose data by law.
We do not sell your data or share it for third-party marketing.
How long we keep it
- Enquiries that do not lead to work: up to 12 months.
- Customer records and job history: 6 years, to meet HMRC and warranty periods.
- Gas Safe notifications and Benchmark logs: as required by Gas Safe rules.
- Website analytics: aggregated after 26 months.
Your rights
Under UK GDPR you can ask us to:
- Confirm what data we hold about you and provide a copy.
- Correct data that is inaccurate.
- Delete data where we no longer need it and are not required to keep it.
- Restrict or object to certain uses of your data.
- Withdraw consent where we relied on consent.
Email info@plumbstar.co.uk to make a request. We will respond within one calendar month. If you are not happy with how we handle your data you can complain to the Information Commissioner's Office (ico.org.uk).
Security
The site is served over HTTPS with HSTS, and access to admin systems is restricted and logged. Job records are held on our internal systems with backup, and paper records are stored securely at our registered office.
Changes
We may update this policy from time to time. The date at the top of the page shows the last review.