Privacy policy

1Who is responsible for your information

EICR Remedials is a trading name of Smart Rise Build Ltd, company number 12181941, registered office 27 Mortimer Street, London W1T 3BL. We are the data controller for the personal information described here.

For anything about your data, write to kyri@eicrremedials.co.uk or call 07809 259687.

2What we collect

• Contact details — name, email address, phone number, and the company you work for if you book on a trade account.
• Property details — the address, the condition report you send us, photographs of the board and the installation, and our own test results and certificates.
• Tenant details — a first name and a phone number, where we need them to arrange access. We ask for the minimum that lets us get in the door.
• Payment details — the amount, the date and the reference. Card numbers are handled by Stripe and never reach us.
• Correspondence — emails, WhatsApp messages and call notes about a job.

We do not ask for special category data. If a tenant's health or vulnerability affects access, tell us only what we need to attend safely and appropriately.

3Why we hold it, and our lawful basis

What for	Lawful basis
Quoting, booking and carrying out the work	Performance of a contract with you, or steps taken at your request before entering into one
Arranging access with a tenant	Our legitimate interest, and the landlord's, in getting the property inspected and made safe
Issuing certificates and notifying work to building control	Legal obligation under electrical safety and building regulations
Invoicing, VAT and accounting records	Legal obligation under tax law
Answering questions, complaints and warranty claims	Our legitimate interest in defending and improving the service
Sending you anything promotional	Your consent, which you can withdraw at any time

Where we rely on legitimate interests, we have considered whether it is fair to you, and you can object — see section 7.

4Who sees it

We do not sell personal information and we do not share it for anyone else's marketing. It reaches these organisations because the job cannot be done without them:

Who	What for
Our electrical contractor	Carrying out and certifying the work, and registering notifiable work with its competent person scheme
Stripe Payments Europe Ltd	Taking card payments and issuing receipts and invoices
Netlify	Hosting this website
Google (Workspace and Fonts)	Our email, and the typeface this site loads — which means Google receives your IP address when a page loads
Xero	Our accounting records
Our accountant, insurer or legal advisers	Only where a claim, an audit or a legal duty requires it
A local authority or your managing agent	Only where you ask us to send them the report, or the law requires it

Some of these providers process data outside the UK. Where they do, the transfer is covered by UK adequacy regulations or by the International Data Transfer Agreement or Addendum.

5If you are a tenant

Your landlord or their agent gives us your name and number so we can arrange a visit. We use it for that and for the safety record the law requires, and nothing else. We do not add tenants to any mailing list. You have all the rights in section 7, and you can exercise them with us directly rather than going through your landlord.

6How long we keep it

• Certificates, test results and job records — at least six years, and usually for the life of the installation record, because a condition report is valid for five years and may be relied on long after.
• Invoices and payment records — six years after the end of the accounting period, as tax law requires.
• Tenant contact details — deleted within 12 months of the job finishing, unless a complaint or claim is open.
• Quotes that never became jobs — 12 months.
• Marketing consent records — until you withdraw consent, and then a note that you did.

7Your rights

Under UK data protection law you can ask us to give you a copy of what we hold, correct anything wrong, delete it where we no longer need it, restrict what we do with it, or hand it to another provider in a usable format. You can object to processing we base on legitimate interests, and you can withdraw consent to marketing at any time.

Ask by email or phone. We answer within one month and there is no charge. Note that we cannot delete a certificate or a safety record we are required to keep.

If you are unhappy with how we have handled your information, tell us first and we will try to put it right. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

8Cookies and tracking

Two things still involve another company when you use the site. Loading a page fetches our typeface from Google Fonts, which tells Google your IP address. Clicking through to pay takes you to Stripe's own checkout, where Stripe sets the cookies it needs to process the payment and prevent fraud — its notice is at stripe.com/privacy. Messaging us on WhatsApp is covered by WhatsApp's own terms.

9How we look after it

Accounts that hold customer information are protected with strong passwords and two-factor authentication. Job photographs and reports are kept in business accounts, not on personal devices. Access is limited to the people working on your job. We do not store card details anywhere, at any time.

10Changes to this policy

If we change how we handle personal information we will update this page and change the version and date at the top. Material changes affecting existing customers will be sent by email.