Alba Heat & Power (“we”, “us”, “our”) is committed to protecting personal data collected via our website https://albaheatandpower.co.uk/. We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), and applicable Scottish law.

This policy explains how we use personal information, how we protect it, and your rights regarding it.

Alba Heat & Power

Registered in Scotland

2 Woodgate Way North, Glenrothes KY7 4PE

Email: enquiries@albaheatandpower.co.uk

We are the Data Controller for personal data processed on this website.

a) Personal Data You Provide

• Contact details: name, email, telephone number, address when you contact us or request services.
• Business information: your company name, job role, business sector if relevant.
• Project-specific information: details you submit via forms or email regarding heating or power solutions.

b) Usage Data

• Technical data: IP address, device type, browser, operating system.
• Usage data: pages visited, time and date of visit, referring website, and click-through paths.

c) Cookies & Tracking

We use cookies and similar technologies (see separate Cookie Policy) for site functionality, analytics, and performance.

We will not sell your data. We may share data when necessary with:

• Service providers (e.g., IT hosting, email systems) under contract.
• Professional advisors (legal, accounting) when required.
• When required by law (e.g. authorities, court orders). With your explicit consent.

We only share the minimum necessary data.

Our systems and service providers are based in the UK/EEA. If we transfer data outside these regions, we’ll ensure appropriate safeguards such as UK adequacy decisions, Model Clauses, or other lawful mechanisms.

We keep your data only as long as necessary. For enquiries or service delivery, we retain records for up to 7 years for legal/tax and service history. We delete or anonymise data no longer needed.

Under UK GDPR, you have rights including:

• Access your personal data.
• Correct inaccuracies.
• Erase data in certain cases (“right to be forgotten”).
• Restrict or object to processing (e.g., for direct marketing).
• Request data portability.
• Withdraw consent at any time (where processing relies on consent).
• Lodge a complaint with the UK Information Commissioner’s Office (ICO).

To exercise rights, contact us at enquiries@albaheatandpower.co.uk. We aim to respond within 1 month (or two if complex).

We use appropriate technical and organisational measures to safeguard your data including secure connections (HTTPS), data encryption, access controls, and staff training. All third-party providers comply with GDPR.

Our services are not directed to children under 16. We do not deliberately collect their personal data. If you believe we have inadvertently done so, please contact us and we will remove it.

Please refer to our Cookie Policy for details on the cookies we use, what they do, and how to manage them.

We may update this policy occasionally. We publish the date of revision at the top. If significant, we will notify you by email or a website notice.

If you have questions, wish to exercise your rights, or want to complain, please contact: Data Protection Officer

Alba Heat & Power

Email: enquiries@albaheatandpower.co.uk

Phone: 01592 596 789