GDPR Policy

1. Introduction

Edy Electrical (“we”, “us”, “our”) is committed to protecting personal data and complying fully with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This GDPR Policy explains how we ensure personal data is collected, processed, stored, and protected lawfully and transparently.

2. Scope of This Policy

This policy applies to all personal data processed by Edy Electrical, including data collected through:

  • Our website

  • Contact forms and quote requests

  • Email, phone, or written communications

  • Service delivery for residential, commercial, and industrial clients

3. Personal Data We Process

We may process the following types of personal data:

  • Name and contact details (email, phone number)

  • Address or site location related to services

  • Communication details and service requests

  • Technical data such as IP address and website usage

We only collect data that is relevant and necessary for legitimate business purposes.

4. Lawful Basis for Processing

We process personal data under one or more of the following lawful bases:

  • Consent – when you voluntarily provide your information

  • Contractual necessity – to deliver requested services

  • Legal obligation – to comply with regulatory requirements

  • Legitimate interests – to operate and improve our services responsibly

5. How We Use Personal Data

Personal data is processed for the following purposes:

  • Responding to enquiries and providing quotes

  • Delivering electrical services

  • Managing appointments and communications

  • Ensuring safety, compliance, and service quality

  • Improving our website and customer experience

We do not use personal data for purposes unrelated to our services.

6. Data Storage & Security

Edy Electrical implements appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or loss. Access to personal data is limited strictly to authorised personnel.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or regulatory obligations. Once no longer required, data is securely deleted or anonymised.

8. Data Subject Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction of inaccurate or incomplete data

  • Request deletion of your data

  • Restrict or object to data processing

  • Withdraw consent at any time

Requests relating to these rights will be handled promptly and in accordance with legal requirements.

9. Data Sharing

We do not sell or trade personal data. Data may only be shared with:

  • Trusted service providers involved in service delivery

  • Legal or regulatory authorities when required by law

All third parties are required to process data securely and lawfully.

10. Data Breaches

In the event of a data breach that poses a risk to individuals’ rights and freedoms, Edy Electrical will take immediate action, investigate the incident, and notify relevant authorities and affected individuals where required by law.

11. Policy Updates

This GDPR Policy may be updated periodically to reflect changes in legislation or our data processing practices. The latest version will always be available on our website.

12. Contact

If you have any questions regarding this GDPR Policy or how your personal data is handled, please contact Edy Electrical directly.