Privacy Policy

Universal Airflow Ltd ("we") is the data controller for personal information submitted through this website. Contact: info@universalairflow.co.uk.

Registered company number: 16617342. Registered office: 3rd Floor, 86-90 Paul Street, London, England, United Kingdom, EC2A 4NE.

What we collect

When you contact us for a quote by phone or email we collect the details you choose to give us, such as your name, email address, telephone number, property address or location, and information about your project. We also hold records of enquiries previously submitted through our online form, including whether you agreed to receive marketing.

We also keep correspondence about your enquiry, such as emails and notes of calls, and the date we last contacted you. Our hosting providers process limited technical information, such as your IP address, browser details and request data, to deliver and protect the website.

Why we use it and our lawful bases

Steps before a contract: to respond to your quotation request and prepare your quote.

Performance of a contract: to plan, carry out and support an agreed project, including warranties and aftercare.

Legal obligation: to keep records we are required to keep by law, such as tax, accounting and refrigerant-handling records.

Legitimate interests: to keep the website secure, follow up enquiries you have made, and handle questions, complaints or disputes. We balance these interests against your rights.

Consent: to send you optional marketing, only if you have ticked the marketing box.

Marketing

The marketing box is optional and unticked by default; your quote does not depend on it. You can withdraw consent or unsubscribe at any time by emailing info@universalairflow.co.uk or using the unsubscribe option in any marketing message. You also have an absolute right to object to direct marketing, and we will stop once you ask.

We keep a record of when consent was given or withdrawn, and a short suppression record (such as your email address) so we do not contact you again after you opt out. These records may be kept separately from your enquiry for as long as needed to respect your choice.

Where it is stored

Enquiries are stored securely with our website hosting provider in data centres in the European Economic Area (Ireland). Access is restricted to authorised administrators using password and two-factor sign-in. Information is encrypted in transit and at rest.

How long we keep it

Enquiries that do not proceed, including unsuccessful enquiries and ones that are never followed up, are deleted automatically two years after our last recorded contact with you.

Records for completed projects are reviewed six years after completion rather than deleted automatically. At that review we decide whether there is still a reason to keep them, for example warranties, disputes or legal obligations, and delete them if not. Where an enquiry becomes an active project, or we must keep records for a specific legal or business reason, we keep them only for as long as that reason applies. We do not keep records indefinitely without justification.

Who processes it

Our website and enquiry records are provided by Lovable, with enquiry records stored on Supabase infrastructure running on Amazon Web Services in Ireland. Emails you send us are received through our business email service. These providers process information on our behalf to provide their services.

International transfers

Your enquiry data is stored in the EEA (Ireland), and transfers from the UK to the EEA are covered by UK adequacy regulations. Some of our providers are based in, or use support staff or sub-processors in, countries outside the UK and EEA, such as the United States. Where personal information is accessed or transferred outside the UK or EEA, we expect it to be protected by appropriate safeguards recognised under UK data protection law. You can contact us for more information about these safeguards.

Cookies and browser storage

The public website does not use non-essential cookies, advertising trackers or visitor analytics. We do not use Google Analytics or Meta Pixel, and our hosting platform’s visitor analytics feature is switched off. We have not added a cookie consent banner because no non-essential browser storage or tracking is used.

Necessary browser storage may be used when an authorised administrator signs in, to maintain a secure session and support authentication, including two-factor sign-in. This storage is not used to track visitors or for advertising.

Website resources and external services

Our Lato fonts and website images are served through our website’s hosting and asset-delivery services, rather than Google Fonts. Hosting providers necessarily receive technical information such as your IP address and request details to deliver the website and protect it. The website does not currently accept online quotation submissions.

Our Instagram link opens Instagram only if you choose to follow it. Instagram then processes information under its own privacy policy; we do not embed Instagram content or a Meta tracking pixel on this website.

Your rights

You have the right to: access a copy of your information; have inaccurate information corrected; have your information erased; restrict how we use it; object to our use of it, including an absolute right to object to direct marketing; receive information you gave us in a portable format, where processing is based on consent or contract and carried out automatically; and withdraw consent at any time, without affecting processing before withdrawal.

To make a request, email info@universalairflow.co.uk. We will respond within one month, and there is normally no charge. Some rights depend on the circumstances, for example where we must keep records by law.

If you are unhappy with how we handle your information, please contact us first. You can also complain to the Information Commissioner’s Office at ico.org.uk.