Privacy Policy
Last updated: 22 February 2026
1. Who We Are
AsbestosCheck (“we”, “us”, “our”) operates the website asbestos-check.co.uk. We are a UK-based directory service that helps property owners find HSE-licensed asbestos removal contractors. Our ICO registration number is C1880564.
2. What Data We Collect
We collect the following personal data:
- Enquiry form data: Name, email, phone number, property postcode, property type, work type, urgency, and project description when you submit an enquiry to a contractor.
- Claim form data: Name, job title, email, and phone number when a contractor claims their listing.
- Contractor business data: Company name, registered address, HSE licence details, phone number, website, and Companies House data. This data is sourced from public registers (see our Data Sources page).
- Technical data: IP address, browser type, and pages visited via server logs and analytics.
3. How We Use Your Data
- To connect property owners with licensed asbestos contractors via our enquiry system.
- To verify and manage contractor listings on the platform.
- To send transactional emails (enquiry notifications, claim confirmations).
- To process subscription payments via Stripe for contractor premium listings.
- To improve our website, detect abuse, and maintain security.
4. Legal Basis for Processing
- Legitimate interests: Processing contractor business data from public registers to operate our directory service.
- Consent: When you voluntarily submit an enquiry or claim form.
- Contract: Processing payment data for contractor subscription services.
5. Data Sharing
We share your data with:
- Contractors: Enquiry details are shared with the specific contractor you enquire about. Your details are never shared with other contractors without your consent.
- Service providers: Supabase (database hosting), Stripe (payment processing), Resend (email delivery), and Vercel (website hosting). All are GDPR-compliant.
We never sell your personal data to third parties.
6. Data Retention
- Enquiry data is retained for 24 months, then anonymised.
- Contractor listing data is retained for as long as the contractor holds an active HSE licence.
- Account data is retained until the contractor requests deletion.
- Server logs are retained for 90 days.
7. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data (right to be forgotten).
- Object to processing based on legitimate interests.
- Data portability — receive your data in a machine-readable format.
- Lodge a complaint with the ICO (ico.org.uk).
To exercise any of these rights, contact us at privacy@asbestos-check.co.uk.
8. Security
We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), row-level security on our database, rate limiting on form submissions, and regular security reviews.
9. Contact
For privacy-related queries, contact privacy@asbestos-check.co.uk.