Privacy Policy

1. Who We Are

AsbestosCheck (“we”, “us”, “our”) operates the website asbestos-check.co.uk. We are a UK-based directory service that helps property owners find HSE-licensed asbestos removal contractors. Our ICO registration number is C1880564.

2. What Data We Collect

We collect the following personal data:

• Enquiry form data: Name, email, phone number, property postcode, property type, work type, urgency, and project description when you submit an enquiry to a contractor.
• Claim form data: Name, job title, email, and phone number when a contractor claims their listing.
• Contractor business data: Company name, registered address, HSE licence details, phone number, website, and Companies House data. This data is sourced from public registers (see our Data Sources page).
• Technical data: IP address, browser type, and pages visited via server logs and analytics.

3. How We Use Your Data

• To connect property owners with licensed asbestos contractors via our enquiry system.
• To verify and manage contractor listings on the platform.
• To send transactional emails (enquiry notifications, claim confirmations).
• To process subscription payments via Stripe for contractor premium listings.
• To improve our website, detect abuse, and maintain security.

4. Legal Basis for Processing

• Legitimate interests: Processing contractor business data from public registers to operate our directory service.
• Consent: When you voluntarily submit an enquiry or claim form.
• Contract: Processing payment data for contractor subscription services.

5. Data Sharing

We share your data with:

• Contractors: Enquiry details are shared with the specific contractor you enquire about. Your details are never shared with other contractors without your consent.
• Service providers: Supabase (database hosting), Stripe (payment processing), Resend (email delivery), and Vercel (website hosting). All are GDPR-compliant.

We never sell your personal data to third parties.

6. Data Retention

• Enquiry data is retained for 24 months, then anonymised.
• Contractor listing data is retained for as long as the contractor holds an active HSE licence.
• Account data is retained until the contractor requests deletion.
• Server logs are retained for 90 days.

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (right to be forgotten).
• Object to processing based on legitimate interests.
• Data portability — receive your data in a machine-readable format.
• Lodge a complaint with the ICO (ico.org.uk).

To exercise any of these rights, contact us at privacy@asbestos-check.co.uk.

8. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), row-level security on our database, rate limiting on form submissions, and regular security reviews.

9. Contact

For privacy-related queries, contact privacy@asbestos-check.co.uk.