This notice explains how Bristol & Bath Exterior Solutions (“BBES”, “we”) handles personal data, in line with the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR) and the Digital Markets, Competition and Consumers Act 2024.
Bristol & Bath Exterior Solutions, sole trader, trading from Unit B, Charlton Road, Keynsham, Bristol, BS31 2EU. Phone 07763 741067. Email enquiries@bristolandbathexteriorsolutions.co.uk. ICO registration: pending registration. We are the data controller for personal data we collect on this site and through our work.
| Category | Examples | Source |
|---|---|---|
| Contact | Name, address, email, phone | You, when you ask for a quote or book |
| Property | Address, property type, photos of the area to clean | You, in your enquiry |
| Job records | Service done, date, price, payment method | Created by us |
| Payment | Bank transfer reference, card payment confirmation. We do not see or store your full card number. | Your bank / payment processor |
| Reviews | Name and review text you choose to publish | You / the platform |
| Device | IP, browser, pages visited, device type | Cookies (with consent â Section 7) |
We do not knowingly collect data from anyone under 16.
| Purpose | Lawful basis |
|---|---|
| Respond to your enquiry, do the job, take payment | Contract â Art. 6(1)(b) |
| HMRC tax records, accident records | Legal obligation â Art. 6(1)(c) |
| Follow-up email after a job (review invite) | Legitimate interests â Art. 6(1)(f). You can object. |
| Marketing to existing customers about similar services | PECR Reg 22(3) soft opt-in. Unsubscribe in every email. |
| Marketing to corporate subscribers (Ltd, LLP, schools, NHS, councils) | PECR Reg 22(2) â corporate-subscriber rule. LIA on file, available on request. |
| Site analytics (GA4, Microsoft Clarity) | Consent â Art. 6(1)(a). See Section 7. |
| Fraud prevention, defending legal claims | Legitimate interests â Art. 6(1)(f) |
We do not sell your data. We do not use it for purposes incompatible with the ones we collected it for.
All processors are bound by an Art. 28 Data Processing Agreement. We do not transfer data outside the UK or EEA without an adequacy decision or equivalent safeguard.
| Record | Retention |
|---|---|
| Quote enquiries that did not become jobs | 12 months from last contact |
| Customer job records | 7 years (HMRC) |
| Accident / incident reports | 7 years |
| Reviews you posted | Indefinite, or until you ask us to remove |
| Marketing email history (existing customer) | Until unsubscribe + 12 months |
| Marketing history (corporate prospect) | 24 months from last engagement |
| Website analytics (GA4) | 14 months |
You have the right to access, correct, erase, restrict, port, object, withdraw consent, and complain to the ICO. Email us with subject “Data subject request”. We respond inside one calendar month.
ICO: ico.org.uk/concerns · 0303 123 1113.
PECR requires consent before we set non-essential cookies. Our banner appears on first visit with a clear Accept all / Reject non-essential / Customise choice (no pre-ticked boxes). You can change it any time via the Cookie Settings link in the footer.
| Cookie | Type | Purpose | Lifetime |
|---|---|---|---|
| bbes_consent_v2 | Essential | Stores your cookie choice | 12 months |
| _ga, _ga_* | Analytics (consent) | Google Analytics 4 â anonymised IP | 13 months |
| _clck, _clsk, MUID | Analytics (consent) | Microsoft Clarity heatmaps | 12 months |
Full detail in our Cookie Policy.
HTTPS sitewide, HSTS preload, Content-Security-Policy, UK / EEA hosting only. Access to records is limited. Serious breaches reported to the ICO inside 72 hours per UK GDPR Art. 33.
All testimonials and reviews on this site are real, written by genuine customers. We do not publish fake reviews, incentivised reviews labelled as organic, or AI-generated reviews. All before / after images are from real BBES jobs. All claims about insurance, accreditations, response times, guarantees and pricing are accurate as at the date of the page they appear on.
The current version lives at /legal-privacy. Material changes are flagged on the site for at least 30 days.