Privacy Policy

1. Who we are

Boilable is operated by Delaney & Salter Ltd ("we", "us", "our"). For data protection law purposes we act as the data controller of personal data collected through this website, unless we state otherwise (for example where we process data only on behalf of another organisation).

Contact for privacy enquiries: use the details on our Contact page, marking your message "Privacy".

2. What personal data we collect

We may collect and process the following categories of information:

• Identity and contact data such as name, email address, phone number, and postal address or postcode when you submit a quote request, servicing or repair request, enquiry, review, or contact us.
• Property and job-related data such as property type, boiler details, tier choices, notes you provide, and reference codes we assign to your request.
• Technical and usage data such as IP address, browser type, device information, and pages visited. This may be collected through cookies and similar technologies (including third-party analytics and advertising tools).
• Communications you send to us (including email content and call notes where applicable).

3. How we use your data and legal bases

We use personal data for purposes including:

• Providing our services — responding to enquiries, generating provisional quotes, arranging surveys, delivering installations, servicing, or repairs. Legal basis: performance of a contract or steps at your request prior to a contract (UK GDPR Article 6(1)(b)), and sometimes legitimate interests (Article 6(1)(f)) in managing our business.
• Customer communications — confirmations, updates, and follow-up related to your request. Legal basis: contract and/or legitimate interests.
• Reviews and testimonials — publishing approved reviews where you have submitted them. Legal basis: consent where required, and/or legitimate interests in showcasing genuine customer feedback.
• Website operation and improvement — security, debugging, usage statistics, and improving the site. Legal basis: legitimate interests and, where required, your consent for non-essential cookies or similar technologies.
• Marketing and advertising measurement — for example Meta (Facebook) Pixel to understand ad performance and build audiences. Legal basis: consent and/or legitimate interests, depending on the mechanism and applicable guidance; you can use browser controls and ad platform settings to limit tracking.
• Legal and compliance — record-keeping, fraud prevention, and complying with law. Legal basis: legal obligation and/or legitimate interests.

4. Cookies and similar technologies

Our site may use cookies and similar technologies to remember preferences, keep the site secure, and measure traffic and advertising effectiveness. Third-party scripts (such as Meta Pixel) may set or read cookies subject to their own policies. You can manage cookies through your browser settings.

5. Who we share data with

We may share personal data with service providers who process it on our instructions ("processors"), including for example:

• Hosting and infrastructure (e.g. Vercel)
• Database and backend services (e.g. Supabase)
• Email delivery (e.g. Resend)
• Messaging or notification providers where configured (e.g. Twilio, Pushover)
• Analytics and advertising platforms (e.g. Meta)

We require processors to protect your data appropriately. Some providers may process data outside the UK; where they do, we aim to ensure appropriate safeguards (such as UK-approved standard contractual clauses) apply as required by law.

6. How long we keep data

We retain personal data only as long as necessary for the purposes above, including legal, accounting, and warranty requirements. Retention periods vary by data type; quote and customer records are typically kept for a number of years after last contact unless a shorter or longer period is required by law or legitimate business need.

7. Your rights (UK GDPR)

Depending on circumstances, you may have the right to:

• Access a copy of your personal data
• Rectify inaccurate data
• Erasure ("right to be forgotten") in certain cases
• Restrict or object to processing in certain cases
• Data portability for data you provided, where processing is automated and based on consent or contract
• Withdraw consent at any time, where we rely on consent
• Lodge a complaint with the ICO (see below)

To exercise these rights, contact us via the Contact page. We may need to verify your identity before responding.

8. Complaints

If you are unhappy with how we use personal data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.

9. Children

Our services are directed at adults. We do not knowingly collect personal data from children.

10. Changes

We may update this policy from time to time. The "Last updated" date at the top will change when we do; continued use of the site after changes constitutes acceptance where permitted by law.