Privacy Policy

1. Introduction

Alban Holloway Limited is committed to protecting your privacy. This policy explains how we collect, use and safeguard personal data when you visit albanholloway.co.uk or interact with our services. It has been prepared in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

2. Who We Are

Alban Holloway Limited is a property maintenance, cleaning and compliance services company based in London. For the purposes of the UK GDPR we are the data controller of the personal data described below.

3. What Personal Data We Collect

• Identity Data: name, company name.
• Contact Data: email address, phone number, postal address.
• Enquiry Data: content of messages you submit through forms, property details (units, type, EPC rating) provided for quotes.
• Technical Data: IP address (anonymised by GA4), browser type, device, operating system, referring URL, pages visited.
• Usage Data: aggregated interactions, heatmaps and session replays (Microsoft Clarity, in Strict mode with PII masking).

4. How We Collect Your Personal Data

Direct Interactions

When you fill in a contact form, request a lead-magnet guide, use the EPC calculator, or contact us by email or phone.

Automated Technologies

When you browse the site we (and our third-party processors) may set cookies and similar technologies. Analytics tools are loaded only after you grant consent via our cookie banner. See our Cookie Policy for details.

5. How We Use Your Personal Data & Lawful Basis

6. Third-Party Processors

We share limited personal data with the following processors, under written data processing agreements:

• Hostinger International Ltd — website hosting and email delivery (EU/UK servers).
• Google LLC — Google Analytics 4 (USA). Data transferred under the UK International Data Transfer Addendum and EU Standard Contractual Clauses (SCCs). IP anonymisation enabled.
• Microsoft Corporation — Microsoft Clarity (USA). Data transferred under the UK IDTA and EU SCCs. Strict mode masks form inputs and personal data before transmission.

7. Data Retention

• Form submissions and enquiries: retained for up to 24 months for follow-up and quality assurance, then deleted.
• Customer / accounting records: retained for 6 years to satisfy HMRC obligations.
• Google Analytics 4: user-level data retained for 14 months (GA4 default), then automatically deleted by Google.
• Microsoft Clarity: session recordings retained for approximately 3 months, then automatically deleted.
• Marketing consent records: retained while consent is active and for 2 years after withdrawal, as proof of compliance.

8. Data Security

We apply appropriate technical and organisational measures including TLS encryption in transit, HTTPS-only delivery, HSTS, strict Content Security Policy, role-based access to forms data, and secure off-site backups. Access to your personal data is limited to staff and contractors who need it to perform their duties.

9. Your Legal Rights

Under the UK GDPR you have the right to:

• be informed about how we use your data;
• access a copy of the personal data we hold about you;
• request rectification of inaccurate or incomplete data;
• request erasure of your personal data ("right to be forgotten");
• restrict or object to processing in certain circumstances;
• data portability — receive your data in a structured, machine-readable format;
• withdraw consent at any time where consent is the lawful basis.

To exercise any of these rights, contact info@albanholloway.co.uk. We will respond within one month.

10. Cookies

Detailed information on cookies and tracking technologies is in our Cookie Policy.

11. Changes to This Privacy Policy

We may update this policy from time to time. Significant changes will be highlighted on this page. Please review periodically.

12. How to Complain

If you have concerns about how we handle your personal data, please contact us first at info@albanholloway.co.uk.