Privacy Policy

Last updated: October 2026

1. Who we are

This website is operated by MM Heating & Plumbing Ltd, trading as MM Heating, Plumbing & Electrical ("we", "us", "our"). We are the data controller for the personal information described in this policy.

892 London Road, Thornton Heath, Croydon CR7 7PB
Telephone: 020 8684 0333
Email: info@mm-heating.co.uk

2. Information we collect

Depending on how you deal with us, we may collect:

• Enquiries and quotes: your name, phone number, email address, the service you need and any message you send through our contact form, by phone, email or WhatsApp.
• Job details: your address, property and boiler or system details, answers you give to our Boiler Sizing Tool, and information needed to carry out work, issue certificates and take payment.
• Website usage: technical information such as your IP address, browser type, device and the pages you visit, collected through cookies and similar technologies.
• Security logs: our security tools record IP addresses and access attempts to protect the website.

3. How we use your information and why

• To respond to your enquiry and provide quotes (to take steps at your request before a contract, or our legitimate interest in running our business).
• To carry out and manage the work you have booked, including installations, servicing, repairs, certificates and aftercare (performance of a contract).
• To meet legal and regulatory duties, such as keeping gas and electrical safety records and accounting records (legal obligation).
• To register guarantees or warranties with manufacturers where you ask us to (performance of a contract).
• To keep our website secure, understand how it is used and improve it (legitimate interests, or your consent where required for non-essential cookies).
• To send reminders or marketing messages only where you have asked for them or given consent. You can withdraw consent at any time.

4. Who we share it with

We do not sell your personal information. We may share it with:

• our engineers and trusted subcontractors who carry out your job;
• manufacturers (for example Worcester Bosch) to register guarantees, and certification bodies such as Gas Safe Register, NAPIT and building control, where notification is required;
• Novuna Consumer Finance, if you choose to apply for finance. Novuna acts as a separate controller and has its own privacy notice;
• service providers who help us run the website and our business, such as hosting, security, analytics, email and messaging providers;
• professional advisers, insurers and the authorities where we are required to by law.

5. Third-party content on our website

Our pages include content from other providers, which may set their own cookies or receive your IP address when the content loads: Google Maps (office map), Google reviews (shown through a reviews widget), Google Fonts, Google Site Kit and analytics, and WhatsApp (when you click to chat). Please see those providers' own privacy policies for details.

6. Cookies

Cookies are small files stored on your device. We use essential cookies that the website needs to work and, where applicable, analytics cookies to understand how visitors use the site. You can control or delete cookies in your browser settings. Blocking some cookies may affect how parts of the site work.

7. How long we keep your information

We keep personal information only for as long as necessary for the purposes above. Enquiries that do not lead to work are kept for a limited period. Records of work, safety certificates, invoices and guarantees are kept for the periods required by law and for as long as needed to support guarantees and aftercare.

8. Keeping your information safe

We use appropriate technical and organisational measures to protect your information, including secure hosting and website security monitoring. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

9. International transfers

Some of our service providers, such as Google, may process information outside the UK. Where this happens, we rely on appropriate safeguards required by UK data protection law.

10. Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• ask us to erase your information in certain circumstances;
• ask us to restrict, or object to, our use of your information;
• ask for your information in a portable format;
• withdraw consent at any time where we rely on it.

To use any of these rights, contact us using the details above. We will normally respond within one month.

11. Complaints

If you are unhappy with how we have handled your information, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk, telephone 0303 123 1113.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.