Legal
Eagle Fire Solutions Ltd ("Eagle Fire", "we", "us", or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website at eaglefire.co.uk (the "Website") or engage with us in connection with our fire door installation, inspection, maintenance, and compliance services.
We act as the data controller for the personal data we process. This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018). Please read this policy carefully. If you do not agree with its terms, please do not use our Website or services.
Company Name: Eagle Fire Solutions Ltd
Company Number: 16760806
Registered Office: Unit 6, Richardson Street, Stockport, SK1 3JL
Registered Country: England and Wales
Website: eaglefire.co.uk
Data Controller Contact: admin@eaglefire.co.uk
If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have a concern about how we handle your personal data, please contact us at the email address above. We will aim to respond to all requests within one calendar month.
We collect personal data in the following ways:
When you contact us by email, telephone or another available contact method, or engage with us about our services, we may collect:
When you visit our Website, we automatically collect certain technical and usage data, including:
This data is collected via cookies and similar tracking technologies, including Google Tag Manager and analytics tools. See Section 5 (Cookies) for full details.
We may receive information about you from third parties such as referral partners, procurement platforms, or publicly available sources (for example, Companies House or LinkedIn) in the course of identifying or verifying potential business contacts. We will only use such information in accordance with this policy.
We do not intentionally collect or process special category data (such as health information, racial or ethnic origin, religious beliefs, or biometric data) unless strictly necessary and with your explicit consent. If you believe you have shared such data with us, please contact us immediately.
We process your personal data only where we have a lawful basis to do so under UK GDPR Article 6. The table below sets out our purposes and the corresponding legal bases:
| Purpose | Legal Basis (UK GDPR Art. 6) |
|---|---|
| Responding to your enquiry or service question | Art. 6(1)(b) — Pre-contractual steps / Art. 6(1)(f) — Legitimate interests |
| Providing fire door installation, inspection, maintenance, or compliance survey services | Art. 6(1)(b) — Performance of a contract |
| Maintaining records required to provide contracted services and meet legal obligations | Art. 6(1)(b) — Performance of a contract / Art. 6(1)(c) — Legal obligation |
| Sending service updates, job completion reports, and compliance reminders | Art. 6(1)(f) — Legitimate interests |
| Complying with legal obligations (e.g. health and safety records, fire safety legislation) | Art. 6(1)(c) — Legal obligation |
| Improving our Website and understanding how visitors use it | Art. 6(1)(f) — Legitimate interests |
| Sending marketing communications about our services (where you have opted in) | Art. 6(1)(a) — Consent |
| Preventing fraud, protecting our business, and enforcing our legal rights | Art. 6(1)(f) — Legitimate interests |
| Responding to legal claims, regulatory investigations, or court orders | Art. 6(1)(c) — Legal obligation / Art. 6(1)(f) — Legitimate interests |
Where we rely on legitimate interests as our legal basis, we have assessed that our interests are not overridden by your rights and freedoms. Our legitimate interests include: operating and improving our business, maintaining client relationships, protecting our legal rights, and preventing fraud. You have the right to object to processing based on legitimate interests — see Section 10 (Your Rights).
We may send you marketing communications about our fire door services, compliance updates, or industry news where you have given us your explicit consent to do so, or where we have an existing business relationship with you and you have not opted out.
You can opt out of marketing communications at any time by:
Opting out of marketing will not affect our ability to send you transactional or service-related communications (such as job completion reports or compliance reminders) that are necessary for the performance of our contract with you.
Our Website uses cookies and similar tracking technologies. A cookie is a small text file placed on your device when you visit a website. Cookies help us provide a better experience and understand how our Website is used.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Required for the Website to function, including session management, security, and form submissions. No personal data is shared with third parties. | No |
| Analytics / Performance | Used to understand how visitors interact with our Website (pages visited, time on site, traffic sources). Data is aggregated and anonymised where possible. | Yes |
| Functional | Used to remember your preferences and improve your browsing experience. | Yes |
| Marketing / Targeting | Used to deliver relevant advertising and track the effectiveness of marketing campaigns. Currently used via Google Tag Manager. | Yes |
Our Website uses Google Tag Manager (GTM) to manage and deploy tracking tags, including Google Analytics 4 (GA4). These tools collect anonymised usage data to help us understand how visitors use our Website. Google may process this data on servers outside the UK — see Section 8 (International Transfers).
For more information about how Google uses data collected through our Website, visit: policies.google.com/technologies/partner-sites
You can control or delete cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. The following links provide guidance for major browsers:
Please note that disabling certain cookies may affect the functionality of our Website. To opt out of Google Analytics tracking specifically, you can install the Google Analytics Opt-out Browser Add-on.
We do not sell, rent, or trade your personal data to third parties. We may share your information in the following limited circumstances:
We engage trusted third-party service providers who process data on our behalf under written data processing agreements. These include:
| Category | Examples / Purpose |
|---|---|
| Website Hosting & Infrastructure | Cloud hosting providers for our website and backend systems |
| Email & Communications | Email delivery services for contact form responses and notifications |
| Analytics | Google Analytics 4 / Google Tag Manager for website usage analysis |
| CRM & Business Software | Customer relationship management and project management tools |
| Accounting & Finance | Accounting software for invoicing and financial record-keeping |
All service providers are contractually required to maintain appropriate security measures and to process your data only on our documented instructions, in compliance with UK GDPR.
We may share data with solicitors, accountants, insurers, and other professional advisers where necessary for our legitimate business operations or legal obligations, subject to confidentiality obligations.
We may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other authorities where we are legally required or permitted to do so — for example, to comply with a court order, to prevent fraud, or to protect the safety of individuals.
In the event of a merger, acquisition, business sale, or restructuring, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and any changes to this Privacy Policy that result from it.
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are set out below:
| Data Category | Retention Period | Reason |
|---|---|---|
| Enquiry and contact form data | 3 years from last contact | Legitimate interests — follow-up and business development |
| Contract and service records | 7 years from contract end | Legal obligation — tax and accounting requirements |
| Fire door inspection and compliance records | 10 years minimum | Legal obligation — fire safety legislation and liability |
| Invoice and financial records | 7 years | Legal obligation — HMRC requirements |
| Marketing consent records | Until consent is withdrawn + 1 year | Legal obligation — evidence of consent |
| Website analytics data | 26 months (Google Analytics default) | Legitimate interests — website improvement |
| CCTV footage (if applicable at our premises) | 30 days | Legitimate interests — security and crime prevention |
When data is no longer required, it is securely deleted, destroyed, or permanently anonymised in accordance with our internal data disposal procedures.
Some of our service providers (including Google) may process your personal data outside the United Kingdom or European Economic Area (EEA). Where this occurs, we ensure that appropriate safeguards are in place to protect your data, including:
For Google's data transfer mechanisms, please refer to Google's Controller-Controller Data Protection Terms. You can request details of the specific safeguards we rely on for any international transfer by contacting us at admin@eaglefire.co.uk.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:
While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. If you believe your data has been compromised, or if you become aware of a potential security incident involving our systems, please contact us immediately at admin@eaglefire.co.uk.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours and, where required, notify you directly without undue delay.
Under the UK GDPR and DPA 2018, you have the following rights in relation to your personal data. These rights are not absolute and may be subject to exemptions or limitations in certain circumstances.
| Right | What It Means |
|---|---|
| Right of Access (Subject Access Request) | You may request a copy of the personal data we hold about you, together with information about how we process it. We will respond within one calendar month. |
| Right to Rectification | You may ask us to correct any inaccurate or incomplete personal data we hold about you. |
| Right to Erasure ('Right to be Forgotten') | You may ask us to delete your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where you object to processing. This right is subject to legal retention obligations. |
| Right to Restrict Processing | You may ask us to temporarily suspend processing of your data — for example, while you contest its accuracy or object to our use of it. |
| Right to Data Portability | Where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format (e.g. CSV). |
| Right to Object | You may object at any time to processing based on legitimate interests, including profiling. You may also object to direct marketing at any time, and we must stop immediately. |
| Right to Withdraw Consent | Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. |
| Rights Related to Automated Decision-Making | You have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal or similarly significant effects. See Section 11. |
To exercise any of these rights, please contact us at admin@eaglefire.co.uk. We will consider your request in accordance with applicable data-protection law.
We may need to verify your identity before processing your request. Please provide sufficient information to allow us to identify you.
We do not currently use automated decision-making processes (including profiling) that produce legal or similarly significant effects on individuals. If this changes, we will update this Privacy Policy and notify you accordingly, and we will ensure that appropriate safeguards are in place as required by UK GDPR Article 22.
Our Website and services are directed at businesses and professionals, not at children. We do not knowingly collect personal data from individuals under the age of 18. If you believe that a child has provided us with personal data without appropriate parental or guardian consent, please contact us at admin@eaglefire.co.uk and we will take steps to delete that information promptly.
Our Website may contain links to third-party websites, including our LinkedIn company page, industry bodies, and regulatory authorities. We are not responsible for the privacy practices, content, or security of those external sites. We encourage you to read the privacy policies of any third-party websites you visit before providing any personal data.
The inclusion of a link to a third-party website does not constitute an endorsement of that site or its content by Eagle Fire.
We may update this Privacy Policy from time to time to reflect changes in our business practices, applicable law, or the services we offer. The "Last updated" date at the top of this page will be revised whenever a material change is made.
Where changes are significant, we will take reasonable steps to notify you — for example, by displaying a prominent notice on our Website. We encourage you to review this policy periodically to stay informed about how we protect your data.
Your continued use of our Website or services after any changes to this policy constitutes your acceptance of the updated terms.
If you are unhappy with how we have handled your personal data, we would ask that you contact us in the first instance at admin@eaglefire.co.uk so that we can attempt to resolve the matter.
If you remain dissatisfied, you have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO):
You also have the right to seek a judicial remedy against a data controller or processor.
For any questions, concerns, or requests relating to this Privacy Policy or our data processing activities, please contact our data controller directly:
Eagle Fire Ltd
Data Controller
Email: admin@eaglefire.co.uk
Website: eaglefire.co.uk