Privacy Policy

Last Updated: September 2025

Who is this privacy notice for

This Privacy Notice applies to information we collect about you when you interact with APV Heating Services, whether that be purchasing a service contract with us, taking out finance for a new boiler through our trusted partner, receiving offers from us or engaging with us as a trusted contractor. It explains what personal information may be collected and how we use it.

Who we are

APV Heating Services is the trading name of Ashley Venton. A UK-based, gas-safe registered heating and boiler maintenance specialist with in excess of 20 years’ experience in the sector. We are committed to protecting data shared with us and complying with data protection law to its fullest extent. This Privacy Notice explains how we use and protect personal information, to show that we are adhering to the DPA 2018 and UK GDPR, and the Privacy and E-Communications Regulations in respect of marketing compliance.

The DPA 2018 and UK GDPR requires every organisation that processes personal information to be registered with the Information Commissioner's Office (ICO). Our registration number ZB956559 and you can find us on the Information Commissioner's register and search for us by using our registration number.

How to contact us

If you have any questions about how your personal information is used, please contact Ashley by emailing info@apvheatingservices.com.

Our address is: 3 The Rowans, Heskett Park, Pembury, Tunbridge Wells, Kent, TN2 4JQ

What Personal Information do we collect about you and how can we use this lawfully

The following sections explain the types of data we collect and the legal basis, under current data protection legislation, on which this data is processed. Most of the information we process is provided to us directly by you for one of the following reasons:

  • A Product or Service Enquiry
  • Providing online quotes for service enquiries
  • Purchasing a product
  • Contracting our installation and maintenance services
  • Administering your account with us
  • Issuing reminders about when your boiler service is due
  • Invoicing and financial transactions
  • Collecting client reviews to evaluate and promote our products and services
  • Receiving relevant and proportionate marketing content
  • Limited analytics on our web traffic
  • Legal compliance and financial audit purposes

Service enquiry - If you enquire about our installation and/ or maintenance services we will collect your name, email address, postal address, telephone number, and your message.

This will be collected either via the website, email or telephone depending on your preferred contact method. As it is necessary for us to collect that data to enable us to respond to your enquiry in the way you would expect we have a legitimate interest in processing that data. You can request for your information to be deleted at any time; however we might not be able to provide you with our services or a reply if you request deletion of your information.

Product or installation service purchase - If you purchase a boiler maintenance package or installation service from us, we will be entering into a contractual relationship with you, and this is our legal basis for processing your information. We will collect your details as above to enable us to fulfil our contractual obligations towards you. We also will process limited financial details for the purpose of invoicing and financial transactions.

After engaging our services, we may send you a short feedback form. The information you provide will only be used to improve our services and, where you have agreed, to promote our products and services to potential clients via our website and social media channels.

Becoming a sub-contractor to APV - if you become a sub-contractor to APV Heating Services, we will collect your name, contact details, NI Number, your bank details and UTR for payment and tax purposes. We will also collect confirmation of your academic qualifications and references.

Website traffic analytics - We use Google Analytics to monitor website traffic. This helps us understand how you interact with our website, measure the effectiveness of our website and improve user experience. When you accept cookies on our website you are consenting to the cookie being deployed. We consider it is our legitimate interest to understand the nature of your engagement if you accept cookies.

What Personal Information do we collect about you and how can we use this lawfully

The types of information that we may collect or hold about you are:

  • Where you have purchased a product or contracted our services, we will hold your contact details including your name, email address, and phone number (mobile and occasionally landline)
  • Where it differs from the billing address, we may hold the delivery address for a purchased product or installation service
  • For service enquiries, we will simply hold your name, email address, and phone number
  • For marketing purposes we may hold your name, contact details including email, and communication preferences
  • We cannot identify individuals from our web analytics data, although Google Analytics does capture such aspects as date and time of visits, pages visited and scrolled, and outbound clicks.

Sources of information

Your information may be sourced directly from you when you contact us. This information will be captured from enquiries and requests for product or services details.

Legal basis for communications

Where we send marketing emails, we will only contact you:

(a) where you are an existing customer, or have expressed an interest in our products or services, and our communications may be of specific relevance to you (Legitimate Interest); or

(b) where you have signed up to receiving information from us (Consent)

You may unsubscribe at any time via the link at the bottom of any marketing email from us, or by contacting: info@apvheatingservices.com

Who may we share your information with

We, like many businesses, work in partnership with a number of third-party suppliers:

Partner Purpose Location
Microsoft via IT Manager Services Ltd Storage and processing of customer servicing details Like many businesses we use Microsoft as our main platform to store and process the administrative aspects of our business. We outsource the provision of IT services to IT Manager Services Ltd.
Genie AI CRM platform an AI-powered, all-in-one CRM and marketing system designed specifically for small business owners. Data may be transferred outside the UK or EEA. In such circumstances Genied_AI utilise the UK Addendum to the EU Standard Contractual Clauses to ensure that data is not transferred to a country that has lesser standards of data protection legislation.
Starling Bank Business Banking Services Starling is often referred to as a digital challenger bank or neobank, but it operates with the same regulatory status as traditional banks. Limited amounts of personal data (financial transactional data) will be processed by Starling. They predominantly process data in the UK and EU. Their privacy notice is here
Sum-Up Payment Gateway Provider

SumUp enables small businesses to accept payments, manage transactions, and access financial services without needing complex infrastructure. They process customer data within the European Union and:

  • Complies with GDPR and PCI-DSS standards.
  • Acts as a data processor for merchants and handles customer data on their behalf.
  • Uses secure servers and encryption for data in transit and at rest

Their privacy notice is here

Go-Cardless Payment Gateway Provider

GoCardless is a direct debit and bank payment platform designed for recurring and one-off payments.

  • Acts as a data controller for end customer data
  • Processes data in compliance with GDPR and ISO27001 standards.
  • Uses secure client monies accounts with RBS, Barclays, or SEB.
  • May process data globally but ensures EU-standard safeguards for international transfers.

There privacy notice is here

Xero Accounting software Xero are our accounting software providers. Xero are based in New Zealand but have dedicated servers and offices in the EU for EU and UK based users. Their privacy notice is here
Gas Safe Register Note: Whilst we do not share your name with the Gas Safe register, we do register your postal address, email address and mobile number with them for the purpose of recording maintenance action. This may mean that identifiable information is shared where your email address may identify you as an individual.
Boiler Manufacturers Similarly, we share the same details with boiler manufacturers for the purpose of registering a new boiler installation and enabling guarantees and warranties.
3rd party sub-contractors Whilst much of our activities are carried out by our own staff, we occasionally utilise trusted third party sub-contractors for electrical and additional heating engineering support. In all instances we will only share the minimum information needed for the engineer to engage with you to carry out the service / activity.

Kanda - are an independent finance company that APV partner with to provide flexible payment options if you want to purchase a brand-new boiler in installments. APV will share your contact email address with Kanda if you express an interest in making a purchase in this format. Kanda are an independent data controller and you enter into a separate contractual agreement with them to access flexible payment terms. For more information please visit: getkanda.com

How long we keep your data

We take the principles of data minimisation seriously and ensure that we only ever ask for the minimum amount of data for the associated purpose and delete that data once it is no longer required.

  • Payment providers defaults to a seven-year retention period for financial transactional data. This is for audit, fraud prevention and AML (anti-money laundering) purposes.
  • Where we send you marketing information, we will keep you on our marketing database (Genie AI) indefinitely. If you unsubscribe, we will retain your information as a suppressed contact to ensure you receive no further marketing from us.
  • We have long-term relationships with most of our customers, who often return to us on a repeat basis. We therefore maintain customer details on our database for the life of a contract with us plus seven years, in order to provide the best possible customer experience to our customers.

Security

We ensure that your contact information is kept safe and secure and have appropriate technical and organisational security measures are in place to protect the limited amount of identifiable data that we do hold.

Where we outsource data processing, we ensure that robust and appropriate contracts are in place and of course, we excel at exacting rigorous due diligence on our suppliers.

Rights you have over your data

You have a number of rights under UK data protection law. These are listed below, along with our contact details, should you wish to make a request.

  • Informed: You have the right to be informed about how we handle your personal data. This privacy statement is one of the ways we do this.
  • Access: You have the right to ask for a copy of the personal data we hold about you and the purposes for which we are using it. ‘Personal data’ is any information which can directly, or indirectly, identify you.
  • Rectification: You have the right to ask us to change any details that we hold which are incorrect, inaccurate or need updating.
  • Erasure (known as the ‘right to be forgotten’): You have the right to ask us to delete your personal details under certain circumstances. We will assess any deletion request on a case-by-case basis. If you subscribe to our email list, we can quickly fulfil your request, but in other circumstances there may be reasons why we need to keep information about you.
  • Object: You have the absolute right to object to receiving direct marketing from us. You also have the right to raise an objection about how we are handling your personal information.
  • Restriction: You have the right to ask us to restrict or suppress your personal information. This would mean we’d store it but not use it.
  • Portability: You have the right to obtain and reuse your personal data for your own purposes across different services. Due to the nature of our organisation, we do not believe this right is likely to apply.

You also have the right to make a complaint if you believe we have not handled your information appropriately. We would prefer that you contact us in the first instance so we can discuss your concerns and put things right, but you also have the right to escalate your concerns at any time to the UK Regulator (The Information Commissioner’s Office) by contacting them here

If you would like to access the rights listed above, or any other legal rights you have over your data under current legislation, please get in touch with us by emailing at: info@apvheatingservices.com

Marketing

E-mail and marketing campaigns

APV Heating Services issues periodic offers to customers who have engaged with us or expressed an interest in our products or services. You may unsubscribe at any time but simply hitting the unsubscribe link in the email.

Social Media Advertising

APV Heating occasionally undertakes paid advertising on social media platforms, although this is not targeted advertising. You may come across us naturally in your newsfeed as we post regularly about our products and services.

Cookies

Our site uses very few cookies, but we do utilise Google Analytics to track engagement with our websites. We will always ask for your Consent before deploying non-essential cookies to your devices via our Cookie Management Platform – CookieYes.

Our promise to you

  • We will keep your information secure and confidential.
  • We do not spam you with marketing although we do send marketing emails from time to time - you are in control of how we communicate with you – you can opt in or out or change your preferences at any time through the 'unsubscribe' link at the bottom of any marketing email received.
  • We will not sell your data to a third party.
  • We will not share your data with a third party save for our contracted suppliers and delivery agents in order to fulfil a product delivery or installation service.
  • We know how to manage your information appropriately and in line with legal and regulatory requirements.