Privacy Policy

This Privacy Policy explains how we collect, use, store, share and protect your personal data when you contact us, visit our website or use our locksmith services. It also explains your rights under applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Data (Use and Access) Act 2025 and, where applicable, the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR).

Who We Are

B&B Locksmiths is the data controller responsible for deciding how and why your personal data is used.

Email: bblocks@hotmail.co.uk

Telephone: 07831 451352
Website: www.bblocksmithsoxford.co.uk

If you have any questions about this Privacy Policy or how we use your personal data, please contact us using the details above.

Personal Data We Collect

Depending on how you contact us and the services you request, we may collect and process:

Your name
Your email address
Your telephone number
Your home, business or service address
Details of your enquiry or the services requested
Correspondence you send to us
Appointment dates and job records
Property access instructions
Quotations, invoices, payment status and transaction references
Photographs or videos of doors, locks, windows or property
Files and documents submitted through our website or sent directly to us
Proof of identity, ownership or authority to enter or secure a property
Complaint, warranty, insurance or dispute records
Key, lock or master-key system records
Information supplied by landlords, tenants, letting agents, estate agents, property managers, insurers, police, emergency services or other authorised parties
Technical information such as your IP address, browser type, device information and website usage data

We aim to collect only the personal data that is reasonably necessary for the relevant purpose. Where we need to verify your identity, ownership or authority, we may record that the verification has taken place. We will not retain copies of identification documents for longer than reasonably necessary unless there is a legal, security, insurance or dispute-related reason to keep them.

Special Category and Criminal Offence Data

We do not routinely request special category personal data or criminal offence data.

However, information supplied during an emergency, security incident, repossession, insurance matter, complaint or dispute may sometimes contain this type of information. Where this occurs, we will process it only where necessary, where an appropriate lawful basis applies and, where required, where an additional condition under applicable data protection law is met.

How We Obtain Personal Data

We may obtain personal data:

Directly from you when you contact us, submit a website form, request a quotation, make a booking or use our services
From another person acting on your behalf;
From landlords, tenants, letting agents, estate agents, property managers, insurers, police, emergency services or other authorised organisations
From payment, website hosting, email, communications or technology providers
Automatically through cookies and similar website technologies.

Where another person provides information about you, we will use it only where we have a lawful reason to do so.

How and Why We Use Personal Data

We may use your personal data to:

Respond to enquiries and provide quotations
Arrange appointments and manage locksmith services
Communicate about work, prices, access arrangements, payments and follow-up services
Confirm your identity, ownership or authority to request access to a property
Provide, manage and record the services you request
Create invoices, process payments and maintain financial records
Handle complaints, warranty claims, disputes and insurance matters
Protect our customers, staff, property and business
Prevent fraud, unauthorised entry, misuse and unlawful activity
Establish, exercise or defend legal claims
Comply with legal, tax, accounting, insurance and law-enforcement requirements
Maintain and improve our website, services and business systems
Send marketing communications where permitted by law

We will not use your personal data for an unrelated purpose unless we have a lawful basis to do so and, where required, have informed you.

Lawful Bases for Processing

The lawful basis we rely on will depend on why we are using your information.

- Contract

We may process personal data where it is necessary to provide a service you have requested, fulfil an agreement with you or take steps at your request before entering into a contract.

This may include handling enquiries, providing quotations, arranging appointments, carrying out locksmith work, issuing invoices and managing payments.

- Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

Operating and managing our locksmith business
Communicating with customers and other authorised parties
Verifying identity, ownership and authority
Protecting people, property, keys and security information
Preventing unauthorised access, fraud and misuse
Maintaining appropriate business and service records
Handling complaints, insurance matters and legal claims
Improving our services, website and business systems

- Legal Obligation

We may process personal data where necessary to comply with legal, tax, accounting, regulatory or law-enforcement obligations.

- Consent

We may rely on your consent for activities such as certain marketing communications and cookies or similar technologies where consent is legally required. You may withdraw your consent at any time, although this will not affect processing that took place before it was withdrawn.

- Vital Interests

In rare emergencies, we may process personal data where this is necessary to protect someone’s life.

Providing Personal Data

You are not normally under a legal obligation to provide all the information we request.

However, we may be unable to provide a quotation, arrange an appointment, verify authority, carry out access work at a property or provide the requested service if necessary information is not provided.

Marketing Communications

We may send marketing communications where you have given consent or where another applicable legal provision allows us to do so.

You may opt out at any time by contacting us or using any unsubscribe option provided.

Opting out of marketing will not prevent us from sending service-related communications about an enquiry, appointment, payment, complaint or existing customer relationship.

Sharing Your Information

We do not sell your personal data.

Where necessary and lawful, we may share information with:

Website hosting, email, telephone, cloud storage and technology providers
Payment processors, banks and financial service providers
Accountants, insurers, solicitors and other professional advisers
Suppliers where information is required to provide or support the requested service
Landlords, tenants, letting agents, estate agents, property managers or other authorised parties
Police, emergency services, courts, enforcement professionals, regulators or government authorities
A buyer, seller or adviser if our business or its assets are sold, transferred or reorganised

Service providers may support our communications, website, payments, storage or administration, but they do not carry out locksmith work on our behalf.

Where an organisation processes personal data solely on our behalf, we require it to protect the information and use it only in accordance with our instructions and applicable law.

Other recipients, such as insurers, banks, courts, police or government authorities, may process personal data independently under their own legal responsibilities.

International Transfers

Some email, website, cloud storage, payment or communications providers may process personal data outside the United Kingdom.

Where personal data is transferred outside the United Kingdom, we will ensure that the transfer is permitted under UK data protection law. Depending on the circumstances, this may include relying on applicable adequacy regulations, appropriate safeguards such as approved contractual clauses, or another lawful transfer mechanism. You may contact us for more information about the safeguards used for relevant international transfers.

Data Security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration or disclosure.

Access is limited to people and service providers who reasonably need the information for their work or services and who are subject to appropriate confidentiality or data protection obligations.

However, no internet, email or electronic storage system can be guaranteed to be completely secure.

Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including where necessary to:

Provide and document our services
Maintain financial, tax and accounting records
Handle complaints, warranties and insurance matters
Protect property and security information
Establish, exercise or defend legal claims
Meet legal and regulatory obligations

The appropriate retention period will depend on the nature of the information, why it is used, legal requirements, security considerations and the possibility of a complaint or legal claim. When personal data is no longer required, we will securely delete, destroy or anonymise it.

Cookies and Website Data

Our website may use cookies and similar technologies to provide website functions, support contact forms, maintain security and understand how visitors use the website.

Some cookies may collect technical information such as your IP address, device type, browser type and website usage data.

Cookies and similar technologies that fall within an applicable statutory exception may be used without consent. This includes strictly necessary cookies and may also include certain cookies used for statistical purposes or to enable or improve how the website appears or functions, where the legal conditions for the relevant exception are met. Where consent is legally required, the relevant cookies or similar technologies will not be used unless you have provided that consent.

You can control cookies using any cookie-management controls provided on our website or through your browser settings. Disabling certain cookies may affect website functionality.

Your Data-Protection Rights

Depending on the circumstances, you may have the right to:

Request access to your personal data
Request correction of inaccurate or incomplete personal data
Request deletion of your personal data
Request restriction of processing
Object to processing based on legitimate interests
Object to direct marketing at any time
Request the transfer of certain personal data to you or another organisation
Withdraw consent at any time
Complain about how we use your personal data

These rights are not absolute and may not apply in every situation.

You will not normally have to pay a fee to exercise your data protection rights. However, where permitted by law, we may charge a reasonable fee or refuse to act where a request is manifestly unfounded or excessive.

We may request information reasonably necessary to confirm your identity or authority before responding to a request.

To exercise your rights, contact us at bblocks@hotmail.co.uk.

Data-Protection Complaints

You can make a data protection complaint by emailing bblocks@hotmail.co.uk if you have concerns about how we have collected, used, stored, shared or protected your personal data.

Please explain the nature of your concern and provide any information reasonably necessary for us to investigate it.

We will:

Provide a clear way for you to make a data-protection complaint
Acknowledge receipt of your complaint within 30 days
Take appropriate steps to investigate the complaint without undue delay
Keep you informed where appropriate
Tell you the outcome without undue delay

We may request information to confirm your identity or authority where necessary.

Complaints to the Information Commissioner’s Office

You may also complain to the Information Commissioner’s Office at any time. The ICO recommends giving us an opportunity to complete our complaint-handling process first, where appropriate, so that we can investigate and address your concern.

Information Commissioner’s Office
Telephone: 0303 123 1113
Website: www.ico.org.uk

Automated Decision-Making

We do not use personal data to make decisions about you based solely on automated processing where those decisions would produce legal or similarly significant effects.

External Links

Our website may contain links to external websites. We are not responsible for the content, security or privacy practices of those websites. You should review the relevant privacy policy before submitting personal data to an external website.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, business practices, technology or legal obligations. Any changes will be posted on this page. Material changes may also be brought to your attention by another appropriate method.

For questions, requests or complaints concerning this Privacy Policy or your personal data, please contact:

B&B Locksmiths
Email: bblocks@hotmail.co.uk
Telephone: 07831 451352
Website: www.bblocksmithsoxford.co.uk