Privacy Policy

1. Data controller

In accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we confirm that the controller of your personal data is:

• Dr Locks Ltd
• Company Number: 11225525
• Registered office: 15 Fifth Avenue, Heworth, York, YO31 0XB, United Kingdom
• Email: contact@drlocksltd.co.uk
• Telephone: 01904 295 465
• Company Number: 11225525

2. Purposes of processing

Personal data provided through the forms on this website is processed in order to handle your enquiries and requests, prepare quotations, deliver the services you engage us for, and maintain the commercial or contractual relationship established with Dr Locks Ltd.

Where you subscribe to our mailing list, we process your name and email address in order to send you news, offers and information about our locksmith services.

3. Lawful basis

The lawful basis for processing is:

• Contract: performance of a contract with you, or taking steps at your request prior to entering into a contract (quotations, bookings and the carrying out of locksmith work).
• Legitimate interests: responding to your enquiries, keeping records of work carried out, and improving our services.
• Consent: where you have subscribed to our mailing list. You may withdraw your consent at any time.
• Legal obligation: where we are required to retain records for tax, accounting or insurance purposes.

4. Data retention

Data will be kept only for as long as is necessary to fulfil the purpose for which it was collected and, in any event, for the periods required by law. Records relating to work carried out and to invoicing are retained for a minimum of six years in accordance with HMRC requirements. Mailing list data is retained until you unsubscribe.

5. Recipients

Your data will not be shared with third parties except where required by law. It may be accessed, as data processors, by service providers necessary for the operation of the website and the business — for example website hosting, email, analytics and email marketing providers — who process the data in accordance with our instructions and with the safeguards required by the UK GDPR.

Where a provider is located outside the United Kingdom, any international transfer is carried out on the basis of UK adequacy regulations or the International Data Transfer Agreement (IDTA) / UK Addendum, as applicable.

6. Your rights

You have the following rights in relation to your personal data:

• Access: to know what data we hold about you.
• Rectification: to have inaccurate data corrected.
• Erasure: to have your data deleted where it is no longer necessary.
• Objection: to object to processing in certain circumstances.
• Restriction: to request that processing be restricted.
• Portability: to receive your data in a structured, machine-readable format.
• Withdrawal of consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out beforehand.

To exercise these rights, write to us at contact@drlocksltd.co.uk or at the address given above. If you believe your data is not being handled in accordance with the law, you have the right to lodge a complaint with the Information Commissioner’s Office (www.ico.org.uk), the UK supervisory authority.

7. Security measures

Dr Locks Ltd has adopted the technical and organisational measures necessary to safeguard the integrity, confidentiality and availability of the personal data it processes. Users should nevertheless be aware that no security measure on the internet is entirely impenetrable.