Privacy Policy

Who we are

AllPoints Maintenance & Services ("we", "us") is the data controller for the personal data described in this policy. We are a sole trader business operated by Carlos De Sousa, trading from Reading, Berkshire, serving RG, SL, GU and TW postcode areas. You can contact us about privacy at allpoints.ms@icloud.com or +44 7485 689879.

We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What data we collect

• Your name, telephone number and email address
• The address of the property where work is required, and access details you give us
• Details and photographs of the job, quotes, invoices and payment records
• Messages you send us by phone, SMS, email or WhatsApp

We do not run tracking or advertising cookies on this website, and we do not collect special category data. We do not knowingly collect data about children.

Why we use it, and our lawful basis

• To quote for and carry out work — performance of a contract, or steps taken at your request before entering into a contract.
• To keep accounting and tax records — legal obligation (HMRC record keeping).
• To handle complaints, insurance and warranty matters — legitimate interests in running and defending our business.
• To send occasional service reminders — consent, which you can withdraw at any time by replying "stop" or emailing us.

Who we share it with

We share personal data only where necessary: with our accountant and bookkeeping/invoicing software, with suppliers when ordering specific hardware for your job, with insurers or legal advisers where a claim arises, and with HMRC or other authorities where we are legally required to. We never sell your data.

If you contact us via WhatsApp, your message is also processed by WhatsApp Ireland Ltd under its own privacy policy. Where any provider processes data outside the UK, transfers are covered by UK adequacy regulations or the International Data Transfer Agreement.

How long we keep it

Enquiries that do not lead to work are deleted within 12 months. Records relating to completed work, invoices and payments are kept for 6 years after the end of the relevant tax year, in line with HMRC requirements. Job photographs are deleted once the work is signed off, unless needed for a warranty or insurance matter.

Your rights

You have the right to access your data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to data portability, and to withdraw consent where we rely on it. To exercise any of these rights, contact us using the details above. We will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, telephone 0303 123 1113, ico.org.uk.

Security & changes

We keep paperwork secure and use password-protected devices and accounts. This policy may be updated from time to time; the current version is always published on this page.