Privacy notice

Harrowfire is the organisation that decides how and why personal information collected through this site is used, and acts as the controller for data protection purposes. We don't hold a postal address or an ICO registration number on record for publication here. If you'd like to ask us anything about how your information is handled, the contact page is the way to reach us.

When you fill in the enquiry form, we ask for your name, email address, telephone number, postcode or address, and a description of the fire risk management problem you're dealing with. The form itself is built and delivered by Basin (usebasin.com). If you send us further messages afterwards, we keep those too, along with the technical logs our content delivery network records, such as your IP address and browser details. Please do not send photographs that show people. If one does, we delete the photograph.

To answer your enquiry and pass it to one specialist covering your area, which is what you ask us to do when you send it. Our legitimate interest is in answering the people who contact us and in running the enquiry service, for which the specialist pays us. We have assessed that this does not override your interests, because you have asked us to pass your enquiry on and you can take your enquiry elsewhere at any time. We also use what you send to keep an accurate record of your enquiry, to help keep this site secure, and, where the law requires it, to meet a legal obligation. Your enquiry, with the details you gave, is passed to one specialist firm covering the area you told us about, so that they can contact you about it. They use it only to answer your enquiry and to arrange any visit or work you agree with them, and from that point they are responsible for how they handle it. We do not pass your details to anyone else for their own use. We don't use your information for marketing, profiling or automated decision-making, and we never sell it to anyone.

Getting your enquiry to the right specialist, and keeping this site working, means a small number of other organisations handle it on our behalf. Basin delivers the enquiry form; Bunny serves the pages; Namecheap provides our email; and Google supplies the typefaces the pages are set in, so your browser requests those files from Google. Each of them handles it only to do that job for us. We would also give information to a regulator, the police or a court where the law required it, and to nobody else.

The way this site is hosted means information you send us can be stored or processed outside the United Kingdom. The network that serves the pages holds its technical logs in the United Kingdom, the European Union and the United States. The form service operates from the United States and is certified under the UK Extension to the EU-US Data Privacy Framework.

We keep an enquiry for twelve months from the last contact about it, so that we can answer a later question about what was said and who it went to. After that it is deleted from the form service and from our email, and any backup copy is overwritten on the provider's normal cycle. You can ask us to delete it sooner at any time. The network that serves the pages keeps its technical logs for no more than 3 days.

Every page of this site, including the enquiry form, is served over an encrypted connection. Once an enquiry reaches us, only the people who need to act on it are able to see it.

You have the right to ask what personal information we hold about you and to receive a copy; to have it corrected; to have it deleted; to restrict how we use it; to object to our using it; and to receive what you gave us in a form you can take elsewhere. Ask through the contact page and we answer within one month, without charge; we may ask you to confirm who you are. If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113, though we would rather you told us first. If you complain to us about how we have handled your personal information, we acknowledge it within 30 days and reply as soon as we can.

This site is written for adults facing a fire risk management problem, and it isn't aimed at anyone under eighteen. If we realise an enquiry has come from a child, we'll delete it rather than act on it.

This site doesn't set any cookies of its own, and it doesn't use analytics or advertising trackers of any kind.

We may revise this notice from time to time, for instance if the way we handle enquiries changes. The version published on this page is the one that currently applies.