Privacy Policy

CMA Heating Limited

Effective from: 18 May 2026 Last updated: 18 May 2026

1. About This Policy

This Privacy Policy explains how CMA Heating Limited collects, uses, and protects your personal information. It applies when you visit our website (cmaheating.co.uk), contact us through any channel, or use our services.

By using our website or services, you acknowledge that you have read this Privacy Policy. We may update this Privacy Policy from time to time. The version published on our website at the time of your interaction with us shall apply.

2. Who We Are

CMA Heating Limited is a company registered in England and Wales (company number 14997293), with its registered office at 7 Hungate, Beccles, Suffolk, NR34 9TT. We act as the data controller for personal data we collect about you.

For any privacy matters, you can contact us at:

  • Email: cma.heatingltd@outlook.com
  • Phone: 07584 656823
  • Post: CMA Heating Limited, 3 St Matthew’s Avenue, Beccles, Suffolk, NR34 9PS

3. What Information We May Collect

Depending on your interaction with us, we may collect the following categories of information:

Information you provide: name, contact details, postal address, property information, details of your enquiry or service requirements, payment information, and any other information you choose to share with us.

Information collected automatically: technical data including IP address, device information, browser type, pages visited, time spent on the site, referring sources, and similar information collected through cookies and tracking technologies (see our Cookie Policy).

Information from third parties: information received from review platforms, social media, referral sources, government grant administrators, manufacturer warranty platforms, and certification bodies where relevant to the services we provide.

The specific information we collect depends on the nature of your interaction with us.

4. Why We Process Your Information

We process personal information for purposes including, but not limited to:

  • Responding to enquiries and providing information about our services
  • Preparing quotes and entering into contracts
  • Carrying out the services we have agreed to provide
  • Processing payments and managing accounts
  • Communicating with you about our services
  • Registering installations and warranties with manufacturers
  • Submitting applications to grant administrators on your behalf where instructed
  • Maintaining records required by certification bodies, regulators, and law
  • Marketing communications where you have provided consent
  • Operating, maintaining, and improving our website and services
  • Complying with our legal, regulatory, and tax obligations
  • Protecting our legitimate interests, rights, and property

5. Lawful Basis for Processing

We process personal information under one or more of the following lawful bases, depending on the activity:

  • Performance of a contract with you or to take steps prior to entering into a contract
  • Compliance with our legal obligations
  • Our legitimate interests, where these are not overridden by your rights
  • Your consent, which you may withdraw at any time

6. Sharing Your Information

We may share your information with third parties where necessary for the purposes described in this policy, including:

  • Service providers who support our business operations (such as IT, hosting, accounting, payment processing, marketing platforms, and CRM systems)
  • Manufacturers and warranty providers where required for product registration
  • Certification bodies and regulators where required for compliance
  • Grant administrators where you have asked us to apply on your behalf
  • Insurance providers, including our insurance-backed guarantee provider
  • Professional advisers (legal, accounting, insurance)
  • Government bodies, courts, or regulators where required by law
  • Any successor business in the event of a sale, merger, or restructuring

We require all third parties to handle your data in accordance with applicable data protection law. We do not sell your personal information.

7. International Transfers

Where personal information is transferred outside the United Kingdom, we take steps to ensure that appropriate safeguards are in place in accordance with UK data protection law.

8. How Long We Keep Your Information

We retain personal information for as long as is necessary to fulfil the purposes for which it was collected, including legal, regulatory, tax, accounting, contractual, warranty, and operational requirements. Retention periods vary depending on the type of information and the purpose. Where the law specifies a minimum retention period, we will comply with that minimum.

9. Marketing Communications

We may send you marketing communications where you have provided consent or where we have another lawful basis to do so under applicable law. Marketing communications may include service reminders, seasonal offers, new service announcements, and similar messages.

You can withdraw consent or opt out of marketing communications at any time by:

  • Clicking the unsubscribe link in any marketing email
  • Replying STOP to any marketing SMS
  • Contacting us using the details in section 2

Opting out of marketing does not affect transactional communications relating to services we are providing or have provided to you.

10. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies, including for analytics, performance monitoring, and advertising purposes. Please see our Cookie Policy for full details and information on how to manage your preferences.

11. Security

We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, or misuse. However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

12. Your Rights

Under UK data protection law, you have rights in relation to your personal information, including:

  • The right to be informed about how we process your data
  • The right to access the personal information we hold about you
  • The right to request correction of inaccurate information
  • The right to request deletion in certain circumstances
  • The right to restrict processing in certain circumstances
  • The right to data portability where applicable
  • The right to object to processing based on legitimate interests
  • The right to withdraw consent at any time where processing is based on consent
  • The right to lodge a complaint with the Information Commissioner’s Office

To exercise any of these rights, please contact us using the details in section 2. We may need to verify your identity before responding to your request. We will respond within the timeframes required by law.

13. Children’s Privacy

Our services are intended for adults. We do not knowingly collect personal information from children. If you believe we have collected information about a child, please contact us.

14. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any website you visit.

15. Complaints

If you have a concern about how we handle your personal information, please contact us first. If you are not satisfied with our response, you can lodge a complaint with:

Information Commissioner’s Office (ICO) Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Helpline: 0303 123 1113 Website: https://ico.org.uk

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We encourage you to review this policy periodically. The “Last updated” date at the top of this policy indicates when it was most recently revised.

17. Governing Law

This Privacy Policy is governed by the laws of England and Wales. Any disputes will be subject to the exclusive jurisdiction of the courts of England and Wales.


CMA Heating Limited is a company registered in England and Wales. Company number 14997293. Registered office: 7 Hungate, Beccles, Suffolk, NR34 9TT.