Privacy policy

Section 01

Who we are

CJS Electrical (Wales) Ltd, trading as CJS Electrical, is an electrical contractor. We design, install, test, inspect and maintain electrical systems across Wales and the South West of England.

We are the data controller for the personal information described in this policy. That means we decide what is collected and what it is used for.

Section 02

What we collect, and when

When you send an enquiry through this website

The enquiry form asks for:

• Your name.
• Your address — address line 1, address line 2, town and postcode.
• Your phone number and email address.
• Whether the property is a home or a business.
• The services you are interested in.
• A free-text message describing what you need.
• Which page of the site you sent the enquiry from.
• A consent tick confirming you are happy for us to contact you and set up a record.

We ask for the address because we set up a customer account against the property. That is what makes certificates, test records and job history file correctly, so the next engineer — ours or anyone else’s — can see what has been done there before.

When you ask us to call you back

Your name, your phone number, and which page of the site you asked from. Nothing else.

When you call or email us

Your contact details and the content of the conversation or message, so we can answer it and keep a record of what was agreed.

When we carry out work at your property

Site and job records: the address and access details, what we installed, tested or repaired, the results of any testing, photographs of the installation where relevant, the certificates and reports we issue, and the paperwork needed to quote and invoice.

When you visit this website

Standard technical information such as your approximate location, browser and device type, and the pages you look at. This is covered in cookies and analytics below.

We do not ask for special category data. Please do not send us health, financial or other sensitive details through the enquiry form.

Section 03

Why we use it, and our lawful basis

UK GDPR requires us to have a lawful basis for everything we do with your information. Ours are:

• Consent — for responding to a website enquiry or a callback request, and for any marketing email. You gave it by ticking the box, and you can withdraw it at any time.
• Contract — for quoting, scheduling, carrying out and invoicing the work you have asked us to do.
• Legal obligation — for the certificates, test records and safety documentation we are required to produce and keep, for notifying work to a competent person scheme where that applies, and for our tax and accounting records.
• Legitimate interests — for running the business sensibly: keeping job history against a property, answering queries about past work, protecting our position if a dispute or claim arises, keeping our systems secure, and understanding how the website is used. We only rely on this where it does not override your rights.

We do not sell your information, and we do not use it to make automated decisions about you.

Section 04

Who we share information with

We never sell personal information. We share it only where there is a reason to, and only as much as is needed:

• Our email and IT providers. Enquiries from this website are delivered to enquiries@cjselectrical.co.uk. Our email platform is Microsoft 365, so Microsoft processes that mail on our behalf.
• Our website analytics provider. Google Analytics, where you have consented to analytics cookies. Google acts as our processor for that data.
• Certification bodies and scheme providers — such as NICEIC, MCS and BAFE — where work has to be notified, certified or registered, and where those bodies audit our work as part of our accreditation. That can include the site address and the details of the installation.
• Suppliers and subcontractors working on your job, where they need your address or contact details to deliver materials or attend site.
• Our professional advisers — accountants, insurers and solicitors — where we need advice or have to defend a claim.
• Anyone we are legally required to give it to, including HMRC, regulators, and the police or other authorities where the law obliges us.

Section 05

How long we keep it

• General customer records — enquiries, quotations, correspondence, job files and invoices — are kept for six years after the last job we did for you. That covers our tax obligations and the period in which a claim could be brought.
• Electrical certificates, test records and inspection reports are kept indefinitely. They are the safety and compliance history of the property, and they are frequently needed years later — by us, by a later owner, or by another contractor picking up the installation.
• Enquiries that do not turn into work are kept only as long as they are useful, and then deleted.

Where we no longer need information, we delete it or securely destroy it.

Section 06

How we keep it secure

We take sensible steps to protect the information we hold. In general terms:

• The website is served over an encrypted connection, and enquiries are sent to a business mailbox rather than sitting on the website.
• Our email and file storage run on Microsoft 365, with access controlled by individual accounts.
• Access is limited to the people who need it to do their job.
• Devices and accounts are protected by passwords and access controls, and we keep software up to date.
• Paper records are kept at our premises and disposed of securely.

No system is perfectly secure, and we would not claim otherwise. If something went wrong in a way that presented a risk to you, we would tell you and the ICO as the law requires.

Section 07

Cookies and analytics

This website uses a small number of cookies. The essential ones are needed for the site to work. Google Analytics is used to understand how the site is being used — which pages people read, and where visits come from — and it only runs if you consent to it through the cookie banner.

Analytics data is processed by Google as our processor. You can decline analytics when the banner appears, or change your mind later. Google may transfer and store this data outside the UK; where that happens it is done under the safeguards required by UK data protection law.

Full detail, including the cookies used and how to control them, is in our cookie policy.

Section 08

Your rights

Under UK GDPR you have the right to:

• Access the personal information we hold about you, and get a copy of it.
• Rectification — have anything inaccurate corrected, or anything incomplete completed.
• Erasure — ask us to delete information. This does not extend to records we are legally required to keep, or to the safety and compliance records described above.
• Restriction — ask us to pause using your information while something is being checked or disputed.
• Portability — receive the information you gave us in a common, machine-readable format, or have it sent to someone else.
• Object to us using your information where we rely on legitimate interests, and to object to direct marketing at any time.
• Withdraw consent at any time, where consent is what we relied on. Withdrawing it does not affect anything we did before you withdrew it.

To exercise any of these, email enquiries@cjselectrical.co.uk or write to us at the address above. We will respond within one month. We may ask you to confirm who you are first — that is to make sure we do not give your information to someone else. There is no charge.

Section 09

Contact us about your data

If you have a question about this policy, or about anything we hold, please get in touch. It is usually the quickest way to sort something out.

Section 10

Complaining to the ICO

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office, the UK’s data protection regulator. You do not have to come to us first, but we would rather have the chance to put it right.

Section 11

Children’s data

This website and our services are aimed at adults, and at people acting for a business. We do not knowingly collect information about children. If you believe a child has sent us personal information, tell us and we will delete it.

Section 12

Changes to this policy

We update this policy when our practices change, or when the law does. The date at the top always shows the current version. If a change materially affects how we use your information, we will make that clear rather than quietly amending the page.