Legal

Privacy Policy

Last updated: May 2026

Who I am

I'm Frankie, the director of Bright Sparks of York Ltd, an electrical contracting business based in York. My website address is brightsparks-york.com. The business is registered with the Information Commissioner's Office as a data controller (registration C1927867).

What data I collect and why

Contact form submissions

When you use my contact form, I collect your name, email address, phone number, and message. I use this solely to respond to your enquiry. I don't add you to any mailing list or share your details with anyone.

Google Analytics (only if you consent)

If you accept cookies via the banner on your first visit, I load Google Analytics 4 (GA4) with IP anonymisation enabled. The data is anonymous and aggregated, I cannot identify you personally from it. Google may process this data on servers outside the UK. If you decline, no analytics cookies are set. Full details, including the specific cookie names and how to change your mind, are in the Cookie Policy.

No other tracking

I don't use any other tracking tools, advertising cookies, social media trackers, or third-party analytics. I don't run remarketing or targeted advertising on this site.

Customer job records

Once you become a customer, I keep records of the work I've carried out at your property. That includes your name, address, contact details, the scope and price of the job, and any electrical certificates I've issued (Electrical Installation Condition Reports, Electrical Installation Certificates, Minor Works Certificates, fire alarm and emergency lighting certificates). The lawful basis is contract performance for the active job, then legal obligation and legitimate interest for the certification record afterwards.

NICEIC notification

When I do work that's notifiable under Building Regulations Part P (consumer-unit changes, new circuits, certain bathroom and kitchen work) I notify NICEIC, my certification body, who in turn notify your local authority. They receive your name, address, and the installation details — that's a regulatory requirement, not optional.

EICR renewal reminders

If I've carried out an EICR for you, I may send a reminder a few weeks before your retest is due (typically every 5 years for a domestic property, every 1 to 5 years for rentals depending on the report). Every reminder email carries a "reply STOP and I won't chase again" line at the bottom — reply with that and I take you off the list. The lawful basis is legitimate interest for an existing customer; I don't send these to anyone who hasn't been a customer.

How long I keep data

Contact form submissions are kept only as long as needed to handle your enquiry. Google Analytics data is retained for 14 months (the default GA4 retention period). Quotes that don't go ahead are kept for 24 months. Job and invoice records are kept for 6 years plus the current tax year.

Electrical certification records (EICRs and other certificates) are kept for the lifetime of the installation. Insurance claims, future remedial work, and regulatory enquiries can surface decades after the work was done, and the regulations expect the record to be available. If you ask me to remove your data from a certificate (right to erasure under Article 17), I'll redact your name and contact details from the record but keep the technical lineage (date, address, outcome, retest cadence) for the reasons above. I'll log every such request and tell you what's been redacted.

Your rights

Under UK GDPR, you have the right to:

Contact

If you have any questions about this privacy policy or your data, contact me at: