Effective version: 19 August 2026
1. Who is responsible for the information?
Compassline Ltd is the data controller for Berkshire Boiler Care. It collects, stores and reviews homeowner enquiries and engineer partnership applications submitted through this website and decides how personal information is used for those services.
To exercise a data-protection right or raise a data-protection complaint, email privacy@compassline.co.uk. Please do not send identity documents, bank details or medical information unless we specifically ask for information that is reasonably necessary to verify a request.
2. What information is collected?
- Your name, email address, telephone number and preferred contact method.
- Your postcode, town and property type.
- Boiler make, model, approximate age, problem category, heating and hot-water status, preferred timeframe and your description.
- Your processing, sharing and policy acknowledgements, together with the notice versions and submission time.
- For engineer partnership applications: contact and business names, email address, telephone number, website, Gas Safe registration number, coverage areas, services, emergency-work availability, preferred contact method, any optional Messenger details and any comments.
- Limited source, referral and campaign information, request and security logs, anti-spam results and technical details needed to protect and operate the service.
3. How and why the information is used
Compassline Ltd uses the information to:
- receive, validate, store and review your boiler enquiry;
- respond to your request and check whether its location and job type may be suitable for the matching service;
- communicate with you about the enquiry and send a receipt;
- receive, securely store and manually review engineer partnership applications, verify relevant application details and contact applicants about the outcome or next steps;
- where you have explicitly agreed, consider sharing relevant details with a suitable independent engineer;
- prevent spam, abuse, duplicate submissions and security incidents; and
- keep proportionate enquiry, consent and operational records.
Processing needed to receive and review an enquiry is based on your request and Compassline Ltd's legitimate interests in operating a secure matching service. Sharing identifying enquiry details with a potential engineer is based on the explicit sharing choice in the form. Legal obligations and legitimate interests may also apply to security, fraud prevention, complaints and legal claims. Where consent applies, you may withdraw it before the relevant sharing takes place by contacting the privacy address above.
Engineer application processing is based on the applicant's request to be considered for the network, the consent recorded in the registration form and Compassline Ltd's legitimate interests in reviewing and managing potential commercial relationships.
4. Independent engineers and applicants
Where appropriate and available, Compassline Ltd may share the relevant enquiry and contact details with a suitable independent engineer. No automated engineer dispatch occurs. A person reviews the enquiry, and no automated decision guarantees acceptance, availability or a booking.
An engineer who receives the information acts as an independent business and becomes responsible for their own direct communications and any later inspection, appointment, quotation, work, payment or service relationship. Submitting an enquiry does not itself create any of those arrangements.
Engineer applications are reviewed manually. Submitting an application does not create an account, guarantee approval or create an employment, franchise or exclusive relationship.
5. Service providers and other recipients
Information is processed using:
- Vercel, which hosts the application;
- Supabase, which provides database and storage infrastructure;
- Resend, which provides transactional email delivery; and
- Cloudflare Turnstile, which helps detect and prevent automated abuse.
Relevant technical and security logs may also be processed by these providers. Information may be disclosed to professional advisers, regulators or law-enforcement bodies where reasonably necessary or legally required. Enquiry information is not sold.
6. Retention
The application assigns an enquiry deletion date up to 365 days after submission. Invalid, declined or unassigned enquiries may be deleted earlier where appropriate. Some limited records may need to be kept longer to meet a legal obligation, respond to a complaint, prevent fraud or establish, exercise or defend a legal claim.
Engineer applications are also assigned a deletion date up to 365 days after submission. If an engineer is approved or enters an ongoing commercial relationship, proportionate qualification, communication and operational records may be retained for longer while needed for that relationship or a legal obligation.
A deletion request will be considered against the purpose for which information is held and any applicable legal exception. The right to deletion is not absolute.
7. International processing and security
Technology providers may process information outside the United Kingdom. Where required, Compassline Ltd relies on the provider's applicable contractual and transfer safeguards. Access to customer enquiries is restricted to trusted server-side operations, and secret credentials are not exposed in browser code.
Reasonable technical and organisational protections are used, but no internet service can promise absolute security.
8. Your data-protection rights
Depending on the circumstances and lawful basis, you may have rights to access information, correct inaccurate information, request deletion, restrict processing, object to processing, obtain portable information and withdraw consent where consent is used.
Email privacy@compassline.co.uk with enough information to identify the enquiry and explain your request. Compassline Ltd may ask for proportionate verification. You may also make a data-protection complaint through that address. We will acknowledge a complaint within 30 days, investigate it and communicate the outcome without unjustifiable delay.
You may also complain to the Information Commissioner's Office using its data-protection complaints service.
9. Analytics and storage technologies
Website analytics are currently disabled. The service does not send names, email addresses, telephone numbers, postcodes or boiler descriptions to analytics. Cloudflare Turnstile and essential technical storage may be used for security and form operation; they are not used here to create a marketing profile.
10. Changes to this policy
Material changes will be shown on this page with a new effective date. The privacy-notice version recorded with an enquiry or engineer application shows which wording applied when it was submitted.