Skip Navigation


Who we are

We are K & L Heating & Bathrooms Limited, a plumbers merchant and provider of plumbing services including heating and bathrooms.

We are committed to maintaining the trust and confidence of our customers. We do not sell, rent or trade any of our customers details with other companies and businesses for marketing purposes.

Under the General Data Protection Regulations we are both a Data Controller and a Data Processor. We collect and control what happens to the information and also process the information for the purpose of carrying out our contractual obligations and invoicing.

Types of personal data we collect

We collect name, address and contact details from customers in order to estimate and/or carry out the work agreed.

When paying by credit/debit card over the phone we collect the relevant information to enable us to process the card payment.

Where we store personal data

Our customers data is held securely in our Cloud based accounts software - Xero which is accessed via secure login on password protected computers. Please refer to Xero’s Security pages at to understand how they protect customer’s data.

Electronic copies of documentation e.g. Estimates, is held on our computers which are all password protected.

Hard copies of documentation is held in locked filing cabinets on our premises.

Credit card receipts are held separately from any information identifying the card holder in accordance with PCI DSS rules. In addition when giving card details over the phone, the information gathered to process that payment is shredded once the payment has been successfully processed.

Who we share information with

The data we hold on our customers is shared with:

  1. Those members of our staff who are involved in the supply of services and products to our customers.
  2. Our accountants - Hale & Co also have access to our accounts package and therefore access to customer data. They have their own privacy policy which is available on their website
  3. We may also share information with manufacturers for the purpose of registering guarantees or requesting call outs on behalf of customers under the guarantee. We will always ask your permission before doing this.
  4. We may also share information with official bodies like ‘GasSafe’ where there is a legal requirement to register an item or system we have installed.

The legal basis for the collection, use and storage of data

The legal basis on which we hold and process personal information about you is so that we can perform the contractual obligations between us and so that we can comply with such statutory obligations as the money-laundering regulations and building regulations.

Access to your personal information

You are entitled to view, amend or delete any of your personal data that we hold. Although it should be noted that there is a legal obligation to keep certain personal data for accounting and VAT compliance purposes which overrides an individual’s right to delete their details. Please email your request to Phillip Greene at