Privacy Policy (UK)

Last updated: 16 December 2025

This Privacy Policy explains how Ryno Locksmiths & Services Ltd (“we”, “us”, “our”) collects, uses and protects your personal data when you use our website or contact us.

We are committed to handling personal data in line with the UK GDPR, the Data Protection Act 2018, and (where relevant) PECR for cookies/marketing.

1) Who we are (Data Controller)

Ryno Locksmiths & Services Ltd
Registered address: 562 Gorton Road, Reddish, Stockport, Cheshire, SK5 6RE
Email: info@rynoservices.co.uk

We are the data controller for the personal data described in this policy

2) What personal data we collect

A) Data you provide to us

When you contact us or make an enquiry (e.g., via website forms, email, phone), we may collect:

  • Name

  • Phone number

  • Email address

  • Address / location details (where relevant to the job)

  • Enquiry details and any information you choose to share

  • Service details (e.g., booking requests, job notes, quotations)

  • Correspondence history

B) Website and cookie data

When you use our website, we may collect limited technical information, typically via cookies and similar technologies, such as:

  • Device and browser information

  • IP address (usually in a logged/technical form)

  • Pages visited and how you navigate the site

  • Approximate location (derived from IP, if enabled)

  • Cookie preferences

Note: We only use non-essential cookies (e.g., analytics/marketing) if you give consent via our cookie settings/banner.

3) How we use your data

We use your personal data to:

  • Respond to enquiries and provide quotes

  • Arrange and deliver locksmith services

  • Communicate with you about appointments, changes, and service updates

  • Maintain business records (e.g., job history, customer support)

  • Improve website performance and user experience (where cookie consent applies)

  • Protect our business from fraud or misuse and keep systems secure

  • Comply with legal and regulatory obligations (including tax/accounting rules)

4) Our lawful bases for processing

Under UK GDPR, we rely on the following lawful bases:

  • Contract: where processing is necessary to provide a service you’ve requested (e.g., arranging a call-out, carrying out work).

  • Legitimate interests: to run and protect our business (e.g., record-keeping, service improvement, security, handling complaints), provided your rights don’t override these interests.

  • Consent: for non-essential cookies and (where used) direct marketing by email/SMS.

  • Legal obligation: where we must keep certain records or respond to lawful requests.

5) Who we share data with

We may share personal data only where necessary, for example with:

  • IT and website providers (hosting, maintenance, security, backups)

  • Email and communications providers (so we can receive/respond to messages)

  • Analytics/cookie providers (only where you consent to non-essential cookies)

  • Professional advisers (e.g., accountants, insurers, legal advisers) where required

  • Regulators / authorities where we are legally required to do so

We do not sell your personal data.

If you pay by card, card payments are typically handled by a payment provider/terminal. We do not store full card details.

6) Data security

We store enquiries and customer information securely and take appropriate technical and organisational measures to protect personal data, such as:

  • Access controls (only authorised access)

  • Secure systems and accounts

  • Reasonable security practices for storage, devices, and communications

No system is 100% secure, but we work to reduce risk and respond appropriately if issues arise.

7) How long we keep your data (Retention)

We keep personal data only as long as needed:

  • Enquiries that don’t lead to work: typically kept for up to 24 months (to manage follow-ups and queries).

  • Customer/job records and invoices: typically kept for up to 6 years (to meet tax/accounting and business record requirements).

  • Cookie data: kept according to the cookie type and settings you choose (see cookie section below).

We may keep some information longer if required for legal claims, disputes, or regulatory reasons.

8) Your rights (UK GDPR)

You have rights including:

  • Access to your personal data

  • Correction of inaccurate or incomplete data

  • Erasure (where applicable)

  • Restriction of processing (where applicable)

  • Data portability (where applicable)

  • Objection to processing based on legitimate interests

  • Withdraw consent at any time (where processing is based on consent)

To exercise rights, email info@rynoservices.co.uk. We may need to verify your identity before responding.

9) Cookies and similar technologies

Our website uses cookies. Some are essential for the website to function; others (such as analytics) are optional and only used if you consent.

You can manage cookie preferences via our cookie banner/settings (where available) and through your browser controls.

10) Marketing

If we ever send marketing messages (e.g., offers or updates), we will only do so where we have a lawful basis—typically consent (or another permitted basis under PECR). You can opt out at any time using the unsubscribe option (where provided) or by emailing us.

11) International transfers

We aim to keep data within the UK. If any of our service providers transfer data outside the UK, we will ensure appropriate safeguards are in place (such as UK adequacy regulations or approved contractual protections).

12) Children’s data

Our services are not aimed at children, and we do not intentionally collect children’s personal data via our website.

13) Complaints

If you’re unhappy with how we handle your data, please contact us first at info@rynoservices.co.uk and we’ll try to resolve it.

You also have the right to complain to the UK supervisory authority, the Information Commissioner’s Office (ICO).

14) Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it was most recently revised.