Privacy Policy
1. Introduction and Who We Are
This Privacy Policy describes how Copperline Plumbing & Heating ("we," "us," or "our") collects, uses, and shares personal data about visitors to this website. It is drafted for the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, and reflects the actual processing performed by this website today. We are the controller of the personal data described in this policy.
Copperline Plumbing & Heating
Company number (Companies Act 2006 disclosure):
VAT number:
Phone:
Email:
The website is operated on our behalf by SiteMagic (Odyssean LLC, 4730 University Way NE, Ste 104-5528, Seattle, WA 98105, USA), which acts as our processor within the meaning of Article 28 UK GDPR and processes personal data only on our documented instructions. The processor's contractual duties are set out in Section 7 of the SiteMagic Terms.
2. Information We Collect
2.1 Hosting (Netlify)
This website is hosted by Netlify, Inc. (44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA). When you load a page, Netlify automatically processes standard server log data, including your IP address, the time of the request, the URL requested, and your browser's user-agent string. These logs are used to deliver the site reliably and to prevent abuse. The lawful basis is our legitimate interest in operating the website securely (Article 6(1)(f) UK GDPR).
2.2 Typography (Bunny Fonts)
For consistent typography, this website loads fonts through the "Bunny Fonts" service operated by BunnyWay d.o.o. (Dunajska cesta 151, 1000 Ljubljana, Slovenia) at fonts.bunny.net. When a page loads, your IP address is transmitted to BunnyWay solely to deliver font files from servers located in the European Union; no data is transmitted to Google LLC or the United States for font delivery. The lawful basis is our legitimate interest in a consistent presentation of the site (Article 6(1)(f) UK GDPR). BunnyWay's handling of this data is governed by its own privacy policy: https://bunny.net/privacy/.
2.3 First-Party Visit Analytics
We operate a lightweight first-party analytics tracker that records the page path, the referring URL, and the screen width of your device, stored in a Supabase database operated by SiteMagic. It does not record or store your IP address, does not set cookies, does not use any browser storage, and does not create profiles of visitors. The tracker honors the "Do Not Track" signal your browser may send — when that signal is present, nothing is recorded. Records are retained for 90 days. The lawful basis is our legitimate interest in aggregate, non-identifying usage statistics (Article 6(1)(f) UK GDPR).
3. Purposes and Lawful Bases
- Delivering the website reliably and securely — legitimate interests, Article 6(1)(f) UK GDPR.
- Aggregate, non-identifying analysis of how the website is used — legitimate interests, Article 6(1)(f) UK GDPR.
- Responding to inquiries you send us — Article 6(1)(b) or 6(1)(f) UK GDPR.
4. Sources of Information
We collect personal data directly from you (for example, when you send us an email or submit a form) and automatically (server logs and the first-party tracker described above). We do not purchase personal data from data brokers.
5. Disclosure to Service Providers
We share personal data only with the service providers that operate this website on our behalf, under written terms that restrict them to processing the data for our purposes:
- Netlify, Inc. — website hosting.
- BunnyWay d.o.o. (Slovenia, EU) — font delivery (Bunny Fonts).
- Supabase, Inc. — database for the first-party analytics described above.
- Anthropic, PBC — AI-assisted page authoring by SiteMagic.
SiteMagic's full list of sub-processors is set out in Sections 7.3 and 7.4 of the SiteMagic Terms. We do not sell personal data or share it for advertising purposes.
6. International Transfers
Several of our service providers — SiteMagic (Odyssean LLC), Netlify, Supabase, and Anthropic — are based in the United States, so personal data described in this policy may be processed outside the United Kingdom. Such transfers are safeguarded by the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, as provided for in Sections 7.3 and 7.4 of the SiteMagic Terms.
7. Retention
We retain personal data only as long as needed for the purpose it was collected. First-party tracker records are deleted after 90 days. Hosting access logs are retained per Netlify's standard practices. Messages you send us are retained only as long as needed to resolve the inquiry and satisfy any legal recordkeeping obligations. Data stored by SiteMagic on our behalf is deleted at our request when the engagement ends, in accordance with Section 7.5 of the SiteMagic Terms.
8. Your Rights
Under the UK GDPR, you have the following rights in relation to your personal data:
- Right of access to the personal data we hold about you.
- Right to rectification of inaccurate personal data.
- Right to erasure of your personal data, subject to limited exceptions.
- Right to restriction of processing in certain circumstances.
- Right to data portability for data you provided to us.
- Right to object to processing based on our legitimate interests.
To exercise any of these rights, contact us at
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, ico.org.uk. We would appreciate the chance to address your concerns first, but you may contact the ICO at any time.
9. Children
This website is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.
10. Contact
Questions about this Privacy Policy or requests to exercise your
rights:
11. Changes to This Policy
We may update this Privacy Policy to reflect changes in the law or in how the website operates. The current version is always available on this page.