Privacy policy

1. Who we are

Last updated: 08/10/2026

This policy explains how Calton Electrical collects, uses and protects your personal information when you visit our website, contact us, or use our electrical services in Edinburgh and the Lothians.

Calton Electrical is the trading name of Calton Electrical Ltd, a company registered in Scotland (company number SC902382). Our registered office is Merlin House, C/O Blyth Accountants, Mossland Road, Glasgow, Renfrewshire, Scotland, G52 4XZ. We are the data controller for the personal information described in this policy, and we are registered with the Information Commissioner's Office (ICO).

If you have any questions about this policy or how we handle your information, contact us:

  • Email: contact@caltonelectrical.co.uk

  • Phone: 01312125555

We are a small business and do not have a formal Data Protection Officer. Jordan, our founder, is responsible for data protection.

2. The personal information we collect

We only collect what we need to quote for, carry out and support our work.

  • Contact details: your name, email address, phone number, and postal or site address.

  • Job details: the property address, access arrangements, a description of the work, photos or videos you send us, and site notes we make.

  • Property and safety records: test results, certificates and reports we produce, such as Electrical Installation Condition Reports (EICRs), Electrical Installation Certificates and Minor Works Certificates. These record the property address and the name of the person who ordered the work.

  • Business details: if you contact us on behalf of a company, letting agency or property manager, your job title and organisation.

  • Financial details: quotes, invoices, payment records and, where relevant, your VAT number. We do not store full card details.

  • EV charger details: for charge point installations, information needed for grant applications and network operator notifications, such as vehicle ownership or off-street parking details.

  • Communications: emails, messages and call notes between us.

  • Website data: technical information such as your IP address, browser type and pages visited, collected through cookies and similar technologies (see section 9).

We don't intentionally collect special category data, such as health information. If you tell us something like this because it affects how we work safely at your property, for example a medical device that relies on a continuous power supply, we'll only use it for that purpose.

3. How we collect your information

Most of it comes directly from you: when you fill in our website contact form, email or call us, message us on social media, accept a quote, or speak to us on site.

We also receive information from third parties:

  • Landlords, letting agents and property managers who instruct us to work at a property. If you're a tenant, they may give us your name and phone number so we can arrange access. We use these details only to book and complete the job.

  • Main contractors and other trades when we work as a subcontractor.

  • Lead platforms and directories such as Meta and Google, when you contact us through them.

  • Public sources such as Companies House and business websites, when we research commercial clients we'd like to work with.

4. How we use your information and why

UK data protection law requires us to have a lawful basis for each use of your personal information. These are ours:

What we use it for

  • Responding to enquiries and preparing quotes

  • Booking, carrying out and completing work

  • Arranging access with tenants and site contacts

  • Issuing certificates, test reports and building regulation notifications

  • Notifying network operators and applying for EV charger grants

  • Invoicing, taking payment and keeping accounts

  • Handling complaints, warranty claims and disputes

  • Telling business contacts about our services

  • Sending marketing emails to individual customers

  • Running and improving our website

Where we rely on legitimate interests, we've weighed our interests against your rights and only proceed where the use is reasonable and expected. You can ask us for details of that assessment.

We don't use your information for automated decision-making or profiling that has legal or similarly significant effects on you.

5. Marketing

Business contacts. We may contact people at letting agencies, property management firms, developers and other businesses about services relevant to their role. We do this by email, phone, LinkedIn or post, using work contact details. Every message gives you an easy way to opt out.

Individual customers. If you've used or asked about our services, we may occasionally send you useful updates such as an EICR renewal reminder or a related service. You can opt out when you first give us your details and in every message. Otherwise, we'll only send you marketing if you've agreed to it.

We never sell your information or share it with other companies for their own marketing. To stop marketing at any time, reply "unsubscribe" or email contact@caltonelectrical.co.uk.

6. Who we share your information with

We only share what's needed for each purpose. Our service providers act on our instructions and must keep your information secure.

  • Squarespace - Hosts our website and contact form

  • Microsoft (Microsoft 365) - Email, file storage and documents

  • Xero - Quotes, invoicing and accounts

  • Lloyds Bank - Processes card payments

  • Google and Meta - Our Google Business Profile, Facebook and Instagram pages, and messages you send us there

  • Our accountants - Bookkeeping, tax returns and statutory accounts

  • Our employees and trusted subcontractors - Carrying out work at your property

  • The landlord, letting agent or property manager who instructed us - Certificates, reports and job updates for their property

  • Certification and trade scheme bodies - Registering and auditing our notifiable work

  • Local authority building standards - Building warrant completion and certification where required

  • SP Energy Networks - Notifying connections such as EV chargers, as required

  • Government grant schemes (e.g. OZEV) - EV charger grant claims, where you're eligible

  • Our insurers and professional advisers - Insurance, claims and legal advice

We may also share information if the law requires it, for example with HMRC, the police or a court, or as part of a sale or restructure of our business, in which case the new owner would follow this policy.

Platforms such as MyBuilder, Google, Meta and LinkedIn are also controllers of the information you give them directly. Their own privacy policies apply to that.

7. International transfers

Some of our service providers, including Squarespace, Microsoft, Xero, Google and Meta, may store or access data outside the UK, for example in the EU or the United States. Where they do, the transfer is protected by an approved safeguard. This could be a UK adequacy decision, the UK Extension to the EU-US Data Privacy Framework, or the International Data Transfer Agreement or Addendum. Contact us if you'd like more detail.

8. How long we keep your information

We keep personal information only as long as we need it, then delete or anonymise it securely.

Information & how long we keep it

  • Enquiries and quotes that don't go ahead - 12 months after our last contact

  • Tenant and site contact details - 3 months after the job is completed

  • Customer, job and invoice records - 6 years after the end of the financial year they relate to

  • Certificates, test results and reports - 10 years after the work, as they relate to the safety of the installation and any later claims

  • Marketing contacts - Until you opt out or the contact is no longer relevant; we keep a minimal record of opt-outs so we don't contact you again

  • Emails and messages - In line with the record they relate to

We may keep information longer if we need it for an ongoing claim, complaint or legal requirement.

9. Cookies and website analytics

Cookies are small files stored on your device when you visit a website. Our website runs on Squarespace, which uses:

  • Essential cookies to make the site work securely, for example to remember your cookie choices and protect forms from spam. These don't need your consent.

  • Analytics cookies to tell us how visitors use the site, such as which pages are viewed and how people find us. We use this in aggregate to improve the site. We only set these with your consent, which you can give or withdraw through our cookie banner at any time.

We also use Google Search Console and Bing Webmaster Tools to monitor how our site appears in search results. These tools report on search performance and don't place cookies on your device through our site.

You can also block or delete cookies in your browser settings, though some parts of the site may not work properly. For details of the cookies Squarespace sets, see Squarespace's cookie policy.

10. How we keep your information secure

We store information in reputable cloud systems protected by strong passwords and two-factor authentication. Access is limited to people who need it for their work. Phones, tablets and laptops used for the business are password-protected and can be wiped remotely if lost. Paper records, such as site notes, are kept securely and shredded when no longer needed.

No system is completely secure. If a data breach is likely to put your rights at risk, we'll tell you and the ICO as the law requires.

11. Your rights

Under UK data protection law, you have the right to:

  • Access a copy of the personal information we hold about you

  • Correct information that's inaccurate or incomplete

  • Erase your information, where we no longer have a valid reason to keep it

  • Restrict how we use your information in certain circumstances

  • Object to us using your information based on legitimate interests, and to direct marketing at any time

  • Data portability, receiving information you gave us in a commonly used electronic format

  • Withdraw consent at any time, where we rely on consent

Some rights have limits. For example, we can't delete a certificate or invoice we're legally required to keep.

To use any of these rights, email contact@caltonelectrical.co.uk. There's no charge, and we'll respond within one month. We may need to confirm your identity first.

12. Complaints

If you're unhappy with how we've handled your information, please contact us first at contact@caltonelectrical.co.uk. We'll acknowledge your complaint within 30 days and do our best to put things right.

You also have the right to complain to the Information Commissioner's Office:

  • Website: ico.org.uk/make-a-complaint

  • Phone: 0303 123 1113

13. Changes to this policy

We'll update this policy when our services, systems or legal obligations change. The latest version will always be on this page, with the date it was last updated at the top. If we make a significant change that affects you, we'll let you know.