Privacy Policy

This website is operated by Tomeh Electrical LTD, a company registered in England & Wales (company number 17125630) with its registered office at 167-169 Great Portland Street, 5th Floor, London W1W 5PF.

We are the “data controller” for the personal data you submit through this website. For any privacy questions or to exercise your rights, contact us at info@tomehelectrical.co.uk.

• Contact form data: your name, phone number, email address, the service you’re interested in, and the message you send us.
• Technical data: IP address, browser type, device type, requested pages and timestamps recorded in hosting and application logs for security, abuse prevention and reliability.
• Bot-check data: information Cloudflare Turnstile collects to tell humans from bots when you submit the contact form.

• To respond to your enquiry and provide a quotation - lawful basis: taking steps at your request prior to entering a contract (UK GDPR Art. 6(1)(b)) and our legitimate interest in responding to potential customers (Art. 6(1)(f)).
• To protect our site from spam and abuse - lawful basis: legitimate interest (Art. 6(1)(f)).

When you submit the contact form, the details are sent to our website server, checked for spam, and then forwarded by email to our company inbox. Enquiry content is not stored in the website’s content database and is not published on the site. The website’s own database (content such as services, reviews, FAQs, areas and gallery images) is hosted on Supabase infrastructure; the only personal data held there are the administrator accounts used to manage the site.

• Enquiry emails: up to 24 months from our last contact with you, then deleted.
• Customer records (quotations, invoices, certificates): typically 6 years, to meet tax, accounting and electrical-safety record obligations.
• Hosting and security logs: short-term only, as retained by our hosting and security providers (typically days to a few weeks).
• Administrator accounts: for as long as the person administers the website.

We do not sell your data. The processors and providers involved in running this site are:

• Our website hosting provider - serves this website. Hosting request logs may include your IP address.
• Supabase - database, authentication and image storage for the website’s content and administrator accounts.
• Cloudflare - content delivery, and the Turnstile bot check on the contact form.
• Google (Google Workspace and Google Apps Script) - receives the contact form submission and delivers it to our company inbox.
• Google Fonts - serves the fonts used on this site; your browser requests them from Google, which receives your IP address.
• Authorities and professional advisers - where required by law.

We do not use third-party advertising or marketing analytics on this website. Some of the providers above process data outside the UK/EEA (including in the United States). Where that happens, transfers are protected by appropriate safeguards such as the UK International Data Transfer Addendum, the UK Extension to the EU-US Data Privacy Framework, or Standard Contractual Clauses.

This site uses only strictly necessary cookies and browser storage. We do not use analytics, advertising or tracking cookies, so no consent banner is shown.

• __cf_bm (Cloudflare) - a security cookie set in connection with the Turnstile bot check on the contact form. Typically expires after about 30 minutes.
• Local storage - theme - remembers whether you chose light or dark mode. Stays on your device until you clear it.
• Local storage - page content cache - stores a copy of already-public website content so pages load instantly on your next visit. Contains no personal data.
• Session storage - navigation - used by the site’s router to restore your scroll position while you browse. Cleared when you close the tab.

You can clear cookies and browser storage at any time in your browser settings; the site will still work.

Under UK GDPR you have the right to: access your data, ask us to correct or delete it, restrict or object to its processing, and request portability. To exercise any of these rights, email info@tomehelectrical.co.uk. We respond within one month. You also have the right to lodge a complaint with the UK Information Commissioner’s Office at ico.org.uk, or to raise it with us first through our complaints procedure.

We may update this policy from time to time. The “last updated” date at the top shows the most recent version.