Last updated November 2026
Privacy Notice.
This explains what personal information we collect, why, who we share it with and what you can do about it. We've named every supplier rather than hiding behind phrases like “trusted partners”, so you can see exactly where your information goes.
Who we are
We are Swimming Pool & Spa Solutions Limited (“SPS”), registered in England and Wales, company number 10919866, and the data controller for the information described here. You can contact us about anything in this notice at info@swimmingpoolsolutions.co.uk or on 01483 904704. If you need our postal address for a formal request or complaint, email us and we'll provide it.
What we collect, why, and the lawful basis
If you send an enquiry (website form, email, phone or social media)
What: your name, email address, phone number, postcode, organisation and type of site if you're a business, the service you're interested in, and anything you tell us about your pool or project. The website form also tells us which page you sent it from and, if your browser shares it, the site that sent you to us (for example Google), so we know which pages are useful.
Why: to reply, give advice, arrange a visit and prepare a quote.
Lawful basis: taking steps at your request before entering into a contract, and our legitimate interest in responding to people who contact us.
If you become a customer
What: the above, plus your address and access details for the property, notes and photos about your pool, plant room and equipment, service and visit records, water test results, quotes, invoices and payment records.
Why: to design, build, service and repair your pool, keep a record of the work, and invoice you. All of this is kept in Jobber, our customer management system.
Lawful basis: performing our contract with you, and legal obligations for things like tax records and gas safety records.
If you look after a commercial pool
What: names, job titles and contact details of the people we deal with at your site, along with site and maintenance records.
Why and lawful basis: to deliver and report on the work under our contract with your organisation, and our legitimate interest in keeping in touch with the right people there.
If you visit this website
We count visits with simple analytics built into the site. There's no Google Analytics, no advertising and no third party involved. When you open a page, the site notes the page, the site that linked you here, your rough device type, browser and operating system, and your country, plus how quickly the page loaded for you.
Your IP address is never stored. To count unique visitors, it's combined with your browser details and a random value that changes every day, then scrambled into an anonymous code. The random value is deleted each day, so nobody, including us, can link your visits across days or work out who you are. The figures are kept on our own server for 25 months, then deleted. If your browser sends Do Not Track or Global Privacy Control, you aren't counted at all.
Lawful basis: our legitimate interest in understanding which pages are useful so we can improve the site.
The server also keeps standard technical logs, such as IP addresses and pages requested, to keep the site secure and working. These are cleared periodically.
We don't sell your information, we don't use it for automated decision-making, and we don't send marketing emails without your permission.
How long we keep it
- Enquiries that don't lead to work: up to two years, in case you come back to us, then deleted.
- Customer records, service history and correspondence: for as long as we look after your pool and six years after our last work for you.
- Invoices and financial records: six years plus the current tax year, as HMRC requires.
- Gas safety and similar records: for as long as the law requires.
- Website statistics: 25 months. Server logs: cleared periodically.
If you'd like your information deleted sooner, ask. Unless we're legally required to keep something, we will.
Everyone we share it with
These are all the third parties that can see your information. They only use it to provide their service to us.
Running the business
| Supplier | What they do | Where |
|---|---|---|
| Jobber (Octopusapp Inc.) | Our customer management system. Holds customer and contact details, pool and site notes, quotes, job and visit records, invoices and the messages we send through it | Canada and United States |
| MXroute | Hosts our business email, where enquiries and other messages arrive. Set up and managed for us by Michael Overton | United States |
This website
| Supplier | What they do | Where |
|---|---|---|
| Michael Overton (overton.cloud) | Builds, hosts and looks after this website for us, acting on our instructions as our processor | UK |
| Hetzner Online GmbH | The server this website runs on | Germany |
| FlyWP | Server management panel used to run that server | EU / cloud infrastructure |
| Bunny.net (BunnyCDN) | Content delivery, DNS and encrypted backup storage | Slovenia, with global delivery points |
| Resend | Delivers messages sent through the enquiry form to our inbox, and any confirmation email to you | United States |
| Search Console, which shows us anonymous search performance, and our Google Business Profile, where reviews are posted | United States |
Only if you contact us this way
| Supplier | What they do | Where |
|---|---|---|
| Meta (Facebook, Instagram, WhatsApp) | If you message us on Facebook, Instagram or WhatsApp | United States |
| TikTok | If you message us on TikTok | Ireland, United States and Singapore |
Card payments are taken through Jobber, which passes them to its payment provider. We never see or store your full card details.
We may also share information where the law requires it, or with our insurers and professional advisers if there's ever a claim or dispute.
Sending data outside the UK
Some of the suppliers above are outside the UK, mainly in Canada and the United States. Canada and the EU are covered by UK adequacy regulations. Transfers to the United States are covered by the safeguards those suppliers have in place, typically the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
Cookies
This website doesn't set any cookies on your device, tracking or otherwise, which is why there's no cookie banner. The only cookie anywhere on the site is a login cookie for our private statistics page, which visitors never see.
While you browse, your browser briefly remembers which site sent you here and, after you send an enquiry, your first name so the thank-you page can greet you. This is kept only in that browser tab and is cleared when you close it.
Security
The website runs over HTTPS, and the enquiry form uses a hidden spam trap to filter out bots. Customer records are held in Jobber rather than on personal devices, and access is limited to the people in our team who need it. No system is perfect, but if a breach ever put your rights at risk, we would tell you and the ICO without unnecessary delay.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of the information we hold about you
- correct it if it's wrong
- delete it
- restrict or object to how we use it
- send it to you, or someone else, in a portable format
Email info@swimmingpoolsolutions.co.uk. There's no charge, and we'll respond within one month. If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.
Children
Our services are for adults and organisations. We don't knowingly collect information about anyone under 18.
Changes
If we add or drop a supplier, we update this page, because the list above is meant to be complete. The date at the top shows when it last changed.