Privacy Policy for Oasis Plumbing Limited (Oasis Bathrooms)
Effective date: 09-12-2025
Introduction
Oasis Plumbing Limited ("we", "us", "our", "Oasis Bathrooms") is committed to protecting your personal information and complying with applicable data protection law, including the Data Protection (Bailiwick of Guernsey) Law, 2017 and related provisions aligned with the EU GDPR. This Policy explains how we collect, use, disclose, store and protect personal data collected through our website https://www.oasisbathrooms.gg (the "Website"), which provides information about our services aimed at users in Guernsey.
Data controller
Oasis Plumbing Limited is the data controller for personal data collected via the Website.
• Company name: Oasis Plumbing Limited
• Owner: Seb Kirk
• Registered address: La Houguette Bungalow, Route Des Paysans, St Peters, Guernsey. GY7 9LA
• Contact for privacy enquiries (Data Protection Officer or responsible person): Seb Kirk - 07781455222 - seb@oasisplumbing.co.uk
Personal data we collect and how we collect it
We collect the following categories of personal data:
a) Data you provide directly via Website forms
• Name
• Phone number
• Email address
• Postcode
• Any message or additional details you choose to include in the free-text fields
How collected: when you complete and submit either of the contact/quote request forms on the Website.
b) Technical and usage information (automatic)
• IP address (anonymised where possible)
• Device and browser type
• Referring/exit pages and URLs
• Pages visited and actions on the Website
• Cookies and similar identifiers (see Section 7)
How collected: automatically via cookies, Google Analytics, Google Tag Manager and server logs when you visit the Website.
Purposes of processing and legal bases
We process your personal data for the following purposes and on these legal bases:
• To respond to enquiries and provide requested information, quotations or services:
Purpose: contact you and progress any pre-contractual steps or contracts.
Legal basis: performance of a contract or taking steps at your request before entering a contract; where applicable, our legitimate interests in conducting our business.
• To communicate with you (including email, SMS or phone) about appointments, service delivery and follow-up:
Purpose: service delivery and customer support.
Legal basis: performance of a contract and/or legitimate interests; where required, your consent for marketing communications.
• To operate and improve the Website and understand usage (analytics):
Purpose: site analytics, performance monitoring and security.
Legal basis: our legitimate interests in improving and securing the Website (balanced against individual rights). Where required by law or cookie-consent tools, analytics may rely on your consent.
• For marketing and promotional communications (where you have opted in):
Purpose: send marketing emails or other marketing communications.
Legal basis: your consent. You may withdraw consent at any time (see Section 10).
• To comply with legal obligations or to establish/defend legal claims:
Purpose: record-keeping and compliance.
Legal basis: legal obligation and our legitimate interests.
Third parties, processors and international transfers
We use the following third-party service providers who act as processors for us:
• Google Analytics and Google Tag Manager (Google LLC)
• Meta (Facebook Pixel / Meta services) (Meta Platforms, Inc.)
• A marketing agency: DFY Digital (the “Marketing Agency”), which is contractually required to be compliant with applicable data protection law.
Purpose of sharing: these processors support analytics, tag management and marketing operations. Google and Meta may collect technical identifiers and may process data outside the Bailiwick of Guernsey (for example, the United States). Where data is transferred outside the Bailiwick, we and our processors rely on appropriate safeguards (for example, Standard Contractual Clauses or other legally recognised safeguards) or an applicable adequacy decision. You can obtain more details of the safeguards in place by contacting us at the address in Section 12.
We do not sell personal information for money. If you are located in a jurisdiction with a "sale" definition (for example, California), we do not knowingly sell personal data collected via the Website.
Cookies and similar technologies
We use cookies and similar technologies to operate the Website, remember your preferences, and provide analytics and advertising features. Cookies used include:
• Strictly necessary cookies: required for site operation.
• Performance/analytics cookies: Google Analytics (collects anonymised usage data).
• Marketing cookies: Meta Pixel and similar to measure and show relevant marketing.
You can manage cookie preferences via the cookie banner on the Website, through your browser settings, or via the opt-out tools provided by Google and Meta (e.g., Google Analytics opt-out add-on; Meta ad settings). Google Tag Manager is a container for tags and does not itself store personal data but may trigger tags that do.
How we store and protect data; retention periods
Security:
• We protect personal data using administrative, technical and physical measures proportionate to the risk, including TLS/HTTPS in transit, access controls, and contractual obligations with processors.
• Access to personal data is restricted to employees and service providers who need it to perform their roles and who are subject to confidentiality obligations.
• Although we use reasonable security measures, no internet transmission is completely secure. If you have concerns, contact us at the address in Section 12.
Storage and retention:
• Enquiry/contact-form data: kept while required to respond and administer any ongoing business relationship, and thereafter retained for up to 6 years for record-keeping, legal and tax purposes, unless you request earlier deletion or a different retention period is required by law.
• Analytics/technical data: retained for a limited period depending on the tool (e.g., Google Analytics default retention settings). We typically retain aggregated analytics data for up to 26 months and personal analytics identifiers only for the minimum practical time.
• Marketing consent records: retained while you remain subscribed and for up to 6 years afterwards to demonstrate consent or compliance.
Your rights
Subject to local law, you may have the following rights in relation to your personal data:
• Right of access: obtain a copy of personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): request deletion where there is no lawful ground to retain it.
• Right to restriction of processing: ask us to limit how we use your data in certain circumstances.
• Right to data portability: receive a machine-readable copy of the data you provided to us and transmit it to another controller where applicable.
• Right to object: object to processing based on our legitimate interests or to direct marketing.
• Right to withdraw consent at any time for processing based on consent.
• Right to lodge a complaint with a supervisory authority (see Section 11).
We will respond to requests in accordance with applicable law (normally within one month; may be extended by two further months for complex requests with notice).
If you are a California resident, under the California Consumer Privacy Act (CCPA) you may also have rights to:
• Know categories of personal information collected, sources, purposes, recipients and categories sold/disclosed;
• Request deletion of personal information (subject to exceptions);
• Opt out of the "sale" of personal information; and
• Non-discrimination for exercising your rights.
How to exercise your rights or make requests
To exercise any of the rights above, or for privacy enquiries, contact:
• Email: seb@oasisplumbing.co.uk
• Postal address: La Houguette Bungalow, Route Des Paysans, St Peters, Guernsey. GY7 9LA
• Phone: 07781455222
If you are in California and wish to make a CCPA request, please use the same contact methods and include “CCPA REQUEST” in the subject line. We may require verification of identity before fulfilling requests.
Marketing communications
We will only send you marketing communications where you have given consent or there is a legitimate interest and you have not objected. Every marketing email will include an unsubscribe link. You may also contact us to unsubscribe using the contact details in Section 12.
Complaints to supervisory authority
If you believe we have not complied with data protection law in respect of your personal data, you may complain to the Office of the Data Protection Authority (Guernsey) (or other applicable supervisory authority in your jurisdiction). Guernsey ODPA contact details:
• Office of the Data Protection Authority (Guernsey)
• Website: https://gdpr.gov.gg/ (please confirm exact URL and contact details and replace if different)
You may also have the right to complain to another supervisory authority in your country of residence.
Data breach notification
In the event of a personal data breach where there is a risk to your rights and freedoms, we will notify the Guernsey data protection authority and affected individuals as required by law without undue delay and in accordance with legal requirements.
Children
The Website is not intended for children. We do not knowingly collect personal data from children under 13yrs. If you believe a child has provided us with personal data, contact us and we will take steps to delete it.
Changes to this Policy
We may update this Policy from time to time. The “Effective date” at the top will show when the policy was last revised. Significant changes will be highlighted on the Website.
Additional required information and placeholders to complete
Before publishing, you must fill in the following fields:
• Effective date: 09-02-2025
• Registered company address: La Houguette Bungalow, Route Des Paysans, St Peters, Guernsey. GY7 9LA
• Privacy contact / DPO name, email and phone: Seb Kirk seb@oasisplumbing.co.uk 07781455222
• Marketing agency name and address: DFY Digital
• Server/storage location(s) (if hosted outside Guernsey):
• Cookie retention periods and analytics retention: [INSERT PERIODS]
• Any other jurisdiction-specific contact (e.g., US toll-free number for CCPA requests):
Contact us
If you have questions about this Policy, want to exercise your rights, or need further information about how your data is processed, please contact:
• Email: seb@oasisplumbing.co.uk
• Postal address: La Houguette Bungalow, Route Des Paysans, St Peters, Guernsey. GY7 9LA
• Phone: 07781455222