Privacy Policy

This Privacy Policy explains how Key Smith collects, uses and protects your personal data when you visit www.keysmithlocks.co.uk (the “Website”), contact us, or use our locksmith services. We handle your data in line with the UK GDPR and the Data Protection Act 2018.

Last updated: 29/10/2026

1. Who we are

Key Smith is a sole trader and is the “data controller” for the personal data described in this policy. We are registered with the Information Commissioner’s Office (ICO). ICO registration number: ZA412161.

Contact: Tim@keysmithlocks.co.uk | +44 7443180301 | 75 Christchurch road, Tulse Hill, SW2 3DH

2. What personal data we collect

  • Enquiries and bookings: your name, phone number, email address, the address where work is needed, and details of the job, collected through the Website, by phone, email or message.

  • Job records: details of the work carried out, quotations, invoices, and photographs of the lock, door and surrounding area taken before and after work.

  • Identity and authority checks: we may ask to see photographic identification and proof of address or occupancy before starting work. [We do not keep copies of these documents.]

  • Payments: records of what you paid and when. Card payments are handled by our payment provider, and we do not store your full card details.

  • Website use: technical information such as your IP address, browser type, device, and the pages you visit. This is collected through cookies and similar technologies. See our Cookie Policy.

  • Reviews and feedback: any feedback you give us directly.

We do not knowingly collect personal data from anyone under 18, and our services are not aimed at children.


3. How and why we use your data

What we use your data for

Responding to enquiries and arranging bookings

Carrying out the work and keeping job records

Checking identity and authority to authorise work

Taking payment, invoicing and keeping accounts

Dealing with complaints, disputes and insurance claims

Keeping the Website secure and working

Analytics and other non-essential cookies

Taking steps at your request before a contract; legitimate interests

Performance of a contract

Legitimate interests (preventing unlawful entry and fraud)

Performance of a contract; legal obligation

Legitimate interests; legal obligation

Legitimate interests

Consent

Lawful basis

Data involved

Contact details, job details

Contact details, address, job details, photographs

Identification and proof of address or occupancy

Contact details, payment records

Job records, photographs, correspondence

Technical data

Website usage data

We do not use your data for automated decision-making or profiling. We do not sell your data, and we do not share it with third parties for their marketing.

4. Who we share your data with

We only share your data where we need to, with:

  • service providers who help us run the business, such as website hosting, email, phone and messaging services, payment providers, and accounting software;

  • our insurers and professional advisers, if there is a claim, dispute or legal question;

  • the police, courts, HMRC or other authorities, where we are required to by law.

These providers may only use your data to provide their services to us.

5. Transfers outside the UK

Some of our service providers may process data outside the UK. Where they do, we make sure the transfer is protected by a lawful safeguard, such as a UK adequacy decision or the UK’s standard contractual clauses.

6. How long we keep your data

  • Job records and client data: 24 months after the work is completed, then paper records are securely shredded and digital records are permanently deleted.

  • Accounting and tax records: for as long as tax law requires, currently at least five years after the relevant tax filing deadline.

  • Enquiries that do not lead to a job: 6 months.

  • Cookie data: for the periods set out in our Cookie Policy.

We may keep data for longer if we need it to deal with a legal claim, a warranty matter, or a legal requirement.

7. Keeping your data secure

We take reasonable steps to protect your data, including using passwords and encryption on our devices and accounts, limiting who can access records, and shredding paper records securely. No method of storing or sending data is completely secure, so we cannot guarantee absolute security.

8. Your rights

You have the right to:

  • ask for a copy of the personal data we hold about you;

  • ask us to correct data that is wrong or incomplete;

  • ask us to delete your data, where we no longer need it;

  • ask us to restrict how we use your data;

  • object to us using your data where we rely on legitimate interests;

  • ask for your data in a portable format, where it applies;

  • withdraw your consent at any time, where we rely on consent.

To use any of these rights, contact us using the details above. We will normally reply within one month and will not charge a fee unless a request is clearly unfounded or excessive. We may need to confirm your identity first. Some rights are limited where we must keep records by law.

9. Cookies

The Website uses cookies. Our Cookie Policy explains which ones we use and how to manage your choices.

10. Complaints

If you have a concern about how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk, telephone 0303 123 1113.

11. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last changed.