Last updated: June 2026
1. Who we are
This website is operated by Darren McMillan, trading as DMPH, a sole trader providing gas safety certification and legionella risk assessment services.
Data controller: Darren McMillan (trading as DMPH), St Andrews, Fife, UK. Email: contact@dm-ph.co.uk. Phone: 01334 402502. Website: dm-ph.co.uk.
As a sole trader, Darren McMillan is the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What data we collect
When you use the contact form on this website, we collect the following personal data: Name (to address you correctly), email address (to respond to your enquiry), phone number (to contact you about a booking, if provided), and postal address (to confirm your service location, if provided).
We do not collect any special category data (such as health information) and we do not use automated decision-making or profiling.
3. Why we collect your data and our lawful basis
Responding to your enquiry — Legitimate interests (Art. 6(1)(f)): it is in our mutual interest to communicate about the services you have asked about.
Arranging and carrying out a booking — Performance of a contract, or steps taken prior to entering a contract (Art. 6(1)(b)).
Complying with legal and tax obligations — Legal obligation (Art. 6(1)(c)).
Legitimate interests assessment: We have assessed that using your contact details to respond to your direct enquiry does not override your interests or rights, as you have voluntarily provided this information for that purpose and would reasonably expect to be contacted in response.
4. How long we keep your data
Enquiries that do not lead to a booking: data is deleted within 12 months of your last contact with us. Completed bookings: records are retained for 6 years from the date of the transaction, in line with HMRC requirements. Gas safety certificates: relevant records may be retained for longer where required by Gas Safe Register obligations or applicable regulations. When data is no longer needed, it is securely deleted.
5. Who we share your data with
We do not sell, rent, or trade your personal data. We do not share it with any third parties for marketing purposes.
GoDaddy (website host and contact form processor): Our website and contact form are hosted and operated by GoDaddy. When you submit the contact form, your data is processed by GoDaddy's servers. GoDaddy is headquartered in the United States. Privacy policy: godaddy.com/legal/agreements/privacy-policy
Google Analytics: We use Google Analytics to understand how visitors use our website. This data is aggregated and anonymised — it does not identify you personally. Google Analytics sets cookies on your device (see Section 7). Privacy policy: policies.google.com/privacy
Google reCAPTCHA: Our contact form is protected by Google reCAPTCHA to prevent spam and abuse. reCAPTCHA collects hardware and software information and sends it to Google for analysis. This data is used only for security purposes. Privacy policy: policies.google.com/privacy
6. International data transfers
GoDaddy and Google are both US-based companies. When your data is processed by these services, it may be transferred to and stored on servers in the United States or other countries outside the UK.
Where such transfers occur, we rely on appropriate safeguards including Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO) or other transfer mechanisms recognised under UK GDPR. You can request details by contacting us at contact@dm-ph.co.uk.
7. Cookies
Our website uses cookies for the following purposes: Essential/functional cookies to make the website work correctly (set by GoDaddy). Analytics cookies to measure website traffic and understand visitor behaviour — aggregated, anonymised data (set by Google Analytics). Security cookies to distinguish humans from bots on the contact form (set by Google reCAPTCHA).
When you first visit our website, you are shown a cookie banner and asked to accept or decline non-essential cookies. If you decline, only essential cookies will be set. You can also control or delete cookies at any time through your browser settings. For more information, visit ico.org.uk/for-the-public/online/cookies.
8. Your rights
Under UK GDPR, you have the following rights: Right of access — request a copy of the personal data we hold about you. Right to rectification — ask us to correct inaccurate or incomplete data. Right to erasure — ask us to delete your data, subject to any legal obligations to retain it. Right to restriction — ask us to restrict how we use your data while a dispute is resolved. Right to data portability — where processing is based on consent or contract, request your data in a portable format. Right to object — object to processing based on legitimate interests; we will stop unless we have compelling legitimate grounds. Rights related to automated decision-making — we do not use automated decision-making or profiling, so this right does not currently apply. Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at contact@dm-ph.co.uk or 01334 402502. We will respond within one calendar month. We may need to verify your identity before fulfilling a request.
9. Right to complain
If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority. Website: ico.org.uk. Phone: 0303 123 1113. Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. We would appreciate the opportunity to address your concerns directly before you contact the ICO.
10. Security
We take reasonable steps to protect your personal data from unauthorised access, loss, or disclosure. Our website uses HTTPS encryption. Contact form data is transmitted securely via GoDaddy's platform. We do not store form submissions beyond the period required to respond to your enquiry and fulfil any resulting booking.
11. Third-party links
This website contains links to the Google Privacy Policy (in connection with reCAPTCHA and Google Analytics). We are not responsible for the privacy practices of third-party websites and encourage you to read their privacy policies before providing any personal data.
12. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page will always show when the most recent revision was made. We encourage you to check this page periodically.
13. Contact us
Darren McMillan (trading as DMPH). Email: contact@dm-ph.co.uk. Phone: 01334 402502. Website: dm-ph.co.uk.If you have any questions about this Privacy Policy or how we handle your data, please contact us via the contact form on our website at dm-ph.co.uk.