PRIVACY POLICY & HMRC data handling
HMRC Data Handling our application connects to HM Revenue and Customs (HMRC) systems via their Making Tax Digital (MTD) API to submit VAT returns and retrieve tax obligations on your behalf.What HMRC data we access and store:- VAT obligations (due dates, periods, submission status)- VAT return data (boxes 1-9 as calculated from your invoices and bills)- HMRC connection tokens (encrypted, used to authenticate with HMRC on your behalf)We do NOT store your Government Gateway login credentials. Authentication is handled securely via HMRC’s OAuth 2.0 process – you log in directly with HMRC and grant our application permission.How long we keep HMRC data:- VAT return submissions are retained for 7 years to comply with HMRC record-keeping requirements- HMRC authentication tokens are stored only while your HMRC connection is active and are deleted immediately when you Disconnect who can access your HMRC data:- Only you (the account holder) and any team members you have added to your account- Our system administrators for technical support purposes only- No HMRC data is shared with any third Parties security measures:- All data is transmitted over encrypted HTTPS (TLS 1.2/1.3) connections- HMRC tokens are stored in an encrypted database- Access requires authenticated login with JWT-based session tokens- The server is hosted in a secure data centre with restricted Access your rights:- You can disconnect from HMRC at any time via the app settings, which removes all stored HMRC tokens- You can request deletion of your HMRC submission history by contacting us- You can request a copy of of this HMRC Integration by connecting your HMRC account through our application, you authorise us to:- Retrieve your VAT obligations and return data from HMRC- Submit VAT returns to HMRC on your Behalf you are responsible for ensuring the accuracy of all VAT data before submission. Once a VAT return is submitted to HMRC, it cannot be reversed through our application.You can revoke HMRC access at any time by disconnecting your HMRC account in the app settings.We comply with HMRC’s fraud prevention requirements and transmit device and connection information as required by HMRC’s Making Tax Digital regulations.
Privacy Policy for Gas Man Business ManagerEffective Date: 20 May 2026At Gas Man Business Manager, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services, contact us, or visit our website.1. Who We AreGas Man Business Manager is a plumbing, heating, and gas engineering company providing installation, repair, maintenance, servicing, and emergency call-out services to domestic and commercial customers across the United Kingdom.If you have any questions about this Privacy Policy or your personal data, you can contact us at:Gas Man Business ManagerEmail: [Insert Company Email]Phone: [Insert Company Phone Number]Address: [Insert Business Address]2. Information We CollectWe may collect and process the following information:Personal InformationFull nameHome or business addressEmail addressTelephone numberService InformationProperty details relevant to the work carried outBoiler and appliance informationService and maintenance historyAppointment and job recordsPayment InformationBilling detailsPayment and invoice records(Note: We do not store full card payment information.)Website & Technical InformationIf you use our website or app, we may collect:IP addressBrowser and device informationUsage dataCookies3. How We Use Your InformationWe use your information to:Deliver plumbing, heating, and gas servicesSchedule appointments and respond to enquiriesProduce quotations and invoicesMaintain customer service recordsImprove our services and customer experienceMeet legal, regulatory, and safety obligationsSend important service-related communicationsWe only collect personal information necessary for legitimate business purposes.4. Legal Basis for ProcessingUnder UK GDPR and applicable data protection laws, we process personal data based on:Contractual necessityLegal obligationsLegitimate business interestsConsent where applicable5. Sharing Your InformationWe do not sell or rent your personal data to third parties.We may share information with:Employees, subcontractors, and engineers carrying out workPayment processing providersAccountants, insurers, or legal advisorsIT and software service providersGovernment or regulatory authorities where legally requiredAll third parties are required to handle your information securely and confidentially.6. Data SecurityWe take appropriate technical and organisational measures to protect your personal data from unauthorised access, misuse, disclosure, alteration, or loss.Your information is stored securely and accessed only by authorised personnel.7. Data RetentionWe retain personal information only for as long as necessary for:Service and warranty recordsLegal and regulatory obligationsAccounting and tax purposesResolving disputes8. Your RightsUnder UK GDPR, you have the right to:Access the personal data we hold about youRequest correction of inaccurate informationRequest deletion of your dataRestrict or object to processingRequest transfer of your dataWithdraw consent where consent is relied uponTo exercise any of these rights, please contact us using the details above.9. CookiesOur website may use cookies to:Improve website functionalityAnalyse website trafficRemember user preferencesYou can manage or disable cookies through your browser settings.10. Third-Party LinksOur website may contain links to external websites. We are not responsible for the privacy practices or content of third-party sites.11. Updates to This Privacy PolicyWe may update this Privacy Policy from time to time. Any changes will be published on our website along with the updated effective date.12. Contact & ComplaintsIf you have any concerns about how we handle your personal data, please contact us directly first.You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):ico.org.uk�
Who we are
Suggested text: Our website address is: https://gasmanbusiness.co.uk.
Comments
Suggested text: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
Suggested text: If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Who we share your data with
Suggested text: If you request a password reset, your IP address will be included in the reset email.
How long we retain your data
Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where your data is sent
Suggested text: Visitor comments may be checked through an automated spam detection service.