Privacy Policy

A legal disclaimer

John Castell – Housing Health & Compliance
Last updated: 1st December 2025

This Privacy Policy explains how I collect, use and protect your personal information when you visit johncastell.co.uk or contact me about my services.

By using this website or contacting me, you agree to this policy.

1. Who I am

Data controller:
John Castell – Housing Health & Compliance Consultant
Website: johncastell.co.uk
Email: john.castell@icloud.com

I am responsible for deciding how your personal data is used.

2. What information I collect

I may collect and process the following types of information:

Information you provide directly

Name
Contact details (email address, phone number, postal address)
Details about your property/properties (address, type, condition, issues reported)
Information about your role (e.g. landlord, letting agent)
Any other information you choose to include in an enquiry form, email or phone call

Information collected automatically

When you use this website, some technical data may be collected automatically, such as:

IP address
Browser type and version
Device type
Pages viewed and time spent on the site
Referring website

This may be collected through cookies and similar technologies (see Section 8).

3. How I use your information

I use your personal data for the following purposes:

Responding to enquiries
To reply when you contact me via the website, email or phone.
Providing services
To arrange and carry out Property Health & Compliance Reviews, Solar PV Performance & FiT Protection Reviews and any other services you instruct me to provide.
Administration and record keeping
To keep appropriate records of work carried out, reports provided, and communications.
Improving the website and services
To understand how the website is used and to improve content and usability.
Legal and regulatory obligations
To comply with legal requirements (for example, tax records) and to respond to lawful requests from authorities if required.

I do not sell your personal data to third parties.

4. Legal bases for processing

Under UK data protection law (UK GDPR and the Data Protection Act 2018), I rely on the following legal bases:

Contract – where processing is necessary to respond to your enquiry or provide services at your request.
Legitimate interests – for day-to-day business administration, keeping records, and improving my services, where these interests are not outweighed by your rights.
Legal obligation – where I must keep or share information to comply with the law.
Consent – where you have specifically agreed (for example, to receive optional updates or newsletters). You can withdraw consent at any time.

5. Sharing your information

I may share your personal data with:

Service providers
For example, website hosting (such as Wix), email service providers, cloud storage, and IT support – strictly for providing and supporting this website and my business.
Professional advisers
Such as my accountant, legal or insurance advisers, where necessary.
Regulators and authorities
If required by law or to defend legal claims.

All third parties are required to handle your data securely and only in accordance with my instructions and the law.

I do not routinely share your details with contractors or other third parties without your knowledge. If I ever need to involve a third party in relation to your property (for example, to obtain specialist advice), I will discuss this with you first wherever reasonably possible.

6. International transfers

Some of my service providers (for example, website hosting or cloud services) may store or process data outside the UK.

Where this happens, I take reasonable steps to ensure appropriate safeguards are in place, such as:

Providers operating in countries recognised as having adequate data protection, or
Standard contractual clauses or equivalent safeguards approved under UK data protection law.

7. How long I keep your data

I keep personal data only for as long as necessary for the purposes described in this policy, including:

Enquiry records – usually kept for up to 2 years if no work is instructed.
Client records, reports and related correspondence – normally retained for up to 7 years after the end of the work, to comply with legal and tax obligations and in case of any queries or claims.

I may keep information for longer if required by law or if there is an ongoing dispute.

When data is no longer needed, it will be securely deleted or anonymised.

8. Cookies and website analytics

This website may use cookies and similar technologies to:

Make the site work properly
Remember basic preferences
Understand how the site is used (for example, which pages are most visited)

Where analytics tools are used (such as Wix analytics or similar), they may collect anonymised or pseudonymised technical data about website usage.

You can usually control cookies via your browser settings and, where implemented, via the cookie banner on the site. Please be aware that blocking some cookies may affect how the website functions.

If you would like more detail on the cookies used by this site, please contact me using the details in Section 1.

9. Your data protection rights

You have the following rights in relation to your personal data, subject to certain legal limits:

Right of access – to ask for a copy of the personal data I hold about you.
Right to rectification – to correct inaccurate or incomplete data.
Right to erasure – to request that I delete your data in certain circumstances.
Right to restrict processing – to ask me to limit how your data is used.
Right to object – to object to processing based on legitimate interests.
Right to data portability – to receive certain data in a structured, commonly used format and/or request that I transfer it to another controller (where technically feasible).
Right to withdraw consent – where I rely on consent, you can withdraw it at any time.

To exercise any of these rights, please contact me using the details in Section 1.

You also have the right to complain to the UK supervisory authority:

Information Commissioner’s Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113

I would, however, appreciate the chance to deal with your concerns first.

10. Third-party websites

This website may contain links to other websites (for example, official guidance or external resources). I am not responsible for the privacy practices or content of those sites. You should read their own privacy policies before providing any personal information.