Privacy Policy
Hefford Services ("we", "us", "our") is a sole trader business operated by Brad Hefford, based in Derbyshire, United Kingdom. We are committed to protecting your privacy and handling personal data in line with the UK GDPR and the Data Protection Act 2018. This policy explains what we collect, why, and your rights.
Who is responsible for your data
For enquiries made through this website and our relationship with our business customers, Hefford Services is the data controller. When we operate the text-back booking service on behalf of a business customer (a trade or service company), we act as a data processor handling their customers' data strictly on that business's instructions, under a separate Data Processing Agreement.
What we collect
- Website enquiries: your name, business name, mobile number, and trade, when you submit our contact form or message us.
- Service operation: when a business uses our service, we process the phone numbers, message content, and job/booking details of people who contact that business, so we can reply, qualify and book jobs, and alert the business owner.
- Payments: billing is handled by Stripe; we do not store your full card details.
Why we use it (lawful basis)
- To respond to your enquiry and set up your service — on the basis of your consent and our legitimate interest in answering you.
- To provide and bill for the service you have signed up to — on the basis of our contract with you.
- To operate the automated text-back on behalf of business customers — on the instructions of that business, who is responsible for the lawful basis for contacting their own customers.
SMS messages
Our service sends and receives SMS text messages to operate the booking line. Anyone can opt out at any time by replying STOP; opt-outs are recorded and honoured, and no further messages are sent.
Who we share data with
We use trusted service providers ("sub-processors") only to run the service: ClickSend (SMS), Twilio (voice, where the missed-call feature is enabled), Stripe (payments), Formspree (website form handling), and our cloud hosting provider. We never sell your personal data or share it for third-party marketing.
Cookies & analytics
This website does not use advertising or tracking cookies. We use a simple, privacy-friendly page counter that records only the page viewed and the time — no cookies, no cross-site tracking, and no identifying personal data.
How long we keep it
Website enquiry data is kept while we are in contact and for a reasonable period afterwards. Data processed on behalf of a business customer is retained per their instructions and deleted on request or when the service ends.
Your rights
You have the right to access, correct, or delete your personal data, to object to or restrict processing, and to data portability. To exercise any right, contact us using the details below. If a business customer holds your data through our service, we will pass your request to them as the controller.
Complaints
You can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Contact us
Brad Hefford, Hefford Services
18 Sutton Driveway, Chellaston, Derby, DE24 9FS
Phone/text: 07557 055553
Email: heffordbradley@gmail.com