Privacy Policy

Last updated: October 2026

Who we are and our role

Fire Solutions Construction Ltd (“FSC”, “we”, “us” or “our”) is the data controller for the personal information described in this notice. We decide why and how that information is used. Our company number is 16720255. This notice explains how we handle information about website visitors, people who contact us, business contacts and people involved in our projects.

Personal information we collect

Depending on how you interact with FSC, we may collect:

• Identity and business contact details, such as your name, organisation, job role, email address and telephone number.
• Enquiry and quotation details, including building address or postcode, building type, services requested, approximate door numbers and information in your message.
• Project information you provide or that is created during agreed work, such as photographs, plans, specifications, inspection findings, site records and communications.
• Business contact details obtained from your organisation or public business sources such as organisation websites, procurement/tender portals and business directories. This may include registration details and tender correspondence.
• Information you make available or send through FSC’s business pages on Facebook, Instagram, YouTube, Google Business Profile and WhatsApp, such as account/profile names, public comments, messages and any contact details or other information you choose to provide.
• Technical website information, such as your IP address, browser or device details, requested pages, timestamps and security logs.
• Where you work for or with FSC, relevant engagement and site-attendance information, such as your name, work contact details and sign-in/out times. We use Jibble as a timekeeping service for attendance records.
• Information needed to exercise your privacy choices or respond to a request or complaint.

Please do not include sensitive personal information in a website enquiry unless it is necessary and you have agreed a suitable way to send it to us. Fields marked as required on the quotation form are needed to assess and respond to the enquiry; if you do not provide them, we may be unable to do so.

How and why we use personal information

• To answer enquiries and take steps you ask us to take before a contract, including preparing quotations and arranging surveys.
• To deliver, manage and document contracted installation, inspection, repair and maintenance work.
• To register with and use procurement/tender portals, identify suitable opportunities, prepare and submit tenders, and respond to procurement communications.
• To manage FSC’s business pages on social and business platforms, publish company updates and respond to comments or messages.
• To keep project, site-attendance, certification, safety, insurance, tax and accounting records and meet applicable legal or regulatory requirements.
• To operate and secure our website, investigate misuse and protect FSC, our clients and our systems.
• To send relevant business marketing about FSC services where the law allows, and to record and respect objections or unsubscribe requests.
• To provide optional spoken versions of Ask FSC answers. The answer text, not microphone audio, is sent to Microsoft Azure Speech for speech synthesis in the UK South region. Ask FSC does not request or record microphone audio.

Our lawful bases

We use the lawful basis that fits the particular purpose:

• Pre-contract steps and contract: answering a request for a quotation, arranging a survey and delivering or managing agreed work.
• Legal obligation: keeping or sharing information where applicable law requires it, including relevant tax, accounting, health and safety or regulatory records.
• Legitimate interests: managing and protecting our business, securing the website, maintaining appropriate project and attendance records, and promoting relevant services to organisations. We consider the impact on individuals and their rights before relying on this basis. You can object to direct marketing at any time.
• Consent: only where we specifically ask for consent and use it as the lawful basis. You can withdraw it at any time; withdrawal does not affect earlier lawful processing.

If you work for or with FSC, the lawful basis for engagement and attendance records depends on the relationship and purpose. We will provide relevant privacy information when we collect those details.

Business contact details and marketing emails

We may use business contact details to send relevant information about FSC’s fire door installation, inspection, maintenance and related services to organisations such as care homes. Where details identify an individual, we rely on legitimate interests only after considering whether our interests are overridden by that person’s rights and reasonable expectations. For electronic marketing, we also follow the separate PECR rules: where consent is required, we will obtain it; where a corporate-subscriber rule or another valid exception applies, we will identify FSC and provide a valid way to opt out in every marketing message.

We may receive work contact details directly from you or your organisation, or from public business sources such as organisation websites, procurement/tender portals and business directories. When we obtain personal information from another source, we provide the required privacy information within the applicable period and identify the source where required.

FSC uses HubSpot to organise business contacts and prepare and send email campaigns. This may involve names, job titles, organisations, email addresses, marketing preferences, unsubscribe/suppression choices and delivery information. If email engagement tracking is enabled, HubSpot may also record whether a message is opened or a link is clicked and associate that activity with a contact. FSC will use such tracking only where the applicable privacy and electronic communications rules permit it. HubSpot’s tracking may use technologies such as pixels or tracked links; see the HubSpot links in “Who we share information with and international transfers”.

You can object to direct marketing at any time, free of charge. Use the unsubscribe link in a campaign email, reply “no further emails”, or email info@fscfiredoors.co.uk. We will stop using your details for direct marketing. We may retain a minimal suppression record so we can honour your request and avoid contacting you again.

Who we share information with and international transfers

We share information only where needed for the purposes above. Recipients may include:

• Service providers: HubSpot, which hosts FSC’s business contact records and supports email campaign management and sending; Resend, which delivers enquiry emails and states that it stores message content and delivery logs in the United States; Cloudflare, which hosts and secures the website and operates a global network that may process IP addresses, request details and security logs in the United States, the European Union and other countries where it operates; Jibble, which processes attendance records for timekeeping; Microsoft Azure Speech, which receives answer text for optional speech synthesis in the UK South region; jsDelivr and its content-delivery providers, which may receive technical request data when speech is used; and HeyGen, which FSC used to create the company-introduction video and which receives the prompts and reference media supplied for video creation. If those inputs contain personal information, HeyGen may process it. See HubSpot’s privacy policy and data processing agreement, and HeyGen’s privacy policy and data processing addendum for information about their processing roles and terms.
• Social and procurement platforms: Facebook, Instagram and WhatsApp (Meta), YouTube and Google Business Profile, and procurement portal operators such as Find a Tender. These platforms may process information about your account, device and interactions under their own privacy terms. FSC may receive information you choose to share with us through those services. Procurement bodies and contracting authorities may receive contact and tender information where needed to manage a registration, evaluate or respond to a tender, or perform a contract. Where a platform determines its own purposes and means, it acts as a separate controller for that processing.
• People involved in agreed work: our professional advisers, certification bodies, manufacturers, insurers and subcontractors, where they need relevant information to advise on or deliver the project.
• Authorities or other recipients: where disclosure is required by law or is necessary to establish, exercise or defend legal claims.

For transfers outside the UK, we rely on an applicable adequacy decision or another lawful transfer mechanism and appropriate safeguards. HubSpot describes its processing terms and transfer safeguards in its data processing agreement. Resend and Cloudflare describe Standard Contractual Clauses and the UK Addendum in their data processing terms; see Resend's GDPR information, its data processing addendum, Cloudflare's GDPR information and its data processing addendum. Jibble says Jibble 2 service data is stored in Ireland and legacy Jibble 1 may use the United States; its privacy notice describes the safeguards for international transfers. HeyGen says personal information may be processed or stored outside the UK, including in the United States; its privacy policy and data processing addendum describe its transfer safeguards. Please contact us if you need confirmation of the Jibble service used for a particular record or more information about applicable safeguards. We do not sell personal information.

How long we keep information

General enquiries that do not result in work are normally kept for up to 24 months. Business marketing contact details are reviewed periodically and kept only while relevant or until you object. We keep a minimal suppression record for as long as needed to honour your objection. Project, contractual, certification, site-attendance, accounting and compliance records may be kept longer where required by law or needed for insurance, regulatory, contractual or legitimate business purposes. Where no fixed period applies, we use these criteria to decide how long to retain information: the purpose for which it was collected, the length of the client or supplier relationship, applicable limitation periods, and any legal, regulatory or insurance requirements.

Confidentiality and security

FSC limits access to personal information to people who need it for their work. Staff and subcontractors authorised to handle personal information are expected to keep it confidential and follow FSC’s instructions and applicable data-protection requirements. We use technical and organisational measures intended to protect information against unauthorised or unlawful access, loss, misuse, alteration or disclosure. No method of sending information over the internet or by email can be guaranteed completely secure, so please contact us if you need to share particularly sensitive information and want to agree a suitable method.

Your privacy rights and complaints

Depending on the circumstances and the lawful basis, you may have the right to request access to your personal information, correct inaccurate information, request deletion or restriction, object to processing, request data portability, or withdraw consent where consent is the lawful basis. You have an absolute right to object to direct marketing. Some rights are subject to conditions and exemptions.

To exercise a right or ask a question, email info@fscfiredoors.co.uk or write to us at the address below. We will respond within the time required by law, normally one month. You also have the right to complain to the UK Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint.

Use of AI-created content and Ask FSC

Some illustrative website images and elements of FSC’s company-introduction video were created or edited using AI tools. FSC supplied its branding, company information and business imagery for this promotional content. The company-introduction video was made using HeyGen. Some people or presenter imagery is synthetic and illustrative, not an identifiable photograph of an FSC employee or customer. We use this content for marketing and to explain our services; it is not used to make decisions about individuals.

Ask FSC is a website information tool. It searches FSC’s published website pages and policy information in your browser to select an answer; it is not a generative AI service, and this feature does not send the questions you type to FSC’s servers or an AI provider. If you choose an optional spoken answer, the answer text is sent to Microsoft Azure Speech to generate speech, as explained in “How and why we use personal information” and “Who we share information with and international transfers”. Please do not enter personal, confidential or sensitive information into Ask FSC. For a private enquiry, contact us directly.

Where personal information is included in material supplied to an AI service provider, FSC assesses the purpose and lawful basis, uses only information needed for that purpose, reviews the provider’s security, retention, deletion and subprocessor terms, and assesses any international transfers. This notice identifies the provider and describes the relevant processing; please contact us if you need more detail about a particular asset or input. We will assess whether a data protection impact assessment is needed before any processing likely to create a high risk to people’s rights and freedoms.

Automated decisions

FSC does not currently make decisions about individuals solely by automated processing, including profiling, that have legal or similarly significant effects.

Website hosting, cookies and optional voice

Cloudflare processes technical request data to deliver and protect this website and may use strictly necessary security technologies. FSC does not currently use advertising or behavioural-tracking cookies on this website. If we introduce non-essential cookies or similar technologies, we will update this notice and provide a choice where required.

Ask FSC searches the published FSC website pages and FAQs in your browser to prepare text answers. Do not enter sensitive personal information into the chat. If you switch on spoken answers, the answer text is sent to Microsoft Azure Speech in the UK South region for real-time speech synthesis. Microsoft says it does not retain or store the text input or generated audio for this API. Ask FSC does not request or record microphone audio. The speech software is loaded from jsDelivr only when the feature is used; jsDelivr and its content-delivery providers may receive your IP address, browser/request information, timestamp and referrer data to deliver and secure the file. See Microsoft's speech data information and jsDelivr's privacy policy.

Contact us