How we handle your data

Access & authentication

Only authorised Climtech staff can sign in to the admin area to manage clients, site visits, quotes and invoices.

• Email and password sign-in, with Google sign-in available for staff.
• Admin areas are protected and require an authenticated session.
• Customer-facing quote and invoice links use unique, hard-to-guess tokens.

Data we collect

We collect only what we need to respond to your enquiry and deliver the work you request.

• Contact details you submit: name, phone, email, address.
• Service request details: category, sub-service, description, preferred visit date and slot.
• Quote, invoice, and payment records related to work we do for you.

How your data is protected

Data is stored in our managed cloud database with row-level access controls. Traffic between your browser and our site is encrypted in transit using HTTPS.

• Row-level security rules restrict who can read or change each record.
• Service-role and administrative operations are performed server-side, not in the browser.
• Database credentials and API secrets are kept in secure server-side storage.

Email & communications

We use your email and phone number only to respond to your request, confirm site visits, and send quotes, invoices, and related updates. Transactional emails include an unsubscribe option where applicable.

Retention, access & deletion

We keep client, quote, invoice, and payment records for as long as needed to deliver our services and meet legal or accounting obligations. You can ask us to review, correct, or delete the personal data we hold about you.

Reporting a security concern

If you believe you've found a security issue with our website or have a privacy question, please contact us so we can investigate. Include steps to reproduce the issue where possible and do not share sensitive details publicly.