Last updated: 22 October 2026
Who I am
H.E.R.O. Trades is a trading name of Carlo Cennerazzo, a sole trader based at 95 Main Street, Pathhead, EH37 5PT. I am the data controller for the personal information described in this policy.
I am registered with the Information Commissioner's Office (ICO) as a data controller, registration number ZC277811.
You can contact me at hello@hero-trades.co.uk about anything on this page.
What I collect and why
It depends what you do on the site.
When you use the contact form
Your name, email address and whatever you write in the message, plus any files you attach. I use this to reply to you. The lawful basis is legitimate interests: you have asked me a question and I need your details to answer it.
When you book a call
Your name, email address, the time you booked and any details you give about the fault. I use this to run the booking, send you the joining link and prepare for the call. The lawful basis is performance of a contract.
When you message me on WhatsApp
Your phone number, your WhatsApp name, and the messages, photographs and videos you send me. I use these to diagnose the fault and reply to you. The lawful basis is performance of a contract, or legitimate interests if you are asking a question before booking.
When a letting agent puts us in touch
If you are a tenant, your letting agent may pass me your name, phone number and the property address so I can help with the fault. I use these only for that job. The lawful basis is legitimate interests: your agent has asked me to deal with a repair at the property you rent.
When you pay
Payments are handled by Stripe. I never see or store your card details. Stripe asks for your name and phone number so I can match your payment to our conversation, and I receive confirmation that a payment was made, along with the amount and a reference. The lawful basis is performance of a contract, and legal obligation for keeping records for tax.
During and after a call
Notes about the fault, and any photographs you choose to send or show me of the appliance or system. If a written report is produced, it is based on these. The lawful basis is performance of a contract.
I do not ask for and do not want more information than the job needs. Please do not send photographs containing other people, documents or anything unrelated to the fault.
Who your information is shared with
I do not sell your information and I do not share it for marketing. I use the following providers to run the service, and your information passes through them:
Calendly, for bookings and scheduling. Stripe, for payment processing. Google, for the video call, calendar entries and email routing. Zoho Mail, for my business email. WhatsApp (part of Meta), for messages and photographs sent that way. Google reCAPTCHA, for spam protection on the contact form. GoDaddy, for hosting this website.
Each of these has its own privacy policy setting out how it handles data.
If a letting agent arranged the job, I share my report with them. If a visit is needed and you or your agent ask me to arrange one, I pass the engineer the details they need to attend: your name, phone number, the address and my report.
I may also share information where I am required to by law, for example with HMRC or in response to a lawful request.Where your information is held
Some of the providers above are based outside the UK, including in the United States. Where information is transferred outside the UK, it is done on the basis of the safeguards those providers have in place, such as the UK International Data Transfer Addendum or an adequacy decision.
I work remotely and am not always physically in the UK. This does not change how your information is handled, who it is shared with, or your rights under UK data protection law.
How long I keep it
Contact form messages, WhatsApp conversations, booking records, call notes and written reports: 12 months. Records needed for tax and accounting: 6 years, as required by HMRC. Photographs you send, by any route: deleted once the report is issued, unless you ask me to keep them for a follow-up call.
If you would like anything deleted sooner, email me and I will do it where I am not required to keep it.
Your rights
Under UK data protection law you have the right to ask for a copy of the personal information I hold about you, ask me to correct anything that is wrong, ask me to delete it where I am not required to keep it, ask me to restrict how I use it, object to me using it on the basis of legitimate interests, and ask for it in a portable format.
To exercise any of these, email hello@hero-trades.co.uk. I will respond within one month.
Cookies
This website is hosted on GoDaddy Websites + Marketing, which sets cookies necessary for the site to function. Analytics cookies are only set if you accept them on the cookie banner.
The contact form is protected by Google reCAPTCHA. It sets cookies needed to stop spam, and these run whether or not you accept other cookies. Google’s Privacy Policy and Terms apply.
You can also control cookies through your browser settings.
Complaints
If you are unhappy with how I have handled your personal information, please contact me first at hello@hero-trades.co.uk so I can try to put it right.
You also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113.
Changes to this policy
If this policy changes, the updated version will be posted on this page with a new date at the top.