Privacy policy
We are in people's houses. We take the same care with your information as we do with your plaster. This page says plainly what we hold, why we hold it and how to have it back or removed.
Ribble AV Ltd is the data controller
Ribble AV Ltd designs, installs and maintains audio visual and smart building systems from Hawkshaw Farm, Longsight Road, Clayton-le-Dale, BB2 7JA. We decide what happens to the information described here, which makes us the controller under the UK GDPR.
Anything on this page you would rather ask us about in person: 01254 917310 or hello@ribbleav.co.uk.
Enough to design the job and look after it afterwards
We do not collect anything speculatively. Depending on how far a project goes, we may hold:
- —Enquiry details. Your name, email address, telephone number, the property address and what you told us you are trying to do.
- —Design and survey records. Site notes, measurements, photographs of the fabric of the building, architects' drawings and the names of the other trades on the job.
- —Correspondence. Emails, texts, call notes and the quotations and variations that came out of them.
- —Account records. Invoices, payments and the billing address. We do not store card details; payments are handled by our bank and our accounting software.
- —System records. The as-installed configuration of your system, network details, serial numbers, warranty registrations and the account you use to sign in to the control app.
- —Website data. Standard server logs, and analytics only if you accept them. See the cookie policy.
We do not ask for special category data. If something relevant comes up in conversation — a hearing requirement that changes how we set a system up, for instance — we note only what we need to do the work properly, and only with your agreement.
Each use, and the lawful basis for it
Where we rely on legitimate interests, the interest is running a small installation business properly: replying to people who contact us, and remembering what we fitted so we can maintain it. You can object at any time and we will stop unless we have to keep the record for tax or warranty reasons.
What we can and cannot see from here
Most systems we install include secure remote access, because it lets us fix a great deal without coming out. Through it we can see the configuration, the health of the network and equipment, and system event logs — which lights were switched, whether a projector reported a fault.
We do not watch camera feeds, listen to microphones or read what is on your screens, and we do not use system logs for anything other than support. Where a system includes cameras or door entry, you remain the controller of that footage; we only ever look at it with you, at your request, to prove a fault.
If you would rather remote access were switched off, say so and we will disable it. Support then means a visit, which usually costs more and takes longer. That is the whole trade-off.
We ask first, every time
Photographs of finished work are how we win the next job, but they are pictures of your home. We photograph only with your written agreement, we never publish the address or your name, and we take out anything personal before the shot.
Change your mind whenever you like and we will take the images down from our own site and channels. Anything already printed, or shared by a manufacturer, we will chase but cannot always recall.
Long enough to be useful, then not at all
- —Enquiries that went no further: 24 months, then deleted.
- —Quotations and designs: 3 years, because people come back to a scheme when the building work finally starts.
- —Invoices and accounting records: 7 years after the end of the tax year, as HMRC requires.
- —System configuration and as-installed records: for as long as the system is in service, plus 2 years — this is what lets us support a system we fitted a decade ago.
- —Website analytics: up to 14 months in aggregate.
Where it lives and how it is protected
Our records sit in UK and EU data centres wherever we have the choice. Some of the platforms we depend on are American — manufacturer support portals, in particular — and those transfers rely on the UK international data transfer addendum or the provider's approved safeguards.
Access is limited to the people doing your job. Accounts use two-factor authentication, devices are encrypted, and system passwords are held in a password manager rather than a spreadsheet. If something ever goes wrong that puts you at risk, we will tell you and the ICO within 72 hours of knowing.
What you can ask for, and how
Under the UK GDPR you may ask us for a copy of what we hold, to correct it, to delete it, to restrict or object to how we use it, to receive it in a portable format, or to withdraw a consent you gave. Email hello@ribbleav.co.uk and we will reply within one month. There is no charge.
Tell us first and we will put it right. You are also entitled to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
We do not buy lists
Nearly all of our work arrives by recommendation, so there is little for us to send. If you asked to hear from us, you will get the occasional note about work we are proud of, and every one carries an unsubscribe link that works immediately. We will not pass your address to anyone else to market to you.
This page will be revised
When our tools or obligations change, we update this policy and change the date at the top. Anything that materially affects how we handle your information, we will tell you about directly rather than quietly amend.
A person answers
Ribble AV Ltd, Hawkshaw Farm, Longsight Road, Clayton-le-Dale, BB2 7JA. Telephone 01254 917310, or email hello@ribbleav.co.uk.