Privacy notice

Version 2026-09-11 · effective 11 September 2026

This notice explains how we handle personal information. If the wording changes materially, a new immutable privacy-notice version and content hash will be issued.

1. Who we are

Confirm A Kill provides domestic and commercial pest control from Nottingham. For day-to-day contact we use 9 Shelley Road, Nottingham, NG5 6HN, telephone 0115 913 5724, and[email protected].

The operator trading as Confirm A Kill is the controller of personal information used to respond to enquiries and deliver services. Company number is not applicable. The operator is not VAT registered and no VAT number is published. We do not currently name a Data Protection Officer unless one is formally appointed and confirmed.

2. Scope

This notice covers personal information collected through this website (including the enquiry form and photograph uploads), by telephone or email, and through the customer relationship management (CRM) tools we use to quote, schedule and document work. It does not cover websites we link to that are operated by other organisations.

3. Information we collect

Depending on how you contact us and the service you need, we may process:

• Identity and contact details — name, phone number, email address, organisation.
• Property and service details — address, property type, access notes, and pest-related observations you choose to share.
• Enquiry context — preferred contact method, urgency, service category, and marketing campaign parameters that arrived with your visit (stored only to complete an enquiry you choose to send).
• Correspondence and service records — messages, internal notes, tasks, appointments, quotes, quote decisions, jobs, invoices and related audit events.
• Photographs and documents you upload — the file itself plus technical validation data needed to scan, process and store it securely.
• Website privacy choices — whether you allow optional analytics or marketing technologies, and the preference version you accepted.
• Security and abuse-prevention signals — for example Cloudflare Turnstile responses when you interact with an enquiry form, and limited operational logs needed to keep the service secure.

Please do not send medical information, special-category data or anything not needed to assess or deliver the service. If sensitive information is sent accidentally, contact us so we can handle it appropriately.

4. Photographs and metadata

Optional photograph uploads help with identification. Our upload pipeline validates files, scans them for malware where configured, and processes images so that embedded metadata such as EXIF GPS location and similar camera tags is stripped from the stored processed image wherever the pipeline successfully completes. Do not photograph people without a good reason, and only upload images that help us understand the pest problem.

5. How and why we use information

We use personal information for the following purposes:

• Responding to enquiries and preparing quotes — taking steps at your request before a contract (UK GDPR Art. 6(1)(b) where applicable, otherwise legitimate interests in responding to business enquiries).
• Providing contracted services — arranging access, carrying out and documenting treatments, payments and customer communications (contract / legitimate interests).
• Operating the CRM safely — allocating work, preventing duplicate records, securing systems, detecting abuse and establishing or defending legal claims (legitimate interests, balanced against your rights).
• Legal duties — tax, accounting, health and safety or other obligations that apply (legal obligation).
• Optional email marketing — only where you give a separate, unchecked permission (or another lawful route that has been assessed). Withdrawing marketing consent does not stop us using your details to deliver a service you asked for.
• Optional website analytics / marketing tags — only according to your privacy choices. First-party analytics events and Google Analytics 4 (when configured) load only after an analytics choice; advertising tags load only after a marketing choice.

6. Who receives information

Authorised Confirm A Kill staff and contractors may access the CRM where needed for their work. Specialist processors may provide website and API hosting, database hosting, private object storage, malware scanning and image processing, transactional email, security and bot protection (including Cloudflare Turnstile), and — only if enabled and consented — analytics or advertising platforms.

Professional advisers, insurers, payment providers (if used), regulators or public bodies may receive information where necessary or legally required. We do not sell your personal information.

Contact us if you need current processor details for a particular request. We keep written arrangements with processors where required.

7. International transfers

Some processors may process data outside the UK. Where that happens we rely on an adequacy regulation or another approved safeguard. Ask us for the current position if you need detail for a particular request.

8. How long we keep information

We keep information only as long as needed for the relevant purpose, legal duties, dispute handling and security. The periods below are UK SME industry-standard defaults approved by Ray (2026-09) as reasonable for this business:

• Enquiries and customer records: 24 months from last meaningful contact
• Unsuccessful quotes: 24 months from quote date or last contact
• Completed jobs and financial records: 6 years from the end of the relevant accounting period (tax / Limitation Act practice)
• Uploaded files: 24 months after the related job is closed, or earlier when no longer needed for the service
• Communications and audit logs: 24 months from the date of the record
• Marketing permissions and suppression records: While consent or a suppression preference is relied on, then typically 24 months after withdrawal for compliance evidence

Automated retention deletion may still be phased in operationally; until then records are retained according to the periods above and deleted or anonymised when no longer needed. Marketing withdrawal does not erase records we still need on another valid basis (for example a completed job history).

9. Your rights

Under UK data protection law you may have rights to access, correct, erase or restrict your information, object to some uses, receive certain information in a portable form, and withdraw consent where consent is relied on. Rights depend on the circumstances and may be limited by law. Withdrawing consent does not affect processing that already took place.

Use Privacy Choicesto change optional website technologies, or email[email protected] for other requests. We may need to verify your identity before acting.

10. Children

Our services are directed at adults arranging pest control for homes or organisations. We do not knowingly market to children. If you believe a child has provided personal information, contact us and we will delete it where appropriate.

11. Complaints

Please contact us first so we can investigate. You may also complain to the Information Commissioner’s Office via itscomplaints service, or by calling 0303 123 1113.

12. Changes

We version this notice so enquiries and quote acceptances can record the notice presented at the time. Material updates receive a new version and effective date. Continued use of the website after an update is not used as a substitute for a fresh marketing consent where one is required.