Privacy Policy
Last updated: 15 August 2026
1. Who we are
Phlush Ltd is committed to protecting and respecting your privacy.
For the purposes of UK data protection law, the data controller is:
Phlush Ltd
57/59 Hatfield Road
Potters Bar
Hertfordshire
EN6 1HS
United Kingdom
Email: Office@phlush.co.uk
This Privacy Policy explains how we collect, use, store and protect personal information when you use our website, submit a customer request, use the Phlush mobile application, communicate with us, or use our services.
2. Information we collect
Depending on how you interact with Phlush Ltd, we may collect:
- Your name
- Email address
- Telephone number
- Job and service address
- Billing address, where applicable
- Tenant name and contact information, where applicable
- Details about the work or service requested
- Photographs supplied in connection with a job or customer request
- Job sheets, survey information, engineer notes and materials used
- Information relating to the progress and completion of work
- Communications you send to us
- Employee and administrator account information where the Phlush app is used by authorised staff
Customers do not need to create an account to submit a customer request. Employee and administrator login facilities are restricted to authorised Phlush Ltd personnel.
3. How we collect information
We may receive personal information when:
- You submit a customer request through our website or app
- You contact us by telephone, email or another communication method
- You provide information or photographs relating to work you require
- An authorised Phlush employee records information while managing or carrying out a job
- Our staff create job sheets, surveys, notes or other records required to provide our services
4. How we use your information
We use personal information to:
- Receive and respond to customer requests
- Contact customers about requested work
- Schedule, assign and manage jobs
- Provide engineers with the information needed to attend and complete work
- Record job details, surveys, materials, notes and photographs
- Manage outstanding and completed work
- Prepare quotations and invoices
- Maintain appropriate records of work carried out
- Provide customer service and deal with queries or complaints
- Operate, maintain and secure the Phlush app and related systems
- Meet our legal, accounting and regulatory obligations
We do not use information submitted through the Phlush app for advertising or marketing purposes.
5. Our lawful basis for using your information
Depending on the circumstances, we process personal information because it is necessary:
- To take steps at your request before entering into a contract or to perform a contract with you;
- To comply with legal obligations that apply to Phlush Ltd; or
- For our legitimate business interests, including managing jobs, maintaining appropriate business records, providing customer service and protecting our systems.
Where another lawful basis is required, we will apply the appropriate basis under applicable data protection law.
6. Photographs
Customers and authorised employees may provide or take photographs in connection with customer requests, surveys and jobs.
These photographs are used to assess, manage, document and complete the relevant work and may remain associated with the corresponding job record.
Please avoid submitting photographs containing personal information that is not relevant to the requested work.
7. How we store and process information
The Phlush app uses cloud services, including Google Firebase, to provide functionality such as secure authentication, database storage and storage of job photographs.
Google generally acts as a data processor when Firebase customers provide personal data concerning their end users, while the Firebase customer remains responsible as data controller for that information.
We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse or disclosure.
8. Sharing your information
We do not sell personal information.
Information may be accessible to:
- Authorised Phlush Ltd employees and administrators who require it to perform their work;
- Service providers that process information on our behalf, including cloud and technology providers such as Google Firebase;
- Professional advisers or service providers where reasonably necessary for our business; and
- Regulators, law enforcement authorities or other organisations where disclosure is required by law.
Where third-party providers process personal information on our behalf, we expect appropriate protections to be in place.
9. International data transfers
Some technology providers used by Phlush Ltd may process information outside the United Kingdom.
Where personal information is transferred internationally, we will rely on appropriate legal mechanisms and safeguards as required by applicable data protection law.
10. How long we keep information
We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing our services, maintaining job and business records, handling disputes and meeting legal, tax, accounting and regulatory requirements.
The exact retention period may vary depending on the type of information and the reason it is held.
When information is no longer reasonably required, it will be deleted or otherwise securely disposed of where appropriate.
11. Your rights
Depending on the circumstances and applicable data protection law, you may have rights including:
- The right to request access to personal information we hold about you
- The right to ask us to correct inaccurate or incomplete information
- The right to request deletion of your personal information in certain circumstances
- The right to request restriction of processing in certain circumstances
- The right to object to certain processing
- The right to data portability where applicable
These rights can depend on the lawful basis on which information is processed and are not absolute in every situation.
To make a privacy request, contact Office@phlush.co.uk.
The ICO confirms that privacy information should explain the rights available to individuals and how long information is retained or the criteria used to determine retention.
12. Marketing
We do not use personal information submitted through the Phlush app or customer request process for marketing purposes.
If our practices change in the future, this Privacy Policy will be updated and any additional permissions required by law will be obtained.
13. Automated decision-making and tracking
Phlush Ltd does not use the personal information submitted through the Phlush app to make solely automated decisions that have legal or similarly significant effects on customers.
The Phlush app is not intended to track customers across third-party apps or websites for advertising purposes.
14. Complaints
If you have concerns about how Phlush Ltd uses your personal information, please contact us first at:
Office@phlush.co.uk
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.
Information Commissioner's Office
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, the Phlush app, our technology providers or applicable law.
The latest version will be published on our website.