Privacy Policy
Version 1.3 · Last updated 24 September 2026
This privacy policy explains how LP247 collects, uses and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
LP247 ("we", "us", "our") operates a marketplace platform at lp247boilerservicingbooking.base44.app that connects property owners, tenants, letting agents and social housing providers with independent, self-employed Gas Safe registered heating engineers ("engineers" or "traders"). LP247 is not the employer or contractor of any engineer listed on the platform. We are the data controller for the personal data you give us when you use the platform. The operating company's registered name, company number and registered office are shown at the top of this page and in the site footer. LP247 is registered with the Information Commissioner's Office (ICO) as a data controller and processes personal data in accordance with the UK GDPR and the Data Protection Act 2018.
2. Data we collect
Customers: name, email, phone number, property address and postcode, and card payment details processed by our payment provider Stripe. Engineers: name, trade name, email, phone, business address, home postcode, Gas Safe registration number and expiry, Gas Safe card images, public liability insurance details, DBS certificate, Stripe payout details, and diary/availability data. Organisation members: organisation name, contact name, email, phone, registered address, VAT number (optional), and member user accounts. We also collect usage data such as pages visited, booking activity and device information via cookies and similar technologies.
3. Lawful basis for processing
We process your personal data under the following lawful bases as set out in UK GDPR and the Data Protection Act 2018: (a) performance of a contract — to facilitate your booking or engineer assignment and process payments; (b) legal obligation — to hold Gas Safe registration evidence and comply with tax and safety regulations; (c) legitimate interests — to operate and improve the marketplace, prevent fraud, and communicate service updates; and (d) consent — for optional marketing communications, which you can withdraw at any time. You provide your information voluntarily, but certain data is required to use the booking and registration features.
4. How we use your data
We use your data to match customers with engineers by postcode sector, process bookings and card authorisations, verify engineer Gas Safe registration and insurance, schedule and remind you of appointments, generate and email safety certificates (CP12 and related forms), calculate and collect platform fees, send service and account notifications, maintain records for legal and tax compliance, and improve the platform. We do not sell your personal data to third parties.
5. Data sharing
We share your data only as necessary to operate the platform: with your chosen engineer so they can attend your property and complete the job; with Stripe to process card authorisations and payouts; with our email delivery provider to send booking and certificate emails; with organisation members who assign work to engineers within their portfolio; and with authorities where required by law. Engineer compliance documents (Gas Safe card images, DBS, insurance certificates) are stored privately and shared only with organisation reviewers via time-limited secure links, or with administrators. Customers do not see engineer compliance document images — only public verification status.
6. Retention
We keep booking, payment and safety certificate records for the period required by gas safety and tax legislation (a minimum of two years for gas safety records and up to six years for financial records). Engineer compliance documents are retained while the engineer is active on the platform and for a reasonable period after deactivation. You may request deletion of your account and personal data at any time, subject to records we are required to keep by law — this means certain booking, payment and safety records may be retained beyond account deletion for the statutory periods above, but will not be used for any other purpose.
7. Your rights
Under UK GDPR you have the right to access your personal data, rectify inaccurate data, erase your data (subject to legal retention), restrict or object to processing, data portability, and withdraw consent at any time. To exercise any of these rights, contact us using the details provided on the platform. If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
8. Cookies and analytics
We use essential cookies to keep you logged in and remember your session — these are always on. We also use analytics cookies to understand how the platform is used so we can improve it. Analytics cookies are only switched on after you give consent via the cookie banner on your first visit; you can accept or reject them and change your choice at any time using 'Cookie settings' in the footer or on this page. We do not use cookies for targeted advertising.
9. International transfers
Your data is stored and processed predominantly within the United Kingdom and European Economic Area. Where any processor operates outside these regions (for example, certain Stripe or cloud infrastructure services), we rely on appropriate safeguards such as Standard Contractual Clauses to protect your data.
10. Security
We use industry-standard measures to protect your data, including encryption in transit, access controls, and private storage for sensitive compliance documents. Card details are never stored on our servers — they are handled entirely by Stripe, which is certified to PCI DSS Level 1.
11. Contacts
If you have any questions about this privacy policy or how we handle your data, please contact us using the company details shown at the top of this page and in the site footer. We will respond in line with our statutory obligations under UK GDPR.