Privacy Policy
BMAH Ltd · Last updated: 20 September 2026
1. Who we are
BMAH Ltd (“BMAH”, “we”, “us”) is a duct cleaning company. We are the controller of the personal information described in this policy, which means we decide how and why it is used.
Registered office: 127 Oakwood Avenue Email: info@bmah.co.uk Phone / WhatsApp: +44 1924 654361
2. What information we collect
When you contact us or use our services, we may collect:
- your name, phone number, email address and social media username or ID;
- the address and details of the property or premises where work is needed;
- the content of messages you send us by WhatsApp, Instagram, email, phone or our website, including any photos, files or measurements you share;
- details of quotes, bookings, jobs and payments.
Please don’t send us sensitive information such as health details.
3. How we use it, and why
- To reply to your enquiries and give you quotes. Our legitimate interest in running our business, and taking steps at your request before a contract.
- To carry out jobs, take payment and keep records. To perform our contract with you, and to meet legal duties such as accounting and tax.
- To keep our business secure and filter out spam. Our legitimate interests.
- To tell you about our services. Only where you have agreed or the law allows, and you can opt out at any time.
4. WhatsApp and Instagram
We use WhatsApp and Instagram, which are run by Meta, to talk to customers. When you message us there, Meta handles your information under its own privacy policies. We receive your message, your phone number or Instagram ID, and your profile name.
5. Automated tools and AI
To reply quickly, we use software, including an AI service, to read incoming messages, sort them by priority and draft suggested replies. A member of our team reviews and approves every reply before it is sent. We do not make decisions with legal or similarly significant effects about you solely by automated means. Messages that look like spam or unsolicited sales pitches may be filtered out automatically.
The text of your message may be sent to our AI provider (OpenAI) for this purpose. We do not opt in to letting our AI provider use your messages to train its models.
6. Who we share it with
We do not sell your personal information. We share it only with service providers who help us run our business, under terms that require them to protect it:
- messaging and email providers (Meta’s WhatsApp and Instagram, Titan Email, Microsoft Outlook);
- cloud hosting and database providers (Supabase);
- a private team messaging tool (Telegram), where we review draft replies;
- our AI provider (OpenAI);
- our accountants, payment providers and professional advisers where needed;
- public authorities where the law requires it.
7. Transfers outside the UK
Some of these providers operate in or process data in other countries, including the United States. Where that happens, we make sure appropriate safeguards recognised under UK law are in place.
8. How long we keep it
- Enquiries that don’t become a job: up to 12 months.
- Customer, job and payment records: 6 years after the job, for accounting and tax purposes.
- Marketing preferences: until you opt out.
9. Your rights
Under UK data protection law you can ask us to give you a copy of your information, correct it, delete it, restrict or object to how we use it, or move it to another provider. Where we rely on your consent, you can withdraw it at any time. Contact us at info@bmah.co.uk and we will respond within one month.
If you are unhappy with how we handle your information, you can complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113).
10. Deleting your data
To ask us to delete your information, email info@bmah.co.uk with the subject “Delete my data”, or message us on WhatsApp or Instagram saying “delete my data”. We will confirm it’s you and delete your information within one month, except records we are legally required to keep, such as invoices.
11. Security
We use reasonable technical and organisational measures to protect your information, including encrypted connections and restricting access to authorised people.
12. Children
Our services are not aimed at children and we do not knowingly collect their information.
13. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.
14. Contact us
BMAH Ltd, 127 Oakwood Avenue · info@bmah.co.uk · +44 1924 654361
