Last updated: 19 September 2026
Source Water Compliance respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, request a quotation, use our services or otherwise communicate with us.
1. Who we are
Source Water Compliance provides water hygiene, Legionella risk assessment and associated compliance services.
For the purposes of UK data protection law, the organisation responsible for your personal information is:
Source Water Compliance
Suite RA01, 195–197 Wood Street, London, E17 3NU
Email: contact@sourcewatercompliance.co.uk
Telephone: +44 (0)20 8058 1979
If you have any questions about this Privacy Policy or how we handle your personal information, please contact us using the details above.
2. Information we may collect
Depending on how you interact with us, we may collect information including:
- your name;
- company or organisation name;
- job title;
- business address or site address;
- email address;
- telephone number;
- information you provide when requesting a quotation or making an enquiry;
- details relating to sites at which we are asked to carry out services;
- correspondence between you and Source Water Compliance;
- information required to arrange and provide our services;
- billing and payment information;
- technical information relating to your use of our website, such as IP address, browser type and device information; and
- information collected through cookies or similar technologies.
We will only collect information that is reasonably necessary for the purposes for which it is being used.
3. How we collect your information
We may collect personal information:
- directly from you when you contact us by telephone, email, website form or another method;
- when you request a quotation or engage us to provide services;
- when you provide information relating to a property, site or organisation;
- during site visits and assessments;
- through our website and its associated technologies;
- from your employer or another organisation where they have asked us to provide services;
- from contractors, facilities management companies or other parties involved with a site; and
- from publicly available sources where appropriate.
4. How we use your information
We may use personal information to:
- respond to enquiries;
- prepare and provide quotations;
- arrange site visits;
- carry out Legionella risk assessments, water hygiene surveys and other compliance services;
- prepare reports and associated documentation;
- communicate findings, recommendations and remedial actions;
- manage our relationship with clients;
- administer contracts and accounts;
- issue invoices and process payments;
- maintain records of work carried out;
- comply with legal, regulatory and professional obligations;
- maintain and improve our website and services;
- protect our business, systems and website against misuse or security threats; and
- send relevant business communications or marketing where permitted by law.
We will not use your personal information for purposes that are incompatible with those for which it was originally collected unless we have a lawful basis to do so.
5. Our lawful bases for processing
UK data protection law requires us to have a lawful basis for using personal information.
Depending on the circumstances, we may rely on:
Contract – where processing is necessary to provide services you have requested or to take steps before entering into a contract.
Legitimate interests – where processing is necessary for the legitimate operation of our business, including responding to business enquiries, maintaining client relationships, administering our services and protecting our business systems.
Legal obligation – where we are required to retain or process information to comply with a legal or regulatory requirement.
Consent – where you have specifically agreed to a particular use of your information. Where we rely on consent, you may withdraw it at any time.
6. Site reports and assessment information
As part of our services, we may collect information concerning buildings, water systems, equipment, maintenance arrangements and persons responsible for managing those systems.
Reports may include names, job titles and contact information for individuals involved in managing a property or its water systems where this information is relevant to the service being provided.
We will only include personal information within reports where it is appropriate and relevant.
7. Sharing your information
We do not sell personal information.
Where necessary, we may share information with trusted organisations that help us operate our business or provide our services, including:
- IT and website service providers;
- cloud storage and software providers;
- accountants and professional advisers;
- payment and banking service providers;
- laboratories or specialist contractors where relevant to the services being provided;
- subcontractors working on our behalf; and
- regulators, government authorities or law enforcement agencies where disclosure is required by law.
Where another organisation processes personal information on our behalf, we take reasonable steps to ensure appropriate data protection arrangements are in place.
8. International transfers
Some service providers we use may process or store information outside the United Kingdom.
Where personal information is transferred internationally, we will take appropriate steps to ensure that the information receives a level of protection consistent with UK data protection requirements.
This may include relying on an applicable UK adequacy decision or appropriate contractual safeguards.
9. How long we keep your information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including satisfying legal, contractual, insurance, professional and accounting requirements.
The precise retention period will depend on the type of information concerned and the nature of the services provided.
When information is no longer required, we will securely delete, destroy or anonymise it where appropriate.
10. Keeping your information secure
We take reasonable technical and organisational measures to protect personal information against:
- unauthorised access;
- loss;
- misuse;
- alteration;
- disclosure; and
- accidental destruction.
Access to personal information is restricted to people who reasonably need it for legitimate business purposes.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
11. Cookies and website analytics
Our website may use cookies and similar technologies.
Cookies are small files stored on your device which may be used to enable website functionality, remember preferences, understand how visitors use the website or provide other website features.
Where required, we will ask for your consent before placing non-essential cookies on your device.
Strictly necessary cookies may be used without consent where they are required for the website to function properly.
You can manage your cookie choices through our website’s cookie controls and through your browser settings.
Further information about the cookies used on this website should be provided in our Cookie Policy.
12. Marketing communications
We may occasionally contact existing or prospective business customers about services we believe may be relevant to them where permitted by law.
You can ask us to stop sending marketing communications at any time by contacting us or using any unsubscribe option provided within the communication.
Stopping marketing communications will not prevent us from contacting you where necessary in connection with an existing contract, quotation, assessment or other service.
13. Your data protection rights
Depending on the circumstances, UK data protection law provides you with rights concerning your personal information.
These may include the right to:
- request access to personal information we hold about you;
- ask us to correct inaccurate or incomplete information;
- ask us to erase your personal information in certain circumstances;
- ask us to restrict how your information is used;
- object to certain uses of your information;
- request the transfer of information in certain circumstances; and
- withdraw consent where our processing is based on consent.
These rights are not absolute and may not apply in every circumstance.
To exercise any of these rights, please contact us using the details given at the beginning of this Privacy Policy.
14. Complaints
If you have concerns about how we use your personal information, please contact us in the first instance so that we can investigate your concerns.
You also have the right to complain to the UK supervisory authority for data protection:
Information Commissioner’s Office (ICO)
Further information is available from the ICO at www.ico.org.uk.
15. Third-party websites
Our website may contain links to websites operated by other organisations.
We are not responsible for the privacy practices, security or content of external websites. You should review the privacy policy of any third-party website you visit.
16. Changes to this Privacy Policy
We may update this Privacy Policy periodically to reflect changes to our business, website, services or legal requirements.
The latest version will be published on this website and the date at the top of the policy will show when it was last updated.