Privacy Policy
Last updated: 28/06/2026
1. Who we are
Pest Technologies Ltd ("we", "us", "our") is the data controller responsible for your personal data. We trade as Malvern Pest Control and provide pest control and drone thermal survey services across Worcestershire, Herefordshire, Gloucestershire and surrounding areas.
Registered company: Pest Technologies Ltd, company number 16318678
Registered office: 1 Murren Avenue, Malvern, WR14 3QB
Email: Contact@malvernpestcontrol.co.uk
Phone: +44 7415 349940
ICO registration number: [ICO Registration Number]
You can verify our ICO registration at ico.org.uk/ESDWebPages/Search
This policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have. It applies to all personal data we process in connection with our website and our services.
2. The personal data we collect
Depending on how you interact with us, we may collect the following:
Contact details: your name, address, telephone number and email address.
Property information: the address and access details of the property where services are to be carried out.
Pest issue details: information you provide about the nature and history of the pest problem.
Financial information: invoicing details, including bank details where payment is made by bank transfer.
Drone survey data: thermal imagery, aerial photographs and inspection data captured at your property during a drone survey. This may incidentally capture images of neighbouring properties or land.
Communications: records of phone calls, emails or messages between you and us relating to your enquiry or job.
Website usage data: technical data such as your IP address, browser type and pages visited, collected automatically by our website platform (Squarespace) when you visit malvernpestcontrol.co.uk.
We do not collect any special category personal data (such as health, racial or ethnic origin, or criminal conviction data) and we ask that you do not send us such information.
3. How we collect your personal data
We collect personal data through the following means:
Directly from you — when you telephone us, email us, or contact us via our website to request a survey or service.
During service delivery — information gathered by our technicians during a site visit or drone survey.
Automatically — through our website platform (Squarespace), which collects standard technical and analytics data when you visit our site.
4. Why we use your personal data and our lawful basis
Under the UK General Data Protection Regulation (UK GDPR), we must have a lawful basis for processing your personal data. The table below sets out our purposes and the lawful basis for each.
Purpose
Lawful basis
Responding to your enquiry and providing a quotation
Contract (Article 6(1)(b)) — necessary to take steps prior to entering a contract
Delivering pest control or drone survey services
Contract (Article 6(1)(b)) — necessary for the performance of a contract with you
Sending invoices and processing payment
Contract (Article 6(1)(b)) / Legal obligation (Article 6(1)(c)) — required for tax and accounting records
Keeping records of completed work (including treatment records required by BPCA standards)
Legal obligation (Article 6(1)(c)) and Legitimate interests (Article 6(1)(f))
Contacting you to confirm, reschedule or follow up on a job
Legitimate interests (Article 6(1)(f)) — necessary for the proper management of your service
Ensuring the safety and quality of our drone survey operations, including retaining survey imagery
Legitimate interests (Article 6(1)(f)) — necessary for quality assurance and potential liability management
Analysing website usage to improve our site (via Squarespace analytics)
Legitimate interests (Article 6(1)(f)) — to maintain and improve our online presence
Where we rely on legitimate interests as our lawful basis, we have considered whether our interests are overridden by your rights and concluded that they are not. You have the right to object to processing based on legitimate interests at any time (see Section 8).
5. Drone survey data
When we carry out thermal drone surveys, our aircraft may capture thermal imagery, aerial photographs and inspection data of your property. This data belongs to the survey record and is processed on the lawful basis of contract performance and legitimate interests (quality assurance and liability management).
Drone surveys are conducted in compliance with UK Civil Aviation Authority (CAA) regulations. Our aircraft may incidentally capture images of neighbouring properties or public areas during a survey. We take reasonable steps to minimise this and do not use incidental imagery for any purpose other than delivering the agreed service.
Unless otherwise agreed in writing, survey imagery and reports are retained for six years following the date of the survey. You may request deletion of imagery relating to your property earlier than this, subject to our legitimate interests in retaining records for liability purposes.
6. How long we keep your data
We retain personal data only for as long as necessary for the purposes set out in this policy:
Customer and job records: retained for six years from the date of the last service, in line with the Limitation Act 1980 (which governs the period within which legal claims may be brought).
Financial and invoicing records: retained for six years from the end of the relevant tax year, as required by HMRC.
Drone survey imagery and reports: retained for six years from the date of the survey, unless you request earlier deletion and we have no overriding legitimate interest in retention.
Enquiries that did not proceed to a booking: retained for up to 12 months from the date of the enquiry, then deleted.
Website analytics data: retained by Squarespace in accordance with their own privacy policy and data retention schedule.
7. Who we share your data with
We do not sell, rent or trade your personal data. We share your data only in the following limited circumstances:
HMRC and regulatory bodies: where we are legally required to disclose information, for example to comply with tax obligations or in response to a lawful request from a regulatory authority.
BPCA: as a BPCA-registered member, we may be required to provide treatment records or other documentation in the context of a complaint or audit.
Squarespace: our website is hosted on Squarespace, which processes limited technical data (such as IP addresses) when you visit our site. Squarespace acts as a data processor on our behalf. Their privacy policy is available at squarespace.com/privacy.
Professional advisers: our accountant, solicitor or insurer, where necessary and on a confidential basis.
We do not share your data with subcontractors. All pest control and drone survey work is carried out by our own operators.
8. International transfers
We do not routinely transfer your personal data outside the United Kingdom. Squarespace, as our website host, may process some data in the United States. Squarespace relies on Standard Contractual Clauses and the UK International Data Transfer Agreement (IDTA) to ensure adequate protection for any such transfers. Full details are available in Squarespace's privacy policy.
9. Your rights under UK GDPR
Under UK data protection law, you have the following rights in relation to your personal data:
Right of access: you may request a copy of the personal data we hold about you (a "subject access request").
Right to rectification: you may ask us to correct inaccurate or incomplete data.
Right to erasure: you may ask us to delete your personal data where there is no compelling reason for us to continue processing it. Note that we may need to retain certain data to comply with legal obligations.
Right to restriction: you may ask us to restrict how we process your data in certain circumstances.
Right to data portability: where processing is based on your consent or a contract, and is carried out by automated means, you may request a copy of your data in a structured, commonly used and machine-readable format.
Right to object: you have the right to object to processing based on legitimate interests, including for direct marketing purposes. We will stop processing unless we have compelling legitimate grounds that override your interests.
Rights relating to automated decision-making: we do not make any automated decisions (including profiling) that produce legal or similarly significant effects on you.
To exercise any of these rights, please contact us at Contact@malvernpestcontrol.co.uk or by post to 1 Murren Avenue, Malvern, WR14 3QB. We will respond within one calendar month of receiving your request. We may need to verify your identity before processing your request.
10. Cookies
Our website (malvernpestcontrol.co.uk) uses cookies — small text files stored on your device — to help the site function and to collect basic analytics about how it is used. These are set by Squarespace, our website platform, and may include:
Essential cookies: required for the website to function correctly. These cannot be disabled.
Analytics cookies: used to collect anonymous data about visitor numbers and page popularity, to help us improve the site.
You can control and delete cookies through your browser settings. Please note that disabling cookies may affect the functionality of the website. For further information about how Squarespace uses cookies, please refer to squarespace.com/privacy.
11. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we do, we will update the "last updated" date at the top of this page. We encourage you to review this policy periodically.
12. Contact us
For any questions about this Privacy Policy or how we handle your personal data, please contact us:
Phone: +44 7415 349940
Post: Pest Technologies Ltd, 1 Murren Avenue, Malvern, WR14 3QB.