If you:

• Keep customer details on your phone or computer
• Send invoices or quotes via email
• Use a CRM or booking system
• Have CCTV at your premises

…then GDPR applies to you.

But don’t panic — it’s not as scary as it sounds. Here’s what you really need to know:

What You Should Be Doing

• Only collect what you need – Don’t hoard data. If you don’t need someone’s birthday, don’t ask for it.
• Keep it secure – Use passwords, antivirus software, and avoid scribbling customer info on scraps of paper.
• Be clear with customers – Let them know what you’re doing with their data. A simple privacy notice on your website or invoices works wonders.
• Don’t keep data forever – If a job’s done and dusted, consider deleting old info you no longer need.

Common Mistakes

• Using personal WhatsApp for business chats without consent.
• Leaving printed invoices in your van.
• Not updating your privacy policy since 2018 (yes, we see you 👀).

Quick Wins

• Use secure invoicing apps like Xero or QuickBooks.
• Add a privacy notice to your website or email footer.
• Lock your phone and laptop with a passcode.

GDPR isn’t about making life harder — it’s about protecting your customers and your reputation. And in today’s world, that’s worth its weight in copper piping.

Dont be concerned, just start here: https://ico.org.uk/first-steps