Privacy & Data Policy

1. Who We Are

• Data Controller: [LEGAL ENTITY NAME] trading as [TRADING NAME]
• Company number: [COMPANY NUMBER]
• Registered in: [JURISDICTION]
• Business address: [BUSINESS ADDRESS]
• Contact email: [CONTACT EMAIL]
• Telephone: [TELEPHONE]
• WhatsApp: [WHATSAPP NUMBER]

2. What Personal Data We Collect

Information you provide directly

When you submit an enquiry form, request a quote, contact us by phone, email, WhatsApp, or through social media, we may collect the following information solely for the purpose of assessing and providing our services to you:

• Full name
• Email address
• Telephone number
• Address or postcode
• Whether you are a homeowner or landlord
• Property type, such as flat, bungalow, terraced, semi-detached or detached
• Project type requested, such as windows, doors, or windows and doors
• Service-specific details you choose to provide, such as the reason for upgrading, the type of windows or doors required, access issues, preferred materials, or details about your current installation
• A description of any issue or additional context you supply
• Your marketing preferences, where you choose to opt in to offers, deals or updates

Note on special category data: We do not routinely collect special category personal data relating to health, race, religious beliefs, political opinions or similar matters. We will only collect this if there is a clear reason for doing so and with your explicit consent.

Information collected automatically

When you visit our website, our hosting provider may automatically collect limited technical information to keep the site secure and reliable:

• Internet protocol (IP) address or a hashed version of it
• Browser, device and connection information
• Basic server log information, such as the pages requested and the time of the request

3. How We Use Your Data

We use your personal data to:

• Respond to your enquiry and provide the services you have requested
• Prepare quotes, arrange surveys and discuss suitable window or door options
• Provide ongoing customer assistance, installation support and aftercare
• Contact you regarding your enquiry, quote, booking, installation, guarantee or support request
• Send service-related notices where relevant
• Send marketing messages where you have opted in
• Protect the website from misuse, spam or security risks
• Comply with applicable legal or regulatory obligations

4. Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent, where you opt in to marketing or provide explicit consent for a specific purpose
• Legitimate interests, to respond to enquiries, improve our services, protect our website and operate our business
• Contractual necessity, where processing is required to provide a quote, carry out agreed services, manage bookings, provide aftercare, or take steps before entering into a contract with you
• Legal obligation, where we are required to retain data by law, such as for tax, accounting, compliance or record-keeping purposes

5. How We Store and Protect Your Data

Enquiry data submitted through our website is stored securely using industry-standard infrastructure. We retain personal data only for as long as necessary for the purpose it was collected, or as required by law.

All data is stored and processed in accordance with UK GDPR requirements. Access is restricted to authorised personnel and trusted service providers who need access to perform their role.

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

6. Sharing Your Data

We do not sell your personal data.

We may share data with trusted third parties where necessary, including:

• Our website hosting, database and infrastructure providers
• Email, telephone, WhatsApp or communication service providers
• Form, spam-prevention and website security providers
• Installation, supplier or subcontractor partners where needed to deliver the service you have requested
• Professional advisers such as accountants, legal advisers or IT consultants
• Regulators, public authorities or law enforcement where legally required

All third parties are required to process personal data securely and in compliance with data protection legislation.

7. International Data Transfers

Some of our third-party service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as UK-approved standard contractual clauses, adequacy regulations or equivalent safeguards, to ensure your data remains protected.

8. Cookies

Our website does not currently use cookies or similar tracking technologies, and we do not use analytics or advertising cookies.

If we introduce cookies or similar technologies in the future, we will update this policy and, where required, provide a cookie consent tool so you can manage your preferences.

9. Marketing

If you have opted in, we may contact you from time to time with promotional messages, offers or updates by email, telephone, text message, WhatsApp or other agreed communication channels.

You can change your contact preferences or unsubscribe at any time by contacting us at [CONTACT EMAIL], or by clicking the unsubscribe link in our emails where available.

10. Your Rights

Under UK data protection law, you have the right to:

• Access your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of your data
• Object to or restrict processing
• Withdraw consent at any time
• Request data portability
• Complain to the Information Commissioner's Office (ICO)

To exercise any of these rights, please contact us at [CONTACT EMAIL].

11. Complaints

If you have concerns about how we handle your data, please contact us first so we can try to resolve the matter.

You also have the right to complain to the Information Commissioner's Office (ICO) at www.ico.org.uk.

12. Changes to This Policy

We reserve the right to modify this Privacy & Data Policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website.

If we make material changes to this policy, we will update the "Last updated" date above and, where appropriate, provide additional notice on the website.