Privacy Policy

1. Who We Are

BestUPVC Doors Ltd is the data controller for personal information collected through this website and in connection with our services. We are registered in England and Wales and trade at upvcdoor.uk.

If you have any questions about how we handle your data, please contact us at info@upvcdoor.uk or call 01234 567 890.

2. Data We Collect

Information you give us directly

• Your name, phone number and email address when you request a quote
• Your home address and postcode for survey and installation purposes
• Details of the products you are interested in
• Any messages or notes you include in enquiry forms

Information collected automatically

• Your IP address and browser type when you visit our website
• Pages you visit and how long you spend on them (via Google Analytics)
• How you arrived at our website (search engine, referral, direct)
• Cookie data — see our Cookie Policy for full details

Information from third parties

• Reviews and ratings submitted via Google or other platforms
• Enquiries submitted via third-party lead generation services

3. How We Use Your Data

We will never use your data for purposes incompatible with those listed above without first obtaining your consent.

4. Legal Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

• Contract performance — processing necessary to carry out a contract with you, such as conducting a survey or completing an installation.
• Legitimate interests — processing necessary for our legitimate business interests, such as responding to enquiries and improving our services, where these are not overridden by your rights.
• Legal obligation — processing required to comply with a legal obligation, such as issuing FENSA certificates.
• Consent — where we ask for your consent, such as for marketing emails, you can withdraw it at any time.

5. Sharing Your Data

We do not sell your personal data to any third party. We may share your data with:

• FENSA — to register your installation and issue your compliance certificate
• Google — anonymised analytics data via Google Analytics
• Email service providers — to send you quote confirmations and correspondence
• Finance providers — only if you apply for finance, with your explicit consent
• Legal or regulatory authorities — where required by law

All third parties we work with are required to handle your data securely and in accordance with UK GDPR.

6. How Long We Keep Your Data

• Enquiries that don't result in an order — 12 months from last contact
• Customer records (completed installations) — 15 years (in line with our guarantee period)
• Financial records — 7 years (as required by HMRC)
• Website analytics data — 26 months (Google Analytics default)
• Marketing consent records — until you withdraw consent

After these periods, your data is securely deleted or anonymised.

7. Your Rights

In full, your rights include:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — ask us to correct inaccurate or incomplete data
• Right to erasure — ask us to delete your data in certain circumstances
• Right to restrict processing — ask us to pause processing of your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at info@upvcdoor.uk. We will respond within one month. If you are unhappy with our response, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or call 0303 123 1113.

8. Cookies

We use cookies on our website to help it function correctly and to understand how visitors use it. For full details of the cookies we use and how to control them, please read our Cookie Policy.

9. Data Security

We take the security of your personal data seriously. We use appropriate technical and organisational measures to protect your data against unauthorised access, loss or destruction, including:

• SSL encryption on our website (HTTPS)
• Password-protected systems and restricted staff access
• Regular security updates and monitoring
• Secure disposal of physical documents containing personal data

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform you directly where required.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

11. Contact Us

For any questions about this Privacy Policy or how we handle your data:

• Email: info@upvcdoor.uk
• Phone: 01234 567 890
• Website: upvcdoor.uk/contact
• Post: BestUPVC Doors Ltd, Yorkshire, England

To complain to the ICO: ico.org.uk or call 0303 123 1113.