Privacy Policy

1. Introduction

Welcome to Conservatory Insulation UK ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or communicate with us.

By using our website or services, you consent to the practices described in this Privacy Policy. If you do not agree with our policies and practices, please do not use our website or services.

2. Information We Collect

Personal Information

We may collect the following types of personal information:

• Contact Information: Name, email address, phone number, postal address
• Service Information: Details about your conservatory, property type, service requirements
• Communication Records: Records of our communications with you, including emails, phone calls, and messages
• Payment Information: Billing address and payment details (processed securely through third-party payment processors)

Technical Information

When you visit our website, we automatically collect certain technical information:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our website
• Referring website and search terms used
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your personal information for the following purposes:

Service Provision

• Providing quotes and consultations for conservatory insulation services
• Scheduling and conducting installations
• Processing payments and managing invoices
• Providing customer support and after-sales service

Communication

• Responding to your inquiries and requests
• Sending service updates and appointment confirmations
• Providing important information about our services
• Sending marketing communications (with your consent)

Business Operations

• Improving our website and services
• Analyzing usage patterns and customer preferences
• Conducting market research and business analysis
• Complying with legal obligations

4. Information Sharing

We do not sell, rent, or trade your personal information to third parties. We may share your information in the following limited circumstances:

Service Providers

We may share information with trusted third-party service providers who assist us in:

• Payment processing
• Website hosting and maintenance
• Email marketing services
• Customer support systems

Legal Requirements

We may disclose your information when required to:

• Comply with applicable laws and regulations
• Respond to legal requests from authorities
• Protect our rights, property, or safety
• Prevent fraud or illegal activities

Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Security Measures Include

• Encryption of sensitive data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training
• Secure payment processing through certified providers
• Regular backup and disaster recovery procedures
• Firewalls and intrusion detection systems

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your information using industry-standard practices.

7. Your Rights

Under UK data protection laws (UK GDPR), you have the following rights regarding your personal information:

Individual Rights

• Right of Access: Request a copy of the personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal information in certain circumstances
• Right to Restrict Processing: Request limitation of how we use your information
• Right to Data Portability: Request transfer of your information to another organization
• Right to Object: Object to processing of your information for direct marketing purposes
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

How to Exercise Your Rights

To exercise any of these rights:

• Contact us using the information provided in the "Contact Information" section
• Provide sufficient information to verify your identity
• Specify which right you wish to exercise
• We will respond within one month of receiving your request

5. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and provide personalized content.

Types of Cookies We Use

• Essential Cookies: Necessary for website functionality and cannot be disabled
• Performance Cookies: Help us understand how visitors use our website and improve performance
• Functional Cookies: Remember your preferences and settings for a better user experience
• Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness

Cookie Management

You can control cookies through your browser settings:

• Accept or reject cookies
• Delete existing cookies
• Set preferences for specific websites
• Receive notifications when cookies are being set

Third-Party Analytics

We use Google Analytics to understand website usage patterns. Google Analytics may use cookies to collect information about your visits to our website and other websites. You can opt out of Google Analytics by installing the Google Analytics opt-out browser add-on.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:

Retention Periods

• Customer Records: 7 years after last contact for tax and legal compliance
• Marketing Data: Until you unsubscribe or withdraw consent
• Website Analytics: 26 months (Google Analytics default)
• Support Tickets: 3 years after resolution
• Financial Records: 6 years as required by UK law

Secure Disposal

When personal information is no longer needed, we will:

• Securely delete electronic records
• Shred physical documents
• Ensure third-party processors also delete data
• Maintain records of disposal for audit purposes

9. International Data Transfers

We primarily process your personal information within the UK. However, some of our service providers may process data internationally.

Safeguards for International Transfers

• Adequacy decisions by the UK government
• Standard contractual clauses approved by the ICO
• Binding corporate rules for multinational companies
• Certification schemes and codes of conduct

We ensure that any international transfers of your personal information are protected by appropriate safeguards and meet UK data protection requirements.

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

Notification of Changes

• Material changes will be posted prominently on our website
• Email notification for significant changes affecting your rights
• Updated "Last Updated" date at the top of this policy
• Previous versions available upon request

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact our Data Protection Officer, please use the information below:

Data Protection Contacts

• Data Protection Officer: Available for privacy-related inquiries
• Privacy Team: Handles rights requests and privacy concerns
• Customer Service: General inquiries and support

Response Times

• Privacy Requests: 30 days maximum (may be extended by 2 months for complex requests)
• General Inquiries: 48 hours during business days
• Urgent Privacy Matters: Same business day response