Privacy Policy

1. Who We Are

The data controller for this website is:

2. What Personal Data We Collect

We may collect the following categories of personal data:

• Identity data: first name, last name
• Contact data: email address, telephone number
• Enquiry data: project details, location, scope and any other information you voluntarily provide in a contact form or email
• Technical data: IP address, browser type and version, time zone, browser plug-in types, operating system (collected via essential cookies or server logs only)
• Usage data: pages visited, referral source, time on site (collected only with your consent to analytics cookies)

We do not collect any special category data (such as health, racial or ethnic origin, political opinions, religious beliefs, biometric data, or criminal record data).

3. How We Collect Personal Data

• Contact and enquiry forms on our website
• Direct contact by telephone or email
• Cookies and similar technologies (see our Cookie Policy)

4. How We Use Your Personal Data

5. How Long We Keep Your Data

• Enquiry data where no contract results: up to 12 months from the date of enquiry, then securely deleted.
• Contract and job records (including invoices, correspondence and installation documentation): up to 7 years from completion, in line with our accountancy and legal obligations.
• Warranty and guarantee records: for the duration of any applicable guarantee period.
• Analytics data: as set by the analytics provider (where consent is given). We will update this section when an analytics provider is confirmed.

6. Who We Share Your Data With

We do not sell, rent or trade your personal data. We may share it with:

• Our employees and contractors who need access to fulfil your enquiry or carry out works.
• IT and software service providers (e.g. website hosting, email platform, CRM) used to operate our business — only under data processing agreements.
• Professional advisers (e.g. accountants, solicitors) under legal obligations of confidentiality.
• Regulatory bodies or law enforcement where we are legally required to disclose information.
• Netlify Inc. — our website hosting and form processing provider. Netlify may process form submission data on servers located in the United States. Netlify is certified under the EU-US Data Privacy Framework. A Data Processing Agreement is available via Netlify's platform terms. See netlify.com/gdpr-ccpa for details. No analytics provider is currently in use. This section will be updated if analytics are added.

7. International Transfers

Our website is hosted by Netlify Inc. (USA). Netlify is certified under the EU-US Data Privacy Framework, which provides an adequacy mechanism for transfers to the US. Form submission data is processed by Netlify in the United States under appropriate safeguards. No other international transfers are currently made. This section will be updated if additional providers are introduced.

8. Your Rights

Under UK GDPR, you have the following rights:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to ask us to correct inaccurate or incomplete data.
• Right to erasure — to ask us to delete your data where there is no legitimate reason for us to continue holding it.
• Right to restrict processing — to ask us to suspend processing in certain circumstances.
• Right to data portability — to receive a copy of your data in a structured, machine-readable format (where processing is based on consent or contract).
• Right to object — to object to processing based on legitimate interests.
• Right to withdraw consent — at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at enquiries@elevationglazing.co.uk. We will respond within one calendar month. We may need to verify your identity before acting on a request.

9. Complaints

If you believe we have not handled your personal data correctly, you have the right to complain to the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Telephone: 0303 123 1113

We would appreciate the opportunity to address your concerns before you contact the ICO — please contact us first at enquiries@elevationglazing.co.uk.

10. Cookies

We use cookies on this website. For full details of the cookies we use and your choices, please see our Cookie Policy.

11. Links to Other Websites

Our website may contain links to third-party websites. This Privacy Policy applies only to our website. We are not responsible for the privacy practices of third-party sites and encourage you to read their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "last updated" date at the top of this page. Where changes are material, we will take reasonable steps to notify you.

13. Contact Us

For any questions about this Privacy Policy or how we handle your personal data: