Prestige Shop Fronts is a trading style of Shutters and Shopfront Ltd. We are committed to protecting the privacy and personal information of our customers, prospective customers, website visitors, suppliers and business contacts.
This GDPR and Data Protection Policy explains how we handle personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data controller
Prestige Shop Fronts is a trading style of Shutters and Shopfront Ltd.
Business address:
Unit 5, Old Firkin Bakery
Black Lake
West Bromwich
B70 0PJ
United Kingdom
Shutters and Shopfront Ltd is responsible for deciding how and why personal data is processed.
In this policy, "we", "us" and "our" refer to Prestige Shop Fronts and Shutters and Shopfront Ltd.
2. What is personal data?
Personal data is information that can identify an individual, either directly or when combined with other information.
Depending on how you interact with us, this may include:
Name
Email address
Telephone number
Postcode
Property or business address
Company or business details
Enquiry details
Quotation and order information
Correspondence and communications
Information relating to a project or installation
Website usage and technical information
IP address and device information where collected
We only collect personal data that is reasonably necessary for legitimate business purposes.
3. How we collect personal data
We may collect personal data when you:
Complete a form on our website
Request a quotation
Contact us by email
Contact us by telephone
Arrange a site visit
Request information about our services
Purchase our products or services
Enter into a contract with us
Communicate with us about an existing or potential project
We may also collect certain technical information automatically when you use our website through cookies and similar technologies.
4. Why we process personal data
We process personal data for legitimate and necessary business purposes, including:
Responding to enquiries
Providing quotations
Arranging site visits
Providing shopfront and shutter services
Managing orders and projects
Communicating with customers
Processing payments
Maintaining business records
Providing customer support
Managing complaints
Improving our website and services
Protecting our website and systems
Preventing fraud or misuse
Complying with legal obligations
We do not collect or use personal data for purposes that are incompatible with the reason it was originally collected unless we have a lawful basis to do so.
5. Lawful bases for processing
The UK GDPR requires organisations to have a lawful basis for processing personal data.
We may rely on one or more of the following lawful bases.
Consent
We may process personal data where you have given us clear consent.
For example, this may apply where you have consented to certain marketing communications or non-essential cookies.
You can withdraw consent at any time.
Contract
We may process personal data where it is necessary to enter into or perform a contract with you.
For example, we may need your name, contact details and property information to provide an agreed service.
Legal obligation
We may process personal data where processing is necessary to comply with a legal or regulatory obligation.
Legitimate interests
We may process personal data where this is necessary for our legitimate business interests, provided those interests do not override your fundamental rights and freedoms.
This may include responding to enquiries, managing customer relationships, administering our business, maintaining website security and improving our services.
Vital interests
In limited circumstances, personal data may be processed where necessary to protect someone's vital interests.
6. Data minimisation
We aim to collect only the personal data that we reasonably need for the relevant purpose.
We do not routinely collect sensitive personal data through our website.
Where additional information is required to provide a service, we will explain why it is needed where appropriate.
7. Accuracy of personal data
We take reasonable steps to ensure that personal data we hold is accurate and up to date.
If your information changes, please contact us so that we can update our records.
You can request correction of inaccurate personal data at any time.
8. How we protect personal data
We use reasonable technical and organisational measures to protect personal data against:
Unauthorised access
Accidental loss
Destruction
Unauthorised disclosure
Alteration
Misuse
Access to personal data is restricted to people who reasonably need it for their work.
No method of electronic transmission or storage is completely secure. We therefore cannot guarantee absolute security.
9. Sharing personal data
We do not sell personal data.
We may share personal data with trusted third parties where this is necessary to provide our services, operate our business or comply with legal obligations.
These organisations may include:
Website hosting providers
IT and website service providers
Email providers
Analytics providers
Payment providers
Accountants
Professional advisers
Contractors and suppliers
Delivery or installation partners
Government bodies and regulators
Law enforcement agencies where legally required
We only share information where there is an appropriate lawful basis.
Where a third party processes personal data on our behalf, we take reasonable steps to ensure that appropriate data protection arrangements are in place.
10. International data transfers
Some of our service providers may process personal data outside the United Kingdom.
Where personal data is transferred outside the UK, we will ensure that an appropriate legal mechanism and suitable safeguards are in place where required by UK data protection law.
11. Data retention
We retain personal data only for as long as reasonably necessary.
The length of time we keep information depends on its purpose and any applicable legal, accounting or regulatory requirements.
Customer, quotation, financial and contractual records may be retained for longer where necessary to comply with legal obligations or protect our legitimate interests.
When information is no longer required, we will securely delete or anonymise it where reasonably practicable.
12. Your rights under the UK GDPR
Subject to certain legal conditions and exemptions, you have the right to:
Right of access
You can request a copy of the personal data we hold about you.
Right to rectification
You can ask us to correct inaccurate or incomplete personal data.
Right to erasure
You can ask us to delete your personal data in certain circumstances.
Right to restrict processing
You can ask us to restrict how we use your personal data in certain circumstances.
Right to data portability
In certain circumstances, you can request your personal data in a structured, commonly used and machine-readable format.
Right to object
You can object to certain types of processing, including processing based on legitimate interests.
You also have an absolute right to object to direct marketing.
Right to withdraw consent
Where processing relies on consent, you can withdraw that consent at any time.
Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
13. Making a data protection request
To exercise your rights, contact us using the details below.
Prestige Shop Fronts
Trading style of Shutters and Shopfront Ltd
Unit 5, Old Firkin Bakery
Black Lake
West Bromwich
B70 0PJ
United Kingdom
When making a request, please provide enough information for us to identify you and understand your request.
We may ask for reasonable information to verify your identity before releasing or changing personal data.
We will normally respond to valid requests within one month, although this period may be extended where legally permitted because of the complexity or number of requests.
14. Direct marketing
We may use personal data to communicate with customers and prospective customers about our products and services where we have a lawful basis to do so.
Where consent is required, we will obtain consent before sending relevant marketing communications.
You can opt out of marketing communications at any time.
You can also object to direct marketing at any time, and we will stop processing your information for this purpose.
15. Cookies and online tracking
Our website may use cookies and similar technologies.
Some cookies are necessary for the website to operate. Other cookies may be used for analytics, functionality or marketing.
Where required by law, we will obtain consent before using non-essential cookies.
You can manage cookies through your browser and, where available, our cookie consent mechanism.
Further information should be provided in our Cookie Policy.
16. Data breaches
A personal data breach occurs when personal data is accidentally or unlawfully lost, destroyed, altered, disclosed or accessed without authorisation.
If we become aware of a personal data breach, we will assess the incident and take appropriate action.
Where required by UK GDPR, we will notify the Information Commissioner's Office within the applicable timeframe.
Where a breach is likely to result in a high risk to affected individuals, we will also notify those individuals where required by law.
17. Data processors
We may use third-party organisations to process personal data on our behalf.
Where a third party acts as a data processor, we will take reasonable steps to ensure that:
The processor provides appropriate security measures
Personal data is processed only for authorised purposes
Confidentiality obligations are maintained
Appropriate contractual arrangements are in place
The processor assists us with relevant data protection obligations where required
18. Children's data
Our services are primarily intended for businesses, property owners and adults.
We do not knowingly collect personal data from children through our website for marketing purposes.
If you believe that a child has provided personal data to us, please contact us so that we can investigate the matter.
19. Automated decision-making
We do not intend to use personal data collected through this website to make decisions about individuals based solely on automated processing that produce legal or similarly significant effects.
20. Third-party websites
Our website may contain links to external websites.
We are not responsible for how third-party websites collect, use or protect personal data.
You should review the privacy and cookie policies of third-party websites before submitting personal information.
21. Complaints
If you have concerns about how we process your personal data, please contact us first.
We will investigate your concern and take reasonable steps to resolve it.
You also have the right to complain to the Information Commissioner's Office (ICO).
The ICO is the UK's independent supervisory authority for data protection.
22. Changes to this policy
We may update this GDPR and Data Protection Policy when our business practices, technology or legal obligations change.
The latest version will be published on this website.
The date at the top of this policy shows when it was most recently updated.
23. Contact details
For questions about this policy or to exercise your data protection rights, contact us.