GDPR Compliance
Our commitment to protecting your data rights under the General Data Protection Regulation.
Last updated: January 2024
British Window Experts is fully committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page outlines how we fulfil our obligations and protect your rights.
Data Controller
British Window Experts acts as the data controller for personal information collected through this website and our services. We determine the purposes and means of processing your personal data.
Contact details:
47 Whitmore Street
London, EC2A 4NW
United Kingdom
Email: [email protected]
Your Rights Under GDPR
Right to Be Informed
You have the right to know how we collect and use your personal data. Our Privacy Policy provides comprehensive information about our data processing activities.
Right of Access
You can request a copy of the personal data we hold about you. We will respond to valid requests within one month and provide the information free of charge.
Right to Rectification
If your personal data is inaccurate or incomplete, you have the right to have it corrected. We will update records within one month of receiving your request.
Right to Erasure
Also known as the right to be forgotten, you can request deletion of your personal data where there is no compelling reason for continued processing. This right is not absolute and may not apply where we have legal obligations to retain data.
Right to Restrict Processing
You can request that we limit how we use your data in certain circumstances, such as when you contest the accuracy of the data or have objected to processing.
Right to Data Portability
Where technically feasible, you can request your personal data in a structured, commonly used format to transfer to another organisation.
Right to Object
You can object to processing based on legitimate interests or direct marketing at any time. We will stop processing unless we can demonstrate compelling legitimate grounds.
Rights Related to Automated Decision Making
We do not currently make decisions based solely on automated processing that significantly affect you. If this changes, you will be informed and have the right to request human intervention.
Lawful Basis for Processing
We process personal data under the following lawful bases:
- Contract: Processing necessary to fulfil our contractual obligations to you, such as arranging surveys and completing installations.
- Legitimate Interests: Processing necessary for our legitimate business interests, such as improving services and preventing fraud, where this does not override your rights.
- Consent: Where you have given clear consent for specific processing purposes, such as marketing communications.
- Legal Obligation: Processing necessary to comply with legal requirements, such as tax and accounting regulations.
Data Protection Measures
We implement appropriate technical and organisational measures including:
- Encryption of data in transit using SSL/TLS
- Secure storage with access controls
- Regular security assessments
- Staff training on data protection
- Data minimisation practices
- Incident response procedures
International Transfers
We primarily store and process data within the United Kingdom. Where data is transferred internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the Information Commissioner's Office.
Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours. Where the breach is likely to result in high risk to you, we will also notify you directly without undue delay.
Exercising Your Rights
To exercise any of your data protection rights, please contact us using the details above. We may need to verify your identity before processing your request. There is no fee for most requests, though we may charge a reasonable fee for manifestly unfounded or excessive requests.
Complaints
If you are unsatisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk
Updates to This Information
We review and update our GDPR compliance measures regularly. Any significant changes will be communicated through our website.