Privacy Policy

1. Who We Are

This Privacy Policy applies to Pilgrim uPVC Specialists Ltd, a company incorporated in England and Wales (Company Number to be inserted), with its registered office at Boston, Lincolnshire, England. We are the data controller for the personal information we collect through this website and in the course of our business operations.

We are committed to protecting your personal data and handling it responsibly in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you have any questions about this policy or how we use your data, please contact us at [email protected].

2. What Information We Collect

We may collect and process the following categories of personal data:

• Identity data: your name, company name (for trade customers), and job title
• Contact data: postal address, email address, and telephone number
• Transaction data: details of products or services you have purchased or enquired about, quotation history, and payment records
• Technical data: IP address, browser type and version, time zone setting, browser plug-in types, operating system, and other technology on the devices you use to access this website
• Usage data: information about how you use our website, including pages visited and time spent
• Marketing and communications data: your preferences in receiving marketing from us and your communication preferences

We do not collect any special categories of sensitive personal data (such as health data, racial or ethnic origin, or financial account details beyond what is necessary to process a payment).

3. How We Collect Your Information

We collect personal data through the following means:

• When you complete a contact or enquiry form on our website
• When you request a quotation by telephone, email, or in person
• When you place an order or enter into a contract with us
• When you correspond with us by post, phone, email, or social media
• Automatically, through cookies and similar tracking technologies when you browse our website (see our Cookie Policy)
• From third parties, such as referral partners or publicly available sources

4. How We Use Your Information

We use your personal data for the following purposes, relying on the lawful bases indicated:

5. Who We Share Your Data With

We do not sell your personal data to third parties. We may share your data with the following categories of recipients where necessary:

• Competent Person Scheme administrator: we are required to submit installation details to our Competent Person Scheme administrator in order to issue Building Regulations Compliance Certificates
• TrustMark: as a TrustMark-registered business, we may be required to share certain job and customer data with TrustMark for audit and quality assurance purposes
• Payment processors: to process payments securely
• Professional advisers: including accountants, solicitors, and insurers
• IT service providers: who support our website and business systems
• Regulatory authorities: where we are legally required to do so

6. How Long We Keep Your Data

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. As a general guide:

• Customer order and contract records: 7 years (for tax and accounting purposes)
• Building Regulations Compliance Certificate records: 10 years (as required by our Competent Person Scheme)
• Enquiry and quotation records (where no order placed): 2 years
• Marketing consent records: until consent is withdrawn

7. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you
• Right to rectification: to request correction of inaccurate or incomplete data
• Right to erasure: to request deletion of your data in certain circumstances
• Right to restriction: to request that we limit how we use your data
• Right to data portability: to receive your data in a structured, machine-readable format
• Right to object: to object to our use of your data for direct marketing or where we rely on legitimate interests
• Rights in relation to automated decision-making: we do not carry out automated decision-making or profiling

To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.

8. Cookies

Our website uses cookies to improve your browsing experience and to analyse website traffic. Please see our Cookie Policy for full details of the cookies we use and how to manage your preferences.

9. Security

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, or disclosure. However, no internet transmission is completely secure, and we cannot guarantee the absolute security of data transmitted to our website.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: