Privacy Policy

1. Introduction

C R B Door Systems Ltd, trading as CRB Door Systems ("we", "our", "us"), is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We are registered in England and Wales. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller.

2. Information We Collect

We may collect and process the following data about you:

• Contact Information: Name, email address, telephone number, company name, and job title when you complete our forms or contact us.
• Business Information: Number of sites managed, service requirements, and other details relevant to providing you with a quote or service.
• Technical Data: IP address, browser type and version, time zone setting, operating system, and platform when you visit our website.
• Usage Data: Information about how you use our website, including pages visited, time spent, and navigation paths.
• Marketing Preferences: Your preferences in receiving marketing communications from us.

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: To respond to your enquiries, provide quotes, schedule surveys, and deliver our door and shutter services.
• Contract Performance: To manage your account, process orders, and fulfil our contractual obligations.
• Customer Support: To provide technical support, handle complaints, and resolve issues.
• Business Improvement: To analyse website usage, improve our services, and develop new offerings.
• Marketing: With your consent, to send you information about our services, promotions, and industry updates.
• Legal Compliance: To comply with legal obligations and protect our legal rights.

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: Where you have given us explicit consent to process your data for specific purposes.
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights and freedoms.
• Legal Obligation: Where we need to comply with a legal obligation.

5. Data Sharing

We may share your personal data with:

• Service Providers: Third-party companies that help us deliver our services, such as CRM systems (Zendesk), job management software (Joblogic), and IT support providers.
• Subcontractors: Approved subcontractors who may assist with service delivery on specific projects.
• Professional Advisors: Accountants, lawyers, and insurers as necessary for business operations.
• Regulatory Bodies: If required by law or to protect our legal rights.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. For enquiries that do not proceed to contract, we typically retain data for 2 years. For customers, we retain data for 7 years after the end of our business relationship to comply with legal and warranty obligations.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Under UK data protection law, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data in certain circumstances.
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Data Portability: Request transfer of your data to another organisation.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us using the details below. We will respond within one month of receiving your request.

9. Cookies

Our website uses cookies to enhance your browsing experience, analyse site traffic, and understand where our visitors come from. You can control cookie preferences through our cookie consent banner and your browser settings. For more information, please see our cookie notice displayed when you first visit our site.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party sites you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us:

13. Complaints

If you are not satisfied with how we handle your personal data or your data protection request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. Visit ico.org.uk for more information.