Privacy policy

We collect only what we need to answer you and to carry out any work you agree to. That can include:

• the details you type into the quote form, such as your name, email address, phone number, the postcode or address of the property and a description of the job;
• your WhatsApp number, the name on your WhatsApp profile, and the messages, photos and videos you send us there;
• anything you write to us by email, with any attachments;
• notes, measurements and photos of the room and roof taken at a survey you have asked for;
• the records that go with a job: the fixed written quote, your acceptance, invoices, payments received and guarantee paperwork.

Please avoid sending details about anyone else in your household unless they are needed for the job. We do not ask for special category data, such as health information. If you choose to tell us about a health need so that a visit can be arranged around it, we use it only for that purpose.

The quote form on our pages is supplied by our customer relationship management (CRM) provider and is loaded into the page from that provider's own web address. What you submit is sent to that provider and passed to us, and we read and reply to it.

WhatsApp is a messaging service owned by Meta. When you message us there, WhatsApp handles the conversation under its own terms and privacy policy, which you agreed to when you set up your account. We see the messages on our business account and treat them like any other enquiry.

Email reaches us through our email host, which also acts as a processor for us.

UK GDPR requires a lawful basis for each use of personal data. Ours are:

• Steps you ask for before a contract (Article 6(1)(b)): replying to your enquiry, arranging a free survey and preparing a fixed written quote.
• Performing our contract with you (Article 6(1)(b)): booking and carrying out the work, invoicing, and dealing with any claim under our workmanship guarantee.
• Legal obligation (Article 6(1)(c)): keeping tax and accounting records, and giving the details building control needs where the work is notifiable under the Building Regulations.
• Legitimate interests (Article 6(1)(f)): following up a quote you have not yet answered, keeping our records accurate, protecting the business against fraud, and setting up, making or defending a legal claim. We weigh these interests against your rights, and you can object to them at any time.
• Consent (Article 6(1)(a)): optional analytics cookies, if they are ever switched on, and any marketing messages you have asked to receive. You can withdraw consent whenever you like.

We never sell personal data. We share it only where the work or the law needs it:

• the third-party provider of the quote form;
• service providers who act as our processors, such as our email host, our website host and our accounting software;
• local authority building control, or a registered building control approver, where we handle the Building Regulations notification for notifiable work;
• a manufacturer, where a product we fitted needs a claim under the maker's own warranty;
• our professional advisers, such as an accountant or solicitor;
• HM Revenue and Customs, the police or a court, where we are legally required to disclose.

Some providers may process data outside the UK. Where that happens, we rely on a UK adequacy regulation or on safeguards such as the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.

We keep personal data no longer than needed for the purpose we collected it for.

• An enquiry that does not lead to work is kept for a limited period, so we can pick up a follow-up question, and is then deleted.
• Records for completed work are kept for as long as UK tax and accounting law requires, and for at least the length of our workmanship guarantee, so a claim can be checked against what was fitted.
• Where a dispute or claim is open, the related records are kept until it is settled.

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate details corrected or incomplete ones filled in;
• have your data erased, where there is no good reason for us to keep it;
• ask us to restrict how we use it while a concern is looked into;
• object to uses based on legitimate interests, and to direct marketing at any time;
• receive data you gave us in a portable format, where the processing is based on consent or contract and is carried out by automated means;
• withdraw any consent you have given.

To use any of these rights, email info@supremeskylightsnewport.co.uk or message us on WhatsApp. We may need to confirm who you are before acting. We will reply within one month, as the law requires, and tell you if a complex request needs longer. There is normally no fee. Decisions about you are made by a person, without any automated decision-making or profiling.

Access to customer records is limited to the people who need it to run the job. Our accounts are password protected, and we choose providers that encrypt data in transit. No system is perfectly secure, so if a breach happens that is likely to put your rights at risk, we will tell you and report it to the regulator where the law says we must.

Our services are offered to homeowners and adults responsible for a property. We do not knowingly collect details from anyone under 18.

Please contact us first and we will try to put things right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection. Its website, ico.org.uk, explains how to raise a concern.

Cookies and similar technologies are covered in our cookie policy. For other problems with our service, follow our complaints procedure.

We will update this policy when the way we handle data changes, and the date at the top will show the latest version.