Privacy & Data Policy

1. Who We Are

• Data Controller: Martin Wood, trading as Sashtek (sole trader)
• Location: Dundee & Tayside, United Kingdom
• Contact email: martinwood007@icloud.com
• Telephone: 01382 787229
• WhatsApp: 01382 787229

2. What Personal Data We Collect

Information you provide directly

When you submit an enquiry or quote form, or contact us by phone, email, WhatsApp, or through social media, we collect the following information solely for the purpose of responding to you and assessing and providing our services:

• Full name
• Email address
• Telephone number
• Any details about your project or enquiry that you choose to include in your message, such as the type of windows or doors you are interested in

Note on special category data: We do not routinely collect special category personal data relating to health, race, religious beliefs, political opinions or similar matters. We will only collect this if there is a clear reason for doing so and with your explicit consent.

Information collected automatically

When you visit our website, our hosting provider may automatically collect limited technical information to keep the site secure and reliable:

• Internet protocol (IP) address or a hashed version of it
• Browser, device and connection information
• Basic server log information, such as the pages requested and the time of the request

3. How We Use Your Data

We use your personal data to:

• Respond to your enquiry and provide the services you have requested
• Prepare quotes, arrange surveys and discuss suitable window or door options
• Provide ongoing customer assistance, installation support and aftercare
• Contact you regarding your enquiry, quote, booking, installation, guarantee or support request
• Send service-related notices where relevant
• Protect the website from misuse, spam or security risks
• Comply with applicable legal or regulatory obligations

4. Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent, where you opt in to marketing or provide explicit consent for a specific purpose
• Legitimate interests, to respond to enquiries, improve our services, protect our website and operate our business
• Contractual necessity, where processing is required to provide a quote, carry out agreed services, manage bookings, provide aftercare, or take steps before entering into a contract with you
• Legal obligation, where we are required to retain data by law, such as for tax, accounting, compliance or record-keeping purposes

5. How We Store and Protect Your Data

Enquiry data submitted through our website is stored securely using industry-standard infrastructure. We retain personal data only for as long as necessary for the purpose it was collected, or as required by law.

All data is stored and processed in accordance with UK GDPR requirements. Access is restricted to authorised personnel and trusted service providers who need access to perform their role.

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

6. Sharing Your Data

We do not sell your personal data.

We may share data with trusted third parties where necessary, including:

• Our website hosting, database and infrastructure providers
• Email, telephone, WhatsApp or communication service providers
• Form, spam-prevention and website security providers
• Installation, supplier or subcontractor partners where needed to deliver the service you have requested
• Professional advisers such as accountants, legal advisers or IT consultants
• Regulators, public authorities or law enforcement where legally required

All third parties are required to process personal data securely and in compliance with data protection legislation.

7. International Data Transfers

Some of our third-party service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as UK-approved standard contractual clauses, adequacy regulations or equivalent safeguards, to ensure your data remains protected.

8. Cookies

Our website does not currently use cookies or similar tracking technologies, and we do not use analytics or advertising cookies.

If we introduce cookies or similar technologies in the future, we will update this policy and, where required, provide a cookie consent tool so you can manage your preferences.

9. Marketing

We do not currently send marketing or promotional messages. We use the details you provide only to respond to your enquiry and to arrange and carry out the services you have requested.

If this changes in the future, we will only send marketing where you have given your consent, and you will be able to opt out or unsubscribe at any time by contacting us at martinwood007@icloud.com.

10. Your Rights

Under UK data protection law, you have the right to:

• Access your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of your data
• Object to or restrict processing
• Withdraw consent at any time
• Request data portability
• Complain to the Information Commissioner's Office (ICO)

To exercise any of these rights, please contact us at martinwood007@icloud.com.

11. Complaints

If you have concerns about how we handle your data, please contact us first so we can try to resolve the matter.

You also have the right to complain to the Information Commissioner's Office (ICO) at www.ico.org.uk.

12. Changes to This Policy

We reserve the right to modify this Privacy & Data Policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website.

If we make material changes to this policy, we will update the "Last updated" date above and, where appropriate, provide additional notice on the website.