Privacy Policy

Shutters Design provides made-to-measure plantation shutter design, supply, and installation services across Surrey and South West London. The data controller responsible for your personal information is Shutter Design Limited, registered in England and Wales (company number 10477976), trading as Shutters Design. Our registered office is at 20 Wittering Close, Kingston Upon Thames, KT2 5GA, England.

You can contact us at info@shuttersdesign.co.uk or 0777 612 3386 with any questions about this policy or about your personal information.

We collect personal information when you contact us through the website, by phone, by email, by WhatsApp, or in person at a home consultation. The information typically includes your name and contact details (email address, telephone number, postal address or postcode), information about your property (window types, room layouts, photographs you choose to share, planning constraints), and details about your enquiry (the products you are interested in, your preferred timing, your budget if you choose to disclose it).

We also keep records of our correspondence with you (emails, messages, call notes), payment information limited to confirmation of payment received (we do not store full card details; payment is processed by our bank or payment provider), and technical information collected when you visit our website, including your IP address, browser type, pages viewed, and how you arrived at the site. Technical information is only collected through the consent choices you make on the cookie banner.

We do not knowingly collect special category data (such as health information, religion, or political opinions) and we do not request that you share it.

We process your personal information to respond to your enquiry, arrange a consultation, and prepare a written quotation. The lawful basis for this processing is steps taken at your request before entering into a contract (Article 6(1)(b) UK GDPR).

We process your personal information to deliver products and services you have ordered, including manufacturing, installation, and aftercare. The lawful basis is performance of a contract (Article 6(1)(b) UK GDPR).

We process your personal information to keep records of our transactions for tax, accounting, and warranty purposes. The lawful basis is compliance with a legal obligation (Article 6(1)(c) UK GDPR) and our legitimate interest in maintaining accurate business records (Article 6(1)(f) UK GDPR).

We process your personal information to improve our website and our service through analytics, and to send marketing communications about our services. The lawful basis is your consent, given through the cookie banner or by signing up to marketing (Article 6(1)(a) UK GDPR), or our legitimate interest in promoting our services to existing customers (Article 6(1)(f) UK GDPR). You can withdraw consent or unsubscribe at any time.

We do not sell your personal information. We only share it with the recipients listed below where it is necessary for the purposes set out in this policy.

Our UK-based manufacturing partner receives the technical specification needed to produce your shutters (dimensions, material, finish, frame, mechanism). Our accountants, bookkeepers, and tax advisers receive transaction records for record-keeping and statutory reporting. Our payment provider processes payment transactions but does not share full card details with us.

Cloud and hosting providers host our website, our email, and our internal records (currently Hostinger for web hosting and email, and the cloud services that support our internal records). Analytics and error-tracking tools (currently Google Analytics and Sentry) receive technical information about how the website is used and about any errors that occur, but only where you have given consent through the cookie banner.

Law enforcement, regulators, courts, or other authorities may receive information where we are legally required to disclose it. All third parties that process personal information on our behalf are required to do so under written contracts that comply with UK GDPR requirements.

Most of our processing happens within the United Kingdom and the European Economic Area. Where information is transferred outside these regions (for example, if a cloud provider hosts data in the United States), we rely on the UK International Data Transfer Agreement, Standard Contractual Clauses approved by the UK Government, or an adequacy decision under UK GDPR to ensure your information remains protected.

We retain personal information for as long as we need it for the purposes described in this policy. In practice, that means: enquiry-stage information (where you contacted us but did not place an order) is retained for up to 24 months from your last contact, then deleted.

Customer records, including order details, quotations, and invoices, are retained for 7 years after the end of the financial year in which we delivered the work, to comply with HMRC record-keeping requirements.

Warranty records are retained for the length of the manufacturer guarantee plus 12 months (5 years and 12 months for Hardwood orders, 10 years and 12 months for Polycomposite orders) so we can deal with warranty claims throughout the cover period.

Marketing consent records are retained for as long as you remain subscribed plus 12 months, as evidence of consent. You can ask us to delete your information earlier where the law permits.

Under UK GDPR you have the following rights in respect of your personal information: the right to be informed about how we use your information (this policy provides that information), the right of access (you can ask for a copy of the information we hold about you), the right to rectification (you can ask us to correct information that is inaccurate or incomplete), and the right to erasure (you can ask us to delete your information where it is no longer needed for the purpose for which it was collected or where you withdraw your consent).

You also have the right to restrict processing (you can ask us to limit how we use your information in certain circumstances), the right to data portability (you can ask for a copy of the information you have provided to us in a structured, machine-readable format), the right to object to processing (you can object to processing based on legitimate interests or for direct marketing), and the right to withdraw consent at any time where we rely on it (for example, for marketing or analytics cookies).

You have the right not to be subject to a decision based solely on automated processing, including profiling. We do not currently use automated decision-making or profiling.

To exercise any of these rights, contact us at info@shuttersdesign.co.uk. We will respond within one month of your request. There is normally no charge for exercising these rights, but we may charge a reasonable fee or refuse to respond where a request is manifestly unfounded or excessive.

If you are not satisfied with how we handle your personal information, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO). You can contact the ICO online at ico.org.uk, by helpline on 0303 123 1113, or by post to: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

We would appreciate the chance to address any concerns before you contact the ICO. Please write to us at info@shuttersdesign.co.uk if you have a concern about how we have handled your information.

This website uses essential cookies to keep core functions working properly, such as security, consent preference storage, and basic site operation. These essential cookies are always active and do not require your consent.

Optional cookies only run if you choose to allow them through the cookie banner that appears on your first visit. The optional categories are: Preferences cookies (remember choices you make to give you a better experience), Analytics cookies (help us understand how visitors use our site so we can improve it; currently powered by Google Analytics), and Marketing cookies (support advertising and remarketing tags; only active if you give explicit consent).

You can review or change your cookie preferences at any time using the Cookie Settings link in the footer. You can also block or delete cookies through your browser settings, although doing so may affect how parts of the website work.

We use industry-standard technical and organisational measures to protect your personal information. These include encrypted connections (HTTPS) on the website, restricted access to our internal records, secure storage of contact and order information, and regular software updates on the systems we operate. No system is completely secure, but we work to keep your information safe.

We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, contact us at info@shuttersdesign.co.uk and we will delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. When we make significant changes, we will update the last-reviewed date shown at the top of this page. We encourage you to review this page periodically.