Privacy Policy

Shutters Design provides made-to-measure plantation shutter design, supply, and installation services for homes in the towns we cover. The data controller responsible for your personal information is Shutter Design Limited, registered in England and Wales (company number 10477976), trading as Shutters Design. Our registered office is at 20 Wittering Close, Kingston Upon Thames, KT2 5GA, England.

You can contact us at info@shuttersdesign.co.uk or 0777 612 3386 with any questions about this policy or about your personal information.

We collect personal information when you contact us through the website, by phone, by email, by WhatsApp, or in person at a home consultation. The information typically includes your name and contact details (email address, telephone number, postal address or postcode), information about your property (window types, room layouts, photographs you choose to share, planning constraints), and details about your enquiry (the products you are interested in, your preferred timing, your budget if you choose to disclose it).

We also keep records of our correspondence with you (emails, messages, call notes) and payment information limited to confirmation of payment received. We do not store full card details; payment is processed by our bank or payment provider.

Our hosting and security services process essential technical information needed to deliver and protect the website, such as your IP address, request time, browser or device type, and the page requested. If you allow analytics, Google Analytics and Sentry may also process information about pages viewed, how you arrived at the site, interactions, performance, and technical errors.

We do not knowingly collect special category data (such as health information, religion, or political opinions) and we do not request that you share it.

We process your personal information to respond to your enquiry, arrange a consultation, and prepare a written quotation. The lawful basis for this processing is steps taken at your request before entering into a contract (Article 6(1)(b) UK GDPR).

We process your personal information to deliver products and services you have ordered, including manufacturing, installation, and aftercare. The lawful basis is performance of a contract (Article 6(1)(b) UK GDPR).

We retain tax and accounting records to comply with our legal obligations (Article 6(1)(c) UK GDPR). We retain the order and warranty details needed for aftercare because they are necessary to perform the contract and for our legitimate interests in managing customer service and legal claims (Articles 6(1)(b) and 6(1)(f) UK GDPR).

We process essential website and contact-form security data for our legitimate interests in operating a secure and reliable website, preventing abuse, and diagnosing faults (Article 6(1)(f) UK GDPR). This essential processing is separate from optional analytics.

We use Google Analytics and Sentry only after you allow analytics through the cookie banner. The lawful basis for that optional processing is consent (Article 6(1)(a) UK GDPR), which you can withdraw at any time through Cookie Settings.

Direct marketing is separate from website analytics. Cookie consent is not consent to receive direct marketing. Where we send marketing by email, text, or a similar channel, we rely on your specific consent or the limited existing-customer soft opt-in where the Privacy and Electronic Communications Regulations allow it. Every marketing message provides an opt-out.

We do not sell your personal information. We only share it with the recipients listed below where it is necessary for the purposes set out in this policy.

Our manufacturing partners receive the technical specification needed to produce your shutters, such as dimensions, material, finish, frame, and mechanism. Depending on the range you choose, manufacture may take place in the United Kingdom or overseas. Our accountants, bookkeepers, and tax advisers receive transaction records for record-keeping and statutory reporting. Our bank or payment provider processes payments without sharing full card details with us.

Hostinger provides website and email hosting. Cloudflare Turnstile processes technical details needed to protect the contact form from automated abuse. Google Analytics and Sentry receive website usage, performance, and error information only after you allow analytics.

Law enforcement, regulators, courts, or other authorities may receive information where we are legally required to disclose it. Where a recipient acts as our processor, we require contractual data protection terms.

Some providers or their sub-processors may process personal information outside the United Kingdom. Where that is a restricted transfer, we use a mechanism recognised under UK data protection law, such as UK adequacy regulations, the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK Addendum. We also complete any transfer assessment required for that mechanism. Contact us if you want information about the safeguard used for a particular recipient.

We retain personal information for as long as we need it for the purposes described in this policy. In practice, that means: enquiry-stage information (where you contacted us but did not place an order) is retained for up to 24 months from your last contact, then deleted.

Customer financial records, including order details, quotations, and invoices, are retained for 6 years after the end of the financial year in which we delivered the work, unless the law requires a longer period in a particular case.

Warranty records are retained for the length of the manufacturer guarantee plus 12 months (5 years and 12 months for Hardwood orders, 10 years and 12 months for Polycomposite orders) so we can deal with warranty claims throughout the cover period.

Marketing consent records are retained for as long as you remain subscribed plus 12 months as evidence of consent. If you opt out, we may keep the minimum information needed on a suppression list so we do not contact you again. You can ask us to delete other information earlier where the law permits.

Under UK GDPR you have the following rights in respect of your personal information: the right to be informed about how we use your information (this policy provides that information), the right of access (you can ask for a copy of the information we hold about you), the right to rectification (you can ask us to correct information that is inaccurate or incomplete), and the right to erasure (you can ask us to delete your information where it is no longer needed for the purpose for which it was collected or where you withdraw your consent).

You also have the right to restrict processing (you can ask us to limit how we use your information in certain circumstances), the right to data portability (you can ask for a copy of the information you have provided to us in a structured, machine-readable format), the right to object to processing (you can object to processing based on legitimate interests or for direct marketing), and the right to withdraw consent at any time where we rely on it (for example, for marketing or analytics cookies).

You have the right not to be subject to a decision based solely on automated processing, including profiling. We do not currently use automated decision-making or profiling.

To exercise any of these rights, contact us at info@shuttersdesign.co.uk. We will respond within one month of your request. There is normally no charge for exercising these rights, but we may charge a reasonable fee or refuse to respond where a request is manifestly unfounded or excessive.

If you are not satisfied with how we handle your personal information, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO). You can contact the ICO online at ico.org.uk, by helpline on 0303 123 1113, or by post to: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

We would appreciate the chance to address any concerns before you contact the ICO. Please write to us at info@shuttersdesign.co.uk if you have a concern about how we have handled your information.

This website uses cookies and similar storage that are essential to remember your consent choice, operate the site, protect the contact form with Cloudflare Turnstile, and maintain security. The consent record is stored in your browser under shutters-design-consent-v1 until you change the choice or clear browser storage. Essential technologies are used without optional consent only where the law permits an exemption.

The current optional analytics category covers Google Analytics and Sentry. They do not load until you allow analytics. We do not currently deploy advertising or remarketing tags, and we do not use a separate preferences tool beyond storing your consent selection.

You can review or change your choice at any time using Cookie Settings in the footer. You can also block or delete cookies and similar storage through your browser settings, although doing so may affect essential site functions.

We use technical and organisational measures to protect your personal information. These include encrypted connections (HTTPS) on the website, restricted access to records, access controls on the services we use, and software updates on systems we operate. No system is completely secure, but we review the measures appropriate to the information we handle.

We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, contact us at info@shuttersdesign.co.uk and we will delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. When we make significant changes, we will update the last-reviewed date shown at the top of this page. We encourage you to review this page periodically.