Privacy Policy

This policy explains what personal information Prestige Skylights York collects, why we collect it, how we use it and what rights you have over it.

Who we are

Prestige Skylights York is the controller of the personal information described in this policy, which means we decide how and why it is used. We are a sole trading business installing and replacing rooflights and skylights in York and the surrounding area. We have no public premises. You can contact us about privacy at info@prestigeskylightsyork.co.uk or on WhatsApp at 07880 284133.

What we collect

Through the enquiry form

When you send an enquiry, we receive your name, contact details (email address and phone number), your postcode or address, and whatever you tell us about the room, the roof and the work you have in mind.

Through WhatsApp and email

If you message or email us, we receive your phone number or email address, your name as it appears on your account, the content of your messages and any photographs you send, such as pictures of your roof or room.

During a survey and the work

If you go ahead, we keep your address, survey notes, quote and day plan, payment records, Building Control paperwork, photographs of the work and your guarantee details. Anything you tell us about your household so we can plan around it is used only for that purpose.

How we use it and our lawful bases

UK data protection law requires us to have a lawful basis for each use of your information. We rely on the following:

• Steps before a contract, and the contract itself. Replying to your enquiry, arranging and carrying out the survey, preparing your quote, doing the work, handing over and honouring the guarantee.
• Legal obligation. Keeping financial records for tax purposes and providing the information Building Control needs where the work is notifiable.
• Legitimate interests. Keeping a record of the work we have done so we can deal with guarantee claims, answer questions from you or a later owner of the property, and defend any legal claims. We balance these interests against your rights and keep the records no longer than needed.

We will not send you marketing messages unless you have asked us to, and we never sell your information.

Who we share it with

We share your information only where it is needed to do the job or where the law requires it:

• Our CRM provider. The enquiry form on this website is provided and hosted by a customer relationship management (CRM) provider. It acts as our processor: it stores your enquiry on our behalf, under a written agreement, and may not use it for its own purposes.
• WhatsApp. If you contact us on WhatsApp, your messages are handled by WhatsApp under its own terms and privacy policy.
• Building Control. The local authority building control team or a registered building control approver, where the work is notifiable.
• Product makers. Where a warranty needs registering or a product claim needs making, the details the maker requires.
• Professional advisers and authorities. Our accountant, and HM Revenue and Customs or other bodies where the law requires it.

Some of these services may store information outside the UK. Where that happens, we rely on the safeguards UK law requires, such as an adequacy decision or approved contract terms.

How long we keep it

• Enquiries that do not lead to a survey or quote: up to 12 months from our last contact.
• Quotes that are not accepted: up to 2 years, in case you come back to us.
• Records of completed work, including photographs and guarantee details: for the length of the 10-year guarantee and a further 2 years, so that claims can be dealt with.
• Financial records: 6 years after the end of the tax year they relate to.

After these periods, we delete the information or keep it in a form that no longer identifies you.

Your rights

Under UK GDPR you have the right to:

• ask for a copy of the personal information we hold about you
• ask us to correct information that is wrong or incomplete
• ask us to delete your information, where we no longer have a good reason to keep it
• ask us to restrict how we use it, or object to our use of it based on legitimate interests
• ask for information you gave us to be passed to you or another organisation in a portable form

To use any of these rights, email info@prestigeskylightsyork.co.uk. We will respond within one month. There is normally no charge.

Keeping your information safe

We keep your information on password-protected devices and accounts, and limit access to the people who need it.

Cookies

How this website uses cookies, including those set by the enquiry form and the map, is explained in our cookie policy.

Complaints

If you are unhappy with how we have handled your information, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection, at ico.org.uk.

We may update this policy from time to time. The date at the top shows when it was last changed.