PRIVACY POLICY

1. Who We Are

Wide Wings Tiles Ltd (“we”, “us”, “our”) is a data controller registered with the Information Commissioner’s Office (ICO). Our ICO registration number is 00013659787. We are responsible for your personal data and are committed to protecting it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Data We Collect

We collect and process the following categories of personal data:

• Identity data: full name, business name.
• Contact data: postal address, email address, telephone number.
• Transaction data: details of orders placed, goods purchased, payment history, and invoices.
• Communications data: records of correspondence between you and us by email, telephone, or in writing.
• Technical data: IP address, browser type, and website usage data collected via cookies.
• Credit data: for wholesale and shop account customers, credit assessment data provided by or obtained through our credit insurance provider.

3. How We Collect Your Data

• Directly from you: when you contact us by telephone, email, or in person at our showroom; when you place an order; when you complete an enquiry form on our website.
• Automatically: through cookies and analytics tools when you visit our website.
• From third parties: credit reference and insurance agencies in connection with the assessment of trade credit accounts.

4. How We Use Your Data & Lawful Basis

Processing your orders

Performance of contract — to fulfil, deliver, and invoice your order.

Customer communications

Legitimate interests — to respond to enquiries and manage our relationship with you.

Credit assessment

Legitimate interests / Legal obligation — to assess creditworthiness of trade account applications.

Accounting & legal compliance

Legal obligation — to meet our statutory obligations including VAT and tax records.

Marketing communications

Consent — we will only send marketing emails if you have opted in. You can withdraw consent at any time.

Website analytics

Legitimate interests / Consent — to understand how our website is used and improve it.

5. How Long We Keep Your Data

• Customer order and transaction records: 7 years from the date of the last transaction.
• General correspondence: 3 years from the date of the last communication.
• Credit account data: for the duration of the credit account and 6 years thereafter.
• Marketing data: until you withdraw consent or opt out.
• Website analytics data: in accordance with the retention settings of the relevant third-party tool.

6. Who We Share Your Data With

We do not sell your personal data to any third party. We may share your data with the following categories of recipients where necessary:

• Pallet and courier companies: your name, delivery address, and contact number are shared with our third-party courier partners solely to arrange and complete delivery of your order.
• Credit insurance providers: for trade account customers, relevant business and financial data may be shared with our credit insurer as part of the credit assessment process.
• Accountants and legal advisors: where necessary for the administration of our business or to comply with legal obligations.
• IT and software service providers: who process data on our behalf under data processing agreements.
• Regulatory authorities: HMRC, ICO, or other authorities where we are legally required to disclose data.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of your data where there is no lawful reason for us to continue holding it.
• Right to restrict processing: to request that we limit how we use your data in certain circumstances.
• Right to data portability: to receive your data in a structured, commonly used format.
• Right to object: to object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. Access to personal data within our organisation is limited to those who need it to perform their role. Despite our efforts, no method of data transmission or storage is completely secure. If you believe your data has been compromised, please contact us immediately at sales@widewingstiles.co.uk.

9. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policy of any third-party site you visit.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes where we hold your contact details. Continued engagement with us following any update constitutes your acknowledgement of the revised policy.

11. Contact Us

If you have any privacy questions or wish to exercise your data rights, please contact us using the details below.