Privacy Policy

Last updated: March 2026

Introduction

Weald Windows Ltd (“we”, “us”, “our”) is committed to protecting the privacy of our customers, website visitors, and anyone who contacts us. This policy explains how we collect, use, store, and protect your personal data.

This policy applies to data collected through our website, by phone, by email, during home surveys, and throughout the installation process.

Data Controller

The data controller responsible for your personal data is Weald Windows Ltd (Company No. 12345678), registered at Unit 5, Clock House Farm, Heath Road, Maidstone, ME17 4PB.

If you have any questions about how we handle your data, you can contact us at [email protected] or call 01622 947 133.

What We Collect

We may collect the following personal data depending on how you interact with us:

When You Request a Quote

• Name, address, and contact details (phone, email)
• Property details relevant to your enquiry
• Photographs of existing windows, doors, or conservatories
• Your product preferences and requirements

When You Become a Customer

• Payment and billing information
• Site survey measurements and technical specifications
• Window registration details
• Installation records and guarantee information
• Any correspondence relating to your order

When You Visit Our Website

• IP address and browser type
• Pages visited, time spent, and referral source
• Cookie data (see Cookies section below)

How We Use Your Data

We use your personal data to:

• Prepare and send quotations
• Manage your order, from survey through to installation
• Process payments and issue invoices
• Register your installation with glazing registration schemes
• Administer your product guarantee
• Handle after-sales support and warranty claims
• Improve our website and services
• Send marketing communications (only with your consent)

We will never sell your personal data to third parties.

Legal Basis for Processing

Under UK GDPR, we process your data on the following legal bases:

• Contract — processing necessary to fulfil our contract with you (e.g. managing your order, arranging installation, registering your guarantee)
• Legitimate interest — processing necessary for our legitimate business interests (e.g. responding to enquiries, improving our services, fraud prevention)
• Legal obligation — processing required by law (e.g. financial records, glazing registration, building regulations compliance)
• Consent — where you have given explicit consent (e.g. marketing emails). You may withdraw consent at any time.

Data Sharing

We may share your personal data with the following categories of third parties, only where necessary:

• Glazing Registration — to register your installation as required by building regulations
• Guarantee providers — to register your insurance-backed guarantee
• Payment processors — to securely process card payments
• Finance providers — if you apply for finance (subject to their own privacy policy)
• IT and software providers — who help us run our business systems (under data processing agreements)

We do not transfer your data outside the UK or EEA. All third parties we work with are required to handle your data in accordance with UK GDPR.

Cookies

Our website uses cookies to improve your browsing experience and help us understand how our site is used.

Essential Cookies

Required for the website to function. These cannot be disabled and include session cookies and cookie consent preferences.

Analytics Cookies

We may use Google Analytics to understand how visitors use our website. These cookies collect anonymous data such as pages visited, time on site, and referral source. You can opt out of analytics cookies through our cookie banner or your browser settings.

Marketing Cookies

If enabled, these allow us to measure the effectiveness of our advertising campaigns. These are only set with your consent.

Data Retention

We keep your data only for as long as necessary. Typical retention periods are:

Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct any inaccurate or incomplete data
• Erasure — ask us to delete your data where there is no compelling reason for continued processing
• Restriction — ask us to restrict processing in certain circumstances
• Portability — request your data in a structured, commonly used format
• Objection — object to processing based on legitimate interests or for direct marketing

To exercise any of these rights, please contact us at [email protected]. We aim to respond to all requests within one calendar month.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. These include encrypted connections (SSL/TLS) on our website, secure payment processing, restricted access to personal data within our organisation, and regular review of our security practices.

While we take every reasonable precaution, no method of transmission over the internet is completely secure. We cannot guarantee absolute security of data transmitted to our website.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Any significant changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this privacy policy or how we handle your personal data, please get in touch: