Privacy Policy

Introduction

Grampian Flooring & Blinds is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website or use our services.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

Information We Collect

We may collect the following types of information:

How We Use Your Information

We use your personal data for the following purposes:

• To provide and deliver our services
• To respond to your inquiries and estimate requests
• To send you information about our products and services (with your consent)
• To improve our website and customer experience
• To analyze website usage and trends
• To comply with legal obligations
• To protect against fraud and ensure website security

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you have given us explicit consent to process your data
• Contract: When processing is necessary to fulfill a contract with you
• Legal Obligation: When we need to comply with legal requirements
• Legitimate Interest: When processing is necessary for our legitimate business interests

Third-Party Services

We use the following third-party services that may collect and process your data:

These services are only activated with your consent through our cookie banner. You can withdraw consent at any time through our Cookie Policy page.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Customer data: Retained for 7 years for tax and accounting purposes
• Marketing data: Retained until you withdraw consent or unsubscribe
• Website analytics: Anonymised data retained for 26 months
• Cookie preferences: Stored for 12 months

International Data Transfers

Some of our third-party service providers (such as Google and Meta) are based outside the UK. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK authorities.

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (right to be forgotten)
• Right to Restriction: Request limitation of processing in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the details provided in this policy.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Children's Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the UK supervisory authority:

Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: