GDPR Compliance

Last updated: 19 June 2026

Our Commitment to GDPR

Britannia Windows & Doors is committed to compliance with the General Data Protection Regulation (GDPR) and ensuring the protection of personal data for all individuals within the European Union and the United Kingdom.

Data Controller

Britannia Windows & Doors acts as the data controller for personal information collected through this website and our business operations.

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: When you explicitly agree to provide your data through forms or cookie acceptance
• Contract: When processing is necessary to perform a contract with you or take steps at your request
• Legitimate Interests: When necessary for our legitimate business interests, provided these do not override your rights
• Legal Obligation: When required to comply with legal requirements

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You can request correction of inaccurate personal data and completion of incomplete data.

Right to Erasure

In certain circumstances, you may request deletion of your personal data.

Right to Restriction of Processing

You may request that we limit how we use your personal data in specific situations.

Right to Data Portability

You can request to receive your personal data in a structured, commonly used format or have it transmitted to another controller.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. When data is no longer needed, we securely delete or anonymise it.

Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication procedures
• Staff training on data protection

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

International Data Transfers

If we transfer personal data outside the UK or EU, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

Exercising Your Rights

To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within one month, though this may be extended by two further months for complex requests.

Right to Lodge a Complaint

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) or your local supervisory authority.

Updates to This Page

We may update this information to reflect changes in our practices or legal requirements. Please check this page periodically for updates.