Privacy Policy

1. Introduction

C R B Door Systems Ltd, trading as CRB Door Systems ("we", "our", "us"), is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We are registered in England and Wales. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller.

2. Information We Collect

We may collect and process the following data about you:

• Contact Information: Name, email address, telephone number, company name, and job title when you complete our forms or contact us.
• Business Information: Number of sites managed, service requirements, and other details relevant to providing you with a quote or service.
• Technical Data: IP address, browser type and version, time zone setting, operating system, and platform when you visit our website.
• Usage Data: Information about how you use our website, including pages visited, time spent, and navigation paths.
• Marketing Preferences: Your preferences in receiving marketing communications from us.

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: To respond to your enquiries, provide quotes, schedule surveys, and deliver our door and shutter services.
• Contract Performance: To manage your account, process orders, and fulfil our contractual obligations.
• Customer Support: To provide technical support, handle complaints, and resolve issues.
• Business Improvement: To analyse website usage, improve our services, and develop new offerings.
• Marketing: With your consent, to send you information about our services, promotions, and industry updates.
• Legal Compliance: To comply with legal obligations and protect our legal rights.

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: Where you have given us explicit consent to process your data for specific purposes.
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights and freedoms.
• Legal Obligation: Where we need to comply with a legal obligation.

5. Data Sharing

We may share your personal data with:

• Service Providers: Third-party companies that help us deliver our services, such as CRM systems (Zendesk), job management software (Joblogic), and IT support providers.
• Subcontractors: Approved subcontractors who may assist with service delivery on specific projects.
• Professional Advisors: Accountants, lawyers, and insurers as necessary for business operations.
• Regulatory Bodies: If required by law or to protect our legal rights.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. For enquiries that do not proceed to contract, we typically retain data for 2 years. For customers, we retain data for 7 years after the end of our business relationship to comply with legal and warranty obligations.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Under UK data protection law, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data in certain circumstances.
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Data Portability: Request transfer of your data to another organisation.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us using the details below. We will respond within one month of receiving your request.

9. Cookies and Website Analytics

Google Analytics (on by default, you can object). We use Google Analytics 4 only to produce aggregate statistics about how our website is used (for example, which pages are visited and whether forms work) so we can improve it. We do not use it for advertising, profiling or to identify you. Placing these cookies relies on the statistical-purposes exception in the Privacy and Electronic Communications Regulations 2003 (Schedule A1, as added by the Data (Use and Access) Act 2025), and our lawful basis under UK GDPR is legitimate interests. Google acts as our processor: Google signals, advertising personalisation and data sharing with Google are turned off, and Google Analytics is not linked to any advertising account. Individual-level analytics data is kept for 2 months, after which only aggregate reports remain.

How to object. Choose "Turn off analytics" on the notice shown on your first visit, or use the Cookie settings link in the footer of any page at any time. It is free, takes effect immediately, deletes the Google Analytics cookies and is remembered on future visits.

Microsoft Clarity (only with your consent). Clarity records how pages are used (clicks, scrolls and mouse movement) to help us find problems. It only runs if you choose "Also allow Clarity recordings" or switch it on in Cookie settings, and you can withdraw that consent the same way.

Enquiry forms. If you arrive from a link with campaign tags (such as UTM parameters), we keep them in your browser for that visit only and attach them to any enquiry you choose to send, so we know how you found us. We also keep a simple count of enquiries received (date, form and page only, no personal details).

We do not use advertising, remarketing or social media tracking cookies. Our hosting provider, Cloudflare, sets a strictly necessary security cookie. See our Cookie Policy for the full list.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party sites you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us:

13. Complaints

If you are not satisfied with how we handle your personal data or your data protection request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. Visit ico.org.uk for more information.