Privacy Policy

1. Data Controller Identity & Contact Details

J & GB Windows operates this website and customer enquiry service. For all legal, privacy, and data protection enquiries, you can contact our privacy officer directly by email.

• Trading Name: J & GB Windows
• Registered Office & Depot: 3 New Road, Eastbourne, East Sussex, BN22 8BT
• Contact Email: jgbwindows@gmail.com
• Direct Phone: 07850 405845 / 07990 594017

2. Information We Collect

We collect information directly from you when you submit a quote request, callback request, contact form, or interactive survey, as well as automatic technical parameters when you browse our website.

• Direct Information: Full name, telephone number, email address, property address or postcode, selected window, door, or repair service, and project description.
• Automatic Technical Parameters: IP address, browser user-agent, pages visited, UTM campaign tracking parameters, and referrer URLs.
• Coarse Geolocation: Subject to your cookie consent, we process coarse location parameters (City, Region, and Postal Outcode) to confirm you are within our East Sussex service area. We do NOT collect or store precise GPS coordinates (latitude or longitude).

3. How We Use Your Information

We use your personal data strictly for commercial, technical, and operational purposes related to your glazing enquiry and installation.

• Processing and responding to your window, door, and double glazing repair enquiries.
• Scheduling free home surveys, diagnostic inspections, and written quotation delivery across Eastbourne & East Sussex.
• Issuing FENSA building regulation certificates and 10-year insurance-backed guarantee documentation upon project completion.
• Maintaining platform security, preventing spam, and logging rate limits.

4. Lawful Bases for Processing (UK GDPR)

Under UK GDPR, we rely on the following lawful bases to process your personal data:

• Pre-Contractual Steps (Art. 6(1)(b)): Processing your enquiry details to fulfill your request for a home survey, diagnostic inspection, or quote.
• Legitimate Interests (Art. 6(1)(f)): Communicating project updates, providing customer support, and maintaining website security.
• Consent (Art. 6(1)(a)): Capturing optional performance/marketing cookies, UTM referral parameters, and coarse IP geolocation.
• Legal Obligation (Art. 6(1)(c)): Registering compliant installations with FENSA, maintaining building regulations records, and processing data-subject rights requests.

5. Data Sharing and Third-Party Recipients

We do not sell personal information to third parties. We share your information only with essential data processors and regulatory accreditation bodies necessary to fulfill your service:

• Regulatory & Certification Bodies: FENSA (for issuing official Building Regulations compliance certificates upon qualifying window and door installations).
• Insurance-Backed Guarantee Providers: To register your 10-year workmanship and insurance guarantee protection.
• Database & Hosting Providers: Supabase Inc. provides secure, encrypted cloud database and serverless function infrastructure.
• Transactional Email & Communication Services: Resend Inc. delivers notification emails and appointment confirmations regarding your enquiry.

6. Data Retention Schedule

We do not retain personal data longer than necessary for the purposes for which it was collected:

• Active Lead Enquiries: Retained for up to 90 days. Unconverted enquiries older than 90 days are automatically flagged for anonymisation.
• Anonymised Lead Records: Once anonymised, PII is removed and the remaining anonymous statistical record is permanently purged from the database after 7 days.
• Completed Installation Records: Retained for the duration of your 10-year warranty period and as required for UK statutory accounting and tax compliance.
• Data Removal Requests: Request records are logged to process anonymisation and maintain an immutable audit trail.

7. Your Individual Data Rights

Under UK GDPR, you have comprehensive rights regarding your personal data:

• Right of Access: You can request a copy of the personal information we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete data.
• Right to Erasure ('Right to be Forgotten'): You can request that we delete or anonymise your personal data.
• Right to Restrict Processing: You can ask us to limit how we use your data in certain circumstances.
• Right to Object: You can object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where processing relies on consent, you may withdraw consent at any time.

8. How to Submit a Data Removal or Rights Request

You can submit a request for access, correction, or deletion of your personal data at any time through either of two available channels:

• Direct Email: Send your request directly to jgbwindows@gmail.com.
• Online Removal Form: Complete the optional Data Removal Request form on this page.
• Response Deadline: We review and process all eligible data-rights requests within 30 days, subject to identity verification and any legal requirement to retain warranty and accounting records.

9. Complaints & Regulatory Authority

If you have concerns about how we handle your personal data, please contact us first at jgbwindows@gmail.com so we can resolve the issue. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.