PRIVACY POLICY
HOW WE SAFEGUARD YOUR DATA

1. Introduction

This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the UK GDPR (General Data Protection Regulation) and the Data Protection Act 2018. We are committed to protecting your privacy and personal data.

We will only use your information lawfully, fairly, and transparently, and will respect your rights in relation to your data.

​

Who We Are

• South East Door Services Ltd

• Address: 3b Swallowfield Courtyard, Wolverhampton Road, Oldbury, B69 2JG

• Contact Email: service@southeastdoorservices.co.uk

• Website: www.southeastdoorservices.co.uk

 

We are the Data Controller for all personal data we process. If you have any questions about this policy or our data practices, please contact us using the details above.

​

2. Definitions

• Personal Data: Any information that identifies or can be used to identify a living person (e.g. name, email address, postal address, phone number, IP address).

• Processing: Any action taken with your data — collecting, storing, using, sharing, deleting, etc.

• Data Subject: The person whose personal data we hold (you).

• Processor: Any person or organisation that processes data on our behalf.

​

3. What Personal Data We Collect & How We Get It

We may collect the following categories of personal data directly from you: ​​

​​​Category       

Identity Data        Eg, Full name, job title, organisation

Contact Data       Eg, Email address, postal address, telephone number

Technical Data     Eg, IP address, browser type, device information, cookies

Usage Data          Eg, Pages visited, time spent, links clicked

Other Data           Eg. Information you provide via forms, surveys, or communications

We do not collect special category data (race, religion, health, biometrics, etc.) unless you voluntarily provide it or it is required by law.

 

4. How & Why We Use Your Data

We only process your data when we have a lawful basis for doing so. Below are the purposes and legal bases:

A. Performance of a Contract

• Purpose: To provide our services, process orders, fulfil agreements, and respond to requests.

• Without this data we cannot fulfil our contract with you.

B. Legitimate Interests

• Purpose: To run our business efficiently, improve our services, keep records, ensure security, and communicate with you about updates — provided these interests do not override your rights.

C. Your Consent

• Purpose: To send marketing communications, use cookies, or process data for specific purposes you have agreed to.

• You may withdraw consent at any time using the details below.

D. Legal Obligation

• Purpose: To comply with accounting, tax, employment, and other legal requirements.

​

5. How We Share Your Data

We never sell your personal data. We may share it only with:

• Authorised service providers who act as Data Processors (e.g. IT hosting, payment processors, email services) — all bound by strict contracts.

• Regulators, law enforcement, or legal bodies — when required by law.

• Third parties — only when you have given explicit permission.

All transfers outside the UK/EEA will be protected by appropriate safeguards approved by the ICO.

​

6. Data Security

We use appropriate technical and organisational measures to protect your data:

• Encryption of data in transit and at rest

• Regular security reviews and updates

• Access controls — only authorised staff may access your data

• Secure backup and disaster recovery procedures However, no method of transmission over the internet is 100% secure — we cannot guarantee absolute security but follow best practice standards.

​

7. Data Retention

We keep your personal data only as long as necessary for the purposes stated, or to meet legal, accounting, or reporting obligations. Typical retention periods:

• Client/contract data: Retained for [7] years after the relationship ends

• Marketing preferences: Retained until you withdraw consent

• Website/analytics data: Retained for [26] months

• Legal/regulatory records: Retained as required by applicable law

After this period, data is securely deleted or anonymised.

​

8. Your Rights Under the UK GDPR

You have the following rights. To exercise them, contact us at the details in Section 1. We will respond within one month.

• Access - Request a copy of the personal data we hold about you

• Rectification - Correct inaccurate or incomplete data

• Erasure - Request deletion of your data ("right to be forgotten") — subject to legal exceptions

• Restriction - Limit how we process your data

• Data Portability - Receive your data in a machine-readable format or transfer it to another provider

• Objection - Object to processing based on legitimate interests or direct marketing

• Withdraw Consent - Stop any processing based on your consent at any time

 

You do not usually need to pay a fee to exercise these rights. We may charge a reasonable fee for excessive/repeated requests

​

9. Cookies & Online Tracking

Our website uses cookies and similar tracking technologies. You can manage cookie preferences via our cookie banner or your browser settings.

A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.
Cookies may be either “persistent” cookies or “session” cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.
Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies.

We use Google Analytics to analyse the use of our website. Google Analytics gathers information about website use by means of cookies. The information gathered relating to our website is used to create reports about the use of our website. Google’s privacy policy is available at: https://www.google.com/policies/privacy/.

​

​​10. Third-Party Links

Our website may contain links to third-party websites. We have no control over their privacy practices and accept no liability. We encourage you to read the privacy policy of every site you visit.

​

11. Automated Decision-Making & Profiling

We do not use automated decision-making or profiling that produces legal or significant effects based on your personal data.

 

12. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last updated" date. Significant changes will be notified via our website or direct communication.

​​

13. Complaints

If you are unhappy with how we have handled your data or a request you have the right to lodge a complaint with the UK’s supervisory authority: Information Commissioner’s Office (ICO)

Website: ico.org.uk

Helpline: 0303 123 1113

​

14. Contact Us

For any questions, to exercise your rights, or for further information about our privacy practices:

Email: service@southeastdoorservices.co.uk

Post: 3b Swallowfield Courtyard, Wolverhampton Road, Oldbury, B69 2JG