GDPR Privacy Notice – Ecoglaze Group ltd

​

Effective Date: 29/10/2023

At Ecoglaze Group, we are committed to protecting your personal data and respecting your privacy. This privacy notice explains how we collect, use, and protect your data when you enquire about or purchase products from our full range in compliance with the UK GDPR and EU GDPR where applicable.

1. Who We Are

Ecoglaze Group Ltd
3 Newbridge sq, Swindon, SN1 1HN Company Number: 14445897
Data Protection Officer (DPO): Jeff Hayes 01793 939101 ext 1

2. What Data We Collect

When you interact with our Full Range of services (including online quotes, showroom visits, installations, and warranty registrations), we may collect the following personal data:

• Full name

• Address (installation and billing)

• Email address

• Phone number

• Product preferences and selections

• Payment details (processed securely via third-party payment providers)

• IP address and website usage data (if using our website or online quote systems)

We do not collect or store sensitive personal data unless explicitly necessary and with your consent.

3. How We Use Your Data

Your data is collected for the following lawful purposes:

• To provide quotes and process orders

• To schedule surveys, installations, and aftercare

• To send transactional communications (order updates, appointment reminders)

• For warranty registration and customer service

• For internal analysis to improve our products and services

• With consent, to send marketing communications (you can opt out at any time)

4. Lawful Basis for Processing

We process your personal data under one or more of the following legal bases:

• Contractual necessity – to provide the services/products you've requested

• Legal obligation – for accounting and warranty purposes

• Legitimate interests – e.g., improving our services

• Consent – for marketing or optional data processing

5. How We Store & Protect Your Data

We take appropriate technical and organisational measures to secure your data, including:

• Secure servers and data encryption

• Limited access controls

• Staff training on data protection

• Data minimisation and regular audits

We retain data only for as long as necessary for the purposes outlined above, or as required by law (e.g., tax/warranty records).

6. Sharing Your Data

We may share your data with:

• Installation partners and subcontractors (for service fulfilment)

• Payment processors (e.g., Stripe, PayPal)

• CRM and email platforms (for communication and support)

• Legal and regulatory bodies if required

We do not sell your personal data to third parties.

7. International Data Transfers

If any third-party service providers are located outside the UK/EU, we ensure adequate safeguards are in place (such as Standard Contractual Clauses or UK International Data Transfer Agreements).

8. Your Rights Under GDPR

You have the right to:

• Access the personal data we hold about you

• Request correction of inaccurate data