Privacy Policy

---

 Privacy Policy for c4windows.co.uk

This Privacy Policy explains how c4windows.co.uk("we," "us," or "our") processes your personal information when you use our website. We are committed to protecting your privacy and handling your personal data in an open and transparent manner, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Our details : C4W LTD
Email address: info@c4w.co.uk
Postal address: Eastern Avenue, Waterloo Industrial Estate, Pembroke Dock, SA72 4RT.

You can contact us with any questions regarding this Privacy Policy or our data practices. 

2. What personal data do we collect?We collect the following types of personal data from you:

• Information you provide to us: Name, address, contact details and payment details when you make a purchase.
• Technical data: Like most websites, our website automatically collects certain information about your device and how you interact with our site. This may include your IP address, browser type, operating system, and a record of the pages you have visited. This data is used to ensure our site functions correctly and securely.
• Cookies: Our website uses cookies to function properly. "These are small files that help us improve your experience by remembering your preferences." You can control and disable cookies in your browser settings. 

3. How we use your personal data

We only use your personal data for the following specific purposes:

• To provide you with the products and services you have requested.
• To send you the newsleter you have signed up for.
• To respond to your inquiries and support requests.
• To ensure the security and stability of our website. 

4. The lawful basis for processing

Under the UK GDPR, we must have a valid legal reason to use your personal data. We rely on the following basis:

• Performance of a contract: To fulfil our contractual obligations to you, for example, by processing your order.
• Your consent: We will obtain your explicit consent for any processing that is not strictly necessary for providing our service, such as sending you a marketing newsletter. You can withdraw your consent at any time.
• Legitimate interests: It is in our legitimate interest to operate and secure our website effectively. We only do this in ways that do not override your own interests and rights.
• Legal obligation: We may process your data when we are legally required to, such as for tax purposes or to comply with a court order. 

5. Data sharing and processors

We will not sell your personal data to any third parties. We also do not share your data with other organisations for marketing, advertising, or research purposes without your explicit consent. However, we do use a limited number of essential third-party service providers to help us operate our website and run our business. These companies are our "data processors." They are contractually obliged to handle your data securely and only for the purposes we specify. The types of data processors we may use include:

• Hosting providers: The company that hosts our website.
• Payment processors: To process secure online payments.
• Analytics services: To help us understand how our website is used and make improvements (e.g., Google Analytics). We have configured this service to minimise data collection and respect your consent. 

6. How long do we keep your data?

We retain your personal data only as long as necessary for the intended purpose, including legal or reporting obligations. 

7. Your data protection rights

Under UK GDPR, you have specific rights regarding your personal data. These include the right to be informed about how your data is used, the right to access and rectify your data, and the right to request erasure ("right to be forgotten") or restriction of processing under certain conditions. You also have the right to object to processing in some situations and the right to data portability. 

8. How to complain

If you have concerns about our data practices, you can contact us using the details provided in section 1. You also have the right to lodge a complaint with the UK's data protection authority, the Information Commissioner's Office (ICO).