Information on the collection of personal data
(1) In the following, we inform you about the collection of personal data when using our website and the services offered. Personal data is all data that can be referred to you personally, e. g. name, address, e-mail addresses, user behavior.
(2) Colin’s Sash Windows,
is the Controller pursuant to Art. 4 para. 7 EU Data Protection Basic Regulation (GDPR). You can reach our data protection assistance at help@colinssashwindows.co.uk or our postal address with the addition “Data Protection ”.
(3) For the purposes of users in the United Kingdom, references in this Privacy Policy to the GDPR should be understood as including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, where applicable. We process personal data in accordance with applicable UK data protection and privacy legislation.
Your rights
(1) You have the following rights vis-à-vis us with regard to the personal data concerning you:
Right to information,
Right to correction or deletion,
Right to restrict processing,
Right to object to processing,
Right to data transferability.
(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
(3) Depending on the circumstances, you may also have the right to withdraw your consent at any time where we rely upon consent as the lawful basis for processing your personal data. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
(4) If you are located in the United Kingdom and have concerns about how we process your personal data, you also have the right to make a complaint to the Information Commissioner’s Office (“ICO”), the UK’s independent data protection supervisory authority.
Further information about your data protection rights is available from the ICO at:
Collecting personal data
(1) When you contact us by e-mail, chat or via a contact form, the data provided by you (your e-mail address, your name, and telephone number if applicable) will be stored by us in order to answer your questions. We delete the data arising in this connection, after the storage is no longer necessary, or limit the processing if legal storage obligations exist.
(2) When using the website purely for informational purposes, i. e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website and to guarantee stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):
IP address
date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (concrete page)
Access status/HTTP status code
the amount of data transferred in each case
Website from which the request comes
Browser
Operating system and its interface
Language and version of the browser software.
(3) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. In order to do this, you must normally provide further personal data that we use to provide the respective service and for which the aforementioned data processing principles apply.
(4) Where you use our online Sash Windows Designer or place an order through our website, we may collect and process additional information required to provide the service to you. This may include your name, email address, telephone number, billing address, delivery address, order information, selected products, product configurations, dimensions, quantities, prices, transaction or order references, payment status and communications relating to your order.
(5) We process information relating to enquiries, quotations and orders where necessary to take steps at your request before entering into a contract, to perform a contract with you, to supply the products or services you have ordered, to communicate with you concerning your order and to fulfil our legal, accounting and regulatory obligations.
(6) Where payments are made through our website, payment-related information may also be processed by payment service providers and financial institutions involved in completing the transaction. Such providers process payment information in accordance with their own applicable privacy and security requirements.
(7) When you interact with our online Sash Windows Designer, we may also collect technical and behavioural information about how the Designer is used. This may include the pages and stages visited, product configuration interactions, products viewed, items added to or removed from the basket, visits to the basket, commencement of checkout, progression through checkout and completion of an order. This information helps us understand and improve the usability and performance of our online ordering system.
Use of cookies
(1) In addition to the above-mentioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive in the browser you are using and which provide certain information to the site that places the cookie (here by us). Cookies cannot run programs or transmit viruses to your computer. They serve to make the internet offer more user-friendly and effective. This website uses transient and persistent cookies, the extent, and functionality of which are explained below.
- a) Transient cookies are automatically deleted when you close your browser. This includes, in particular, the session cookies. They store a so-called session ID, with which different queries of your browser can be assigned to the common session. This means that your computer can be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.
- b) Persistent cookies are automatically deleted after a specified period of time, which can vary depending on the cookie. You can delete cookies in the security settings of your browser at any time.
- c) You can configure your browser settings according to your wishes and, for example, refuse the acceptance of third-party cookies or all cookies. Please note that you may not be able to use all the functions of this website. For example, you would have to log in again for each visit without identifying yourself with cookies.
- d) We also use cookies and similar technologies for analytics, website measurement and, where applicable, advertising purposes. These technologies may help us understand how visitors use our website and our online Sash Windows Designer.
- e) Certain cookies are necessary for the proper operation of our website and online ordering system. These may include cookies used for security, shopping basket functionality, checkout functionality and remembering your privacy or cookie preferences.
- f) Other cookies and similar technologies may be used for analytics or marketing purposes. Where consent is required under applicable law, such technologies will be used in accordance with the choices you make through our cookie consent mechanism.
- g) You may accept or reject available categories of non-essential cookies through our cookie consent mechanism. You may also change or withdraw your choices later through the cookie settings made available on our website.
- h) Our use of cookies and similar technologies is also subject to the Privacy and Electronic Communications Regulations 2003 (“PECR”), as amended from time to time.
Data processing by third parties
(1) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound to our instructions and are monitored regularly.
(2) Furthermore, we may also pass on your personal data to third parties if we offer campaigns, sweepstakes, contracts or similar services together with our partners. You will receive more detailed information on this by entering your personal data or in the description of the offer.
(3) Insofar as our service providers or partners have their registered office in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.
(4) Depending on the services you use, we may share or make personal data available to trusted service providers where reasonably necessary for the operation of our business and website. These may include website hosting providers, analytics providers, payment providers, email and communications providers, customer relationship management providers, IT service providers, professional advisers, delivery or logistics providers and advertising platforms.
(5) We only share personal data where there is an appropriate reason to do so and, where required, we put appropriate contractual or organisational arrangements in place with service providers that process personal data on our behalf.
(6) Where personal data is transferred outside the United Kingdom, we take steps to ensure that an appropriate transfer mechanism or safeguard recognised under applicable UK data protection law is used where required. This may include transfers to countries covered by UK adequacy regulations or the use of appropriate contractual safeguards.
Opposition or revocation against the processing of your data
(1) If you have given your consent to the processing of your data, you can revoke it at any time. Such a revocation influences the admissibility of the processing of your personal data after you have expressed it to us.
(2) Insofar as we base the processing of your personal data on a balance of interests, you can object to the processing. This is the case if the processing, in particular, is not necessary for the fulfillment of a contract with you, which is illustrated by us in the description of the functions and services. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of a well-founded objection, we will examine the situation and either discontinue or modify the data processing or indicate our compelling reasons worthy of protection on the basis of which we will continue processing.
(3) OF COURSE, YOU CAN OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR ADVERTISING AND DATA ANALYSIS PURPOSES AT ANY TIME. YOU CAN INFORM US ABOUT YOUR ADVERTISING CONTRADICTION UNDER THE FOLLOWING CONTACT DETAILS: COLIN’S SASH WINDOWS, 13 HYDE ROAD, CADDINGTON LU1 4HD, UK, EMAIL: HELP@COLINSSASHWINDOWS.COM.
(4) Where processing depends upon your consent, including certain analytics or advertising technologies, you may withdraw that consent at any time. Where available, analytics and advertising cookie preferences can be changed through the cookie settings on our website.
Use of Google Analytics
(1) This website uses Google Analytics 4 (“Google Analytics” or “GA4”), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses first-party cookies and similar technologies, where permitted, to help us understand how visitors use our website and our online Sash Windows Designer.
Google Analytics may collect information such as pages viewed, time and date of visits, referring websites or traffic sources, browser and device information, operating system information, general geographical information and interactions with our website.
On our online Sash Windows Designer, Google Analytics may also record events relating to the customer journey, including product and page views, interactions with product configuration options, adding products to the basket, viewing the basket, beginning checkout, progressing through checkout and completing a purchase. Where a purchase is completed, analytics information may include information such as a transaction identifier, products ordered, quantities and transaction value.
We do not intentionally send names, email addresses, telephone numbers, postal addresses, payment card details, passwords or other information intended to directly identify an individual to Google Analytics.
(2) Google Analytics does not log or store individual IP addresses from users located in the United Kingdom, European Economic Area or Switzerland. An IP address may be used temporarily during data collection to derive general geographical information, such as country, region or city, before the IP address is discarded. The IP address is not made available to us through Google Analytics reports.
(3) Where consent is required for the use of Google Analytics cookies or similar technologies, Google Analytics is used in accordance with the choices you make through our cookie consent mechanism. You may accept or reject analytics cookies and may subsequently change or withdraw your consent through the cookie settings available on our website.
You can also control or delete cookies through your browser settings. In addition, Google provides a Google Analytics Opt-out Browser Add-on for users who wish to prevent Google Analytics from measuring their activity in supported browsers:
https://tools.google.com/dlpage/gaoptout?hl=en
Rejecting analytics cookies should not prevent you from using the essential functionality of our website, including the functionality necessary to browse products and place an order.
(4) We use Google Analytics to understand how visitors use our website and online Sash Windows Designer, analyse website performance, understand customer journeys, identify usability or technical problems, determine where visitors leave the ordering process, measure conversions and improve our website, products, services and overall customer experience.
Where we rely upon your consent for the processing of personal data through Google Analytics, the lawful basis for that processing is Article 6(1)(a) of the UK GDPR. You may withdraw your consent at any time through our cookie settings without affecting the lawfulness of processing carried out before your consent was withdrawn.
(5) Google Analytics is provided by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Information processed through Google Analytics may also be processed by Google affiliates and on servers located outside the United Kingdom. Where personal data is transferred internationally, Google states that it uses recognised transfer mechanisms and safeguards where applicable, including UK adequacy mechanisms, the UK Extension to the EU-US Data Privacy Framework and contractual safeguards.
Further information can be found at:
Google Analytics Terms of Service:
https://marketingplatform.google.com/about/analytics/terms/gb/
How Google uses information from sites or apps that use its services:
https://policies.google.com/technologies/partner-sites?hl=en-GB
Google Analytics privacy and data safeguards:
https://support.google.com/analytics/answer/6004245?hl=en
Google Privacy Policy:
https://policies.google.com/privacy?hl=en-GB
Google’s international data transfer frameworks:
https://policies.google.com/privacy/frameworks?hl=en-GB
(6) Our current implementation uses Google Analytics 4 (“GA4”). Where the description above relates to functionality or practices associated with earlier versions of Google Analytics, the following paragraphs describe our current use of Google Analytics 4.
(7) We use Google Analytics 4 to understand how visitors use our website and our online Sash Windows Designer. Information collected may include pages viewed, sessions, traffic sources, device and browser information, general geographical information and interactions with the website and Designer.
(8) On our online Sash Windows Designer, Google Analytics 4 may record events associated with the online customer journey. Depending on the action taken by a visitor, these may include viewing products or pages, interacting with product configuration options, adding items to the basket, viewing the basket, beginning checkout and completing a purchase.
Where a purchase is completed, analytics information may include a transaction identifier, products ordered, quantities and transaction value. We do not intentionally send names, email addresses, telephone numbers, payment card information, passwords or other information intended to directly identify a customer to Google Analytics.
(9) For users located in the United Kingdom, Google states that Google Analytics does not log or store individual IP addresses. IP address information may be used during collection to derive general geographical information before the IP address is discarded.
(10) We use information obtained through Google Analytics to understand website usage, measure the performance of our online ordering journey, identify where visitors encounter difficulties or leave the ordering process, measure conversions and improve our website, products and services.
(11) Where consent is required for the use of Google Analytics cookies or similar technologies, Google Analytics is used in accordance with the privacy choices you make through our cookie consent mechanism.
(12) Where we rely upon consent for processing personal data through Google Analytics, the lawful basis for that processing is Article 6(1)(a) UK GDPR.
(13) References in the paragraphs above to the EU-US Privacy Shield relate to an earlier international data transfer framework and do not describe the current framework governing our use of Google Analytics. Where personal data is transferred internationally, appropriate transfer mechanisms or safeguards recognised under applicable UK data protection law are used where required.
Further information about Google’s privacy practices is available at:
https://policies.google.com/privacy
Integration of YouTube videos
(1) We have included YouTube videos in our online offering, which are stored on http://www.YouTube.com and can be played back directly from our website.
(2) By visiting the website, YouTube will be informed that you have accessed the corresponding subpage of our website. In addition, the data specified in number 3 of this declaration will be transmitted. This is done regardless of whether YouTube provides a user account that you are logged in through, or whether there is no user account. If you are logged in to Google, your data will be directly associated with your account. If you do not want to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as user profiles and uses them for advertising, market research and/or the design of your website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right.
(3) Further information on the purpose and scope of data collection and processing by YouTube can be found in the data protection declaration. There you will also find further information on your rights and options for privacy protection: https://policies.google.com/privacy?hl=en&gl=gb (access 22.05.2018). Google also processes your personal data in the United States and is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework (access 22.05.2018).
(4) Where YouTube content uses cookies or similar technologies that require consent, such technologies may be controlled by the choices you make through our cookie consent mechanism.
(5) References above to the EU-US Privacy Shield relate to a previous international data transfer framework. Where personal data is transferred outside the United Kingdom in connection with YouTube or other Google services, appropriate transfer arrangements recognised under applicable UK data protection legislation are used where required.
Use of Google Adwords Conversion
(1) We use the services of Google Adwords to draw attention to our attractive offers by means of advertising materials (so-called Google Adwords) on external websites. In relation to the advertising campaign data, we can determine how successful the individual advertising measures are. We pursue thereby the interest to show you advertisement, which is of interest for you, to arrange our Website for you more interestingly and to reach a fair calculation of advertising costs.
(2) These advertising media are delivered by Google via so-called “Ad Servers”. For this purpose, we use Ad Server cookies to measure certain parameters for measuring success, such as the insertion of ads or clicks by users. If you access our website via a Google ad, Google Adwords stores a cookie on your PC. These cookies usually lose their validity after 30 days and should not be used to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wants to be addressed) are usually stored as analysis values for this cookie.
(3) These cookies enable Google to recognise your Internet browser. If a user visits certain pages of an Adwords customer’s website and the cookie stored on his or her computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and has been redirected to this page. Each Adwords customer is assigned a different cookie. Cookies cannot be tracked via the websites of Adwords customers.
We ourselves do not collect and process any personal data in these advertising measures. Google merely provides us with statistical evaluations. On the basis of these evaluations, we can identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of advertising media, in particular, we cannot identify the users on the basis of this information.
(4) Based on the marketing tools used, your browser automatically establishes a direct connection with Google’s server. By integrating AdWords Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an ad by us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and save it.
(5) You can prevent participation in this tracking procedure in various ways:
- a) by adjusting your browser software accordingly, in particular, the suppression of third-party cookies means that you do not receive ads from third-party providers;
- b) by deactivating cookies for conversion tracking by setting your browser to block cookies from the “www.googleadservices.com” domain, https://www.google.co.uk/settings/ads, this setting being deleted when you delete your cookies;
- c) by deactivating the interest-based ads of providers that are part of the “About Ads” self-regulatory campaign via the http://optout.aboutads.info/?c=2#!/ link, this setting being deleted when you delete your cookies;
- d) by permanently deactivating Firefox, Internet Explorer or Google Chrome in your browsers at https://support.google.com/ads/answer/7395996 (access 22.05.2018). We would like to point out that in this case, you may not be able to use all functions of this offer in full.
(6) The legal basis for the processing of your data is art. 6 para. 1 p. 1 lit. f GDPR. Further information on data protection at Google can be found here (access 22.05.2018): https://policies.google.com/privacy?hl=en and https://services.google.com/sitestats/en.html. Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Use of Facebook Custom Audiences
(1) Furthermore, the website uses the remarketing function “Custom Audiences” of Facebook Inc. (“Facebook”). This allows users of the Site to view interest-based advertisements (“Facebook ads”) on Facebook social networking sites or other websites that also use the process. We are thus pursuing the interest of displaying advertisements that are of interest to you in order to make our website more interesting for you.
(2) Based on the marketing tools used, your browser automatically establishes a direct connection to the Facebook server. By including Facebook Custom Audiences, Facebook receives the information that you have called up the corresponding website of our Internet presence or that you have clicked on an advertisement from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered on Facebook or have not logged in, it is still possible for the provider to find out your IP address and other identifiers and save them.
(3) The deactivation of the “Facebook Custom Audiences” function is possible for logged-in users at https://www.facebook.com/settings/?tab=ads# (access 22.05.2018)
(4) The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. f GDPR. For more information about data processing on Facebook, please visit https://www.facebook.com/about/privacy (access 22.05.2018).
USE OF MICROSOFT CLARITY
(1) We use Microsoft Clarity, a website behavioural analytics service provided by Microsoft, to help us understand how visitors use and interact with our subdomain of online Sash Windows Designer.
(2) Microsoft Clarity may collect information about interactions with our website through behavioural metrics, heatmaps and session replay technologies. Depending on your interaction with the website, this may include clicks, scrolling, mouse movements, page navigation, pages viewed, time spent on pages, device and browser information and technical information relating to your visit.
(3) Session replay allows us to review a reconstructed representation of how visitors interact with pages on our website. It is not a conventional video recording of the visitor.
(4) We use this information to understand user behaviour, identify technical or usability problems, analyse how visitors move through the Sash Windows Designer and checkout journey and improve the design, functionality and customer experience of our website.
(5) Microsoft Clarity uses cookies and similar technologies, including pseudonymous identifiers, to associate interactions and page views with visitors and sessions where permitted.
(6) Microsoft states that content entered into website input fields is masked within Clarity recordings. We also take reasonable steps to ensure that personal, payment and other sensitive information is not intentionally captured through Clarity.
(7) Where consent is required for Microsoft Clarity cookies or functionality, Clarity is used in accordance with the analytics preferences selected through our cookie consent mechanism.
(8) Where we rely upon consent for processing personal data through Microsoft Clarity, the lawful basis for the processing is Article 6(1)(a) UK GDPR.
(9) Information processed through Microsoft Clarity may be processed by Microsoft outside the United Kingdom. Where personal data is transferred internationally, appropriate transfer mechanisms or safeguards recognised under applicable UK data protection legislation are used where required.
Further information about Microsoft’s processing of personal information can be found in the Microsoft Privacy Statement:
https://privacy.microsoft.com/privacystatement
DATA RETENTION
(1) We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including for the purposes of providing products and services, responding to enquiries, maintaining business and accounting records and complying with legal, tax, regulatory and contractual obligations.
(2) Different categories of information may be retained for different periods. When determining an appropriate retention period, we consider the nature and sensitivity of the information, the reason for processing it, applicable legal requirements and whether the purpose can be achieved without continuing to retain the information.
(3) Analytics information collected through services such as Google Analytics and Microsoft Clarity is retained in accordance with our configuration of those services and the applicable retention practices of the relevant provider.
(4) When personal data is no longer required, we will delete it, anonymise it or otherwise securely dispose of it where reasonably practicable.
SECURITY OF PERSONAL DATA
(1) We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, disclosure, alteration, destruction or misuse.
(2) Access to personal information is limited to persons and service providers who reasonably require access for legitimate business purposes and who are subject to appropriate confidentiality, contractual or legal obligations where applicable.
CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes to our website, services, technologies, legal requirements or the way in which we process personal data. The latest version of this Privacy Policy will be published on this page.
