Patio Door Security Upgrades Every Homeowner Should Know About
Patio doors are a fantastic feature in any home. They bring light into living spaces, create a sense of openness and allow easy access to the garden. Yet, as much…
READ POSTLast updated: 8 September 2025
This Privacy Policy explains how Repair UPVC (“we”, “us”, “our”) collects, uses, shares and protects your personal data when you visit our website, contact us, request a quote, or use our services. It also explains your privacy rights and how the law protects you.
Who we are (Controller)
Repair UPVC
28 Petersfield Avenue, Leeds, LS10 3PF, United Kingdom
Phone: 0333 335 6769
Email: info@repairupvc.co.uk
We are the “controller” of your personal data for the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018). We have not appointed a Data Protection Officer, but you can contact our Privacy Lead at the email above for any privacy query.
The data we collect
We collect the following types of information:
Data you provide to us
- Identity & contact details: name, email, phone number, address.
- Job/booking details: property access info, preferred dates/times, work location, notes.
- Photos and files: images or videos you send (e.g., of faulty doors, locks, or windows) so we can provide quotes and diagnose issues.
- Communications: messages via forms, email, phone call notes, WhatsApp or similar.
- Preferences & consents: marketing and cookie preferences.
- Subcontractor/applicant details: if you apply to work with us, we may review CVs, insurance, licences, or references but do not retain these after the review unless required by law or contract.
Data we collect automatically
- Usage & technical data: IP address, device, browser, pages visited, time on page, referring websites, general location, and diagnostic information.
- Cookies and similar tech: see “Cookies & Tracking” below.
Data from third parties
- Referrals/lead sources: from directories or partners where you’ve enquired.
- Address/postcode lookups and verification services.
- Payment providers: only confirmation of payment from card machine or bank transfer (we do not store payment card or bank details).
We do not collect children’s data, and our services are only intended for adults.
Purposes and lawful bases for processing
We only process personal data when we have a lawful reason to do so. These are the main purposes:
| Purpose | Examples | Lawful basis |
|---|---|---|
| Provide quotes and perform services | Assess issues, arrange visits, complete repairs, follow up | Contract |
| Customer service & communications | Respond to enquiries, schedule jobs, provide updates | Legitimate interests and/or Contract |
| Accounting & compliance | Invoices, tax records, insurance, legal claims | Legal obligation |
| Website security & diagnostics | Prevent abuse, troubleshoot, maintain site performance | Legitimate interests |
| Improving services | Analysing website usage, quality monitoring, training | Legitimate interests |
| Direct marketing to existing/past customers | Updates about similar services (with opt-out option) | Legitimate interests |
| Direct marketing to new sign-ups | Email newsletters/promotions where you sign up | Consent |
| Remarketing & targeted ads | Facebook Pixel, Google Ads, similar | Consent |
| Subcontractor checks | Reviewing suitability and compliance | Legitimate interests and/or Legal obligation |
If we rely on consent, you can withdraw it at any time.
Cookies & tracking
We use essential cookies to operate our site and, with your consent, may use analytics and advertising cookies (such as Google Analytics and Facebook Pixel) to measure performance and show relevant ads. You can manage your cookie preferences through our consent banner or your browser settings.
You can also learn more about cookies here: Leeds Web Designer Cookie Guide
Disclosing your data (recipients)
We may share data with:
- Trusted service providers: hosting, IT, analytics, communications, accounting, payment processors, etc.
- Subcontractors/engineers: to complete your booked work.
- Business partners: only where you’ve requested a referral or joint service.
- Legal/regulatory bodies: if required by law or to protect rights, safety, or property.
- Corporate transactions: if we sell or restructure the business.
We never sell your data.
International transfers
Our main servers are located in the UK (Manchester). However, we may use cloud services such as Google Drive and Google Sheets, which may store or process data outside the UK. Where this occurs, we ensure appropriate safeguards, such as UK adequacy regulations or international data transfer agreements.
How long we keep your data
We keep data only for as long as necessary for the purposes we collected it, or to meet legal obligations. For example:
- Enquiries and quotes are usually kept up to 18 months.
- Customer job and invoice records are usually kept 7 years (for tax/legal).
- Communications and photos are kept until they are no longer needed for the original purpose.
- Marketing data is kept until you unsubscribe, with an opt-out suppression list maintained indefinitely.
- Subcontractor applications are deleted after review unless retained for legal reasons.
Security of your data
We use appropriate technical and organisational measures to protect personal data, including HTTPS encryption, restricted access to systems, staff guidance on data handling, and secure cloud storage. While no method is completely secure, we work to protect your data and review measures regularly.
Your rights
You have the following rights under UK GDPR:
- Right of access to your data.
- Right to rectification of incorrect or incomplete data.
- Right to erasure (to be forgotten) in certain circumstances.
- Right to restrict processing in certain circumstances.
- Right to data portability where lawful.
- Right to object to processing based on legitimate interests, including direct marketing.
- Right to withdraw consent where we rely on it.
- Right to lodge a complaint with the UK Information Commissioner’s Office (see below).
To exercise your rights, please contact us at info@repairupvc.co.uk. We may need to verify your identity. We normally respond within one month.
Marketing
- We may send marketing to existing or past customers about similar services, unless you opt out.
- We may send marketing to new subscribers where you give consent.
- We may use remarketing ads (e.g. Google Ads, Facebook Pixel) where you have consented to cookies.
- Every marketing email includes an unsubscribe link. You can also opt out by contacting us.
Automated decision-making
We do not use automated decision-making that has legal or significant effects on you.
Links to other websites
Our site may link to third-party websites. We are not responsible for their privacy practices. Please review their policies.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Updated versions will be posted here with a new “Last updated” date. If changes are significant, we may also notify you by email or website notice.
Contact us
For questions, requests, or complaints about this Privacy Policy or your data:
Email: info@repairupvc.co.uk
Post: Privacy Lead, Repair UPVC, 28 Petersfield Avenue, Leeds, LS10 3PF
Right to complain to the ICO
You also have the right to complain to the UK regulator:
Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
ico.org.uk | 0303 123 1113
