Contact details you provide (e.g., name, email address, telephone number, postal address) when you request a quote, contact us, or use our services.
Information about your property or service requirements, such as type of window/door, installation address, specifications, etc.
Payment and billing information, if applicable (via our payment processing service) — [specify provider if applicable].
Technical and usage data when you visit our Website: IP address, browser type and version, time zone, device identifiers, pages visited, time spent on pages, referral source.
Cookies and similar tracking technologies (see Section 10 below).
Any other personal data you choose to send us via forms or email.
2. How We Use Your Data
To provide, manage and fulfil your orders, quotes, and requests for our windows, doors, repair services and related follow-up.
To maintain legal, regulatory and accounting records.
To improve our Website and services: analysing usage to enhance content, design, and service delivery.
Where necessary to protect our rights, safety, and property, or those of our customers or third parties.
3. Disclosure of Your Data
Service providers, subcontractors or partners, such as payment processors, installers, delivery firms, IT hosting providers.
Legal or regulatory authorities, if required by law or to protect our rights.
Prospective purchasers or investors in the business, subject to confidentiality obligations.
We will only share the minimal required data and ensure adequate safeguards.
4. Data Retention
or the duration of our business relationship and for a reasonable period thereafter (e.g., to fulfil guarantees, enforce contracts, defend claims).
For statutory retention periods (for example accounting/tax records under Irish law). After that, we either delete or anonymise the data.
5. Your Rights
Access: you can ask for a copy of your personal data we hold.
Rectification: correct inaccurate or incomplete data.
Erasure: in certain circumstances you can request deletion of your data.
Restriction of processing: you can ask us to limit how we use your data.
Data portability: where applicable, receive your data for transfer to another controller.
Withdraw consent: if we rely on consent for processing, you can withdraw it at any time.
Lodging a complaint with a supervisory authority (e.g., the Irish Data Protection Commission). To exercise your rights, please contact us at our details in Section 11.
6. Security
We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure — so while we strive to protect your data, we cannot guarantee absolute security.
Customer Privacy Notice
Classic Windows Limited (“Classic”)
An explanation from Classic (“we” or “us”) regarding how, why and when we use and process your data
As a business, we need to obtain, keep, use and process your personal data (data) for normal business and contractual purposes. The data we hold and process will be used to perform our obligations towards you as a goods and service provider, as well as for administrative purposes to enable us to pursue our legitimate business interests.
Personal Data and Special Categories of
Personal Data – what do these terms mean?
Personal data means any data that identifies, or could identify you. Examples of personal data include your name, home address, phone number or an online identifier such as an IP address. Personal data also includes physical, physiological, genetic, economic, cultural or societal data that identifies you.
Special categories of personal data is a term used to describe what is reasonably understood to mean sensitive data. Examples of special categories of personal data include data relating to your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic, biometric or health data or data concerning sex life of sexual orientation.
Data Subject and Data Controller – What do
these terms mean?
A data subject is the person whose data is processed by a controller or processor. You are a data subject.
A data controller is responsible for determining the means and purpose of the processing of a data subject’s personal data. We are a data controller.
How
We process customer data both manually and electronically using all reasonable security measures available to us to protect your personal data.
Why
We keep and use your personal data to enable us to perform and manage our contractual relationship with and legal obligations to you effectively, lawfully and appropriately and to enable us to run our business. If you do not provide the necessary data to us, we may be unable to comply with our obligations to you, for example, to deliver and install products to you.
CCTV
We use CCTV to protect against crime, such as theft, to ensure the security of customers and visitors to our premises, our employees and company assets and for health and safety. Access to CCTV and material is restricted to authorised personnel. Recorded images are retained for a maximum of 30 days after which they are erased. We reserve the right in yours and our best interests to retain the recorded images for more than 30 days where there are objective health and safety, security or criminal investigation reasons for doing so.
The personal data we collect from you
If at any stage you have a query in relation to our processing of your personal data, we have a dedicated privacy officer and deputy privacy officer in place to process your query.
How do we secure your data?
We protect electronic data in accordance with IT industry standards such as controlled authorised access to all systems, using strong passwords and firewalls. We protect hard copy files via a controlled access system to such records, which are kept under lock and key.
The categories of personal data collected by us in the course of your contract with us include the following:
Name and surname.
Contact information, including home address, email address and phone number.
Credit/debit card information only to the extent of the card’s last four digits on the merchant copy receipt, the remainder being redacted.
How long do we keep your data for?
Your personal data will be stored for as long as the law requires us to do so, to facilitate your need for information from us in the future and/or in the defence of legal proceedings.
Do we ever share your data?
We may be obliged to process your personal data to cooperate with a third party such as our insurers, the Health and Safety Authority, the Revenue Commissioners or An Garda Siochána.
All requests will be considered on a case-by-case basis and will be facilitated where possible and reasonably practicable. You will always be provided with a written response to your information request, together with an explanation (where relevant) in relation to our response.
If you have provided consent for the processing of your personal data you have the right (in certain circumstances) to withdraw that consent at any time which will not affect the lawfulness of the processing before your consent was withdrawn.
You have the right to lodge a complaint to the Data Protection Commission if you believe that we have not complied with the requirements of the GDPR or Irish data protection legislation with regards to our processing of your personal data.
Under the General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 1988 to 2018, you have a number of rights regarding your personal data. These are as follows:
The right to request access to your personal data and to submit an information request (known as a data subject access request).
The right to request rectification of your personal data in certain circumstances, for example in the event of a change of address.
The right to request the erasure of your personal data (to the extent that this is possible).
The right to request restriction of processing and to object to the processing of your personal data (to the extent that this is possible).
The right to request data portability (to the extent that this is possible).
