Ilford Kitchens Ltd is committed to protecting your privacy. This policy explains how we collect, use, store, and protect your personal data when you use our website or engage our services. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

Company: Ilford Kitchens Ltd

Address: Newbury Park, Ilford IG2 7DE, United Kingdom

Phone: +44 20 8554 1188

Email: privacy@ilfordkitchens.co.uk

Website: www.ilfordkitchens.co.uk

ICO Registration No: [insert number]

Ilford Kitchens Ltd is the Data Controller for all personal data collected via this website and in the course of our business.

What Personal Data We Collect

We may collect the following personal data:

Your name, email address, phone number, and postal address
Details about your building or kitchen project
Technical data: IP address, browser type, device, and pages visited
Communication preferences and enquiry history

We do not collect sensitive personal data (special category data) unless strictly necessary, and we do not knowingly collect data from children under 16.

How We Collect Your Data

Enquiry and contact forms on our website
Telephone, email, or in-person communications
Cookies and analytics tools (see our Cookie Policy)
Publicly available sources such as Companies House or trade referrals

How We Use Your Data

To respond to your enquiries and provide quotes
To manage and deliver building and kitchen contracts
To send you service updates and, where consented, promotional information
To improve our website and the services we offer
To comply with our legal and regulatory obligations

Legal Basis for Processing (UK GDPR Article 6)

Contract performance — when responding to quotes or carrying out works
Legitimate interests — to improve our services and communicate with clients
Consent — for marketing emails and non-essential cookies
Legal obligation — for accounting, tax, and regulatory compliance

Data Sharing

We do not sell your personal data. We may share it with:

Subcontractors and trade partners involved in your project
IT and software providers acting as data processors under written agreement
Professional advisers (accountants, solicitors) under confidentiality obligations
Regulatory authorities (e.g. HMRC) where required by law

All third-party processors are contractually required to handle your data securely and only as instructed by us.

International Data Transfers

Where your data is transferred outside the UK (for example, to cloud services with US-based servers), we ensure appropriate safeguards are in place such as UK International Data Transfer Agreements (IDTAs) or equivalent protections recognised by UK law.

How Long We Keep Your Data

Client contract records: 7 years (legal/tax obligation)
Enquiry data (where no contract follows): 2 years
Marketing preferences: until consent is withdrawn
Website analytics data: as per our Cookie Policy

After these periods, data is securely deleted or anonymised.

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right of Access — request a copy of the data we hold about you (Subject Access Request)
Right to Rectification — ask us to correct inaccurate or incomplete data
Right to Erasure — request deletion of your data where there is no lawful reason to retain it
Right to Restrict Processing — ask us to pause how we use your data
Right to Data Portability — receive your data in a structured, machine-readable format
Right to Object — object to processing based on legitimate interests or for direct marketing

To exercise any of these rights, please contact us in writing at privacy@ilfordkitchens.co.uk. We will respond within one calendar month, free of charge, as required by UK GDPR.

Cookies

Our website uses cookies. Please refer to our separate Cookie Policy for full details of the cookies we use, why we use them, and how you can manage your preferences.

Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These include SSL encryption, access controls, and staff awareness. In the event of a data breach that poses a risk to your rights, we will notify the ICO within 72 hours and inform affected individuals without undue delay.

Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)

Website: www.ico.org.uk

Helpline: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns directly before you contact the ICO. Please reach out to us first.

Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this document shows when it was last revised. We encourage you to review this policy periodically. Continued use of our website after any changes constitutes your acceptance of the updated policy.