Who we are and what this policy covers
Vision Skylights Cambridge installs and replaces rooflights, skylights, roof lanterns, roof windows and sun tunnels in homes across Cambridge and about 30 miles around. This policy explains what personal data we collect when you contact us, why we hold it, how long we keep it and what rights you have under UK data protection law.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Vision Skylights Cambridge is the controller of the personal data described here. We are a service-area business with no public premises, so the simplest way to reach us about anything in this policy is by email at info@visionskylightscambridge.co.uk. You can also use the contact page.
This policy applies to visitors to visionskylightscambridge.co.uk, to people who send us an enquiry, and to customers whose homes we survey or work in.
What we collect and where it comes from
We only collect what we need to answer your enquiry, plan the light in your room, quote and carry out the work.
- The enquiry form. When you ask for a quote or book a light survey, the form collects your name, email address, phone number, postcode or address, and anything you choose to tell us about the room and the rooflight or skylight you have in mind.
- WhatsApp. If you message us on WhatsApp, we receive your WhatsApp name, your phone number, your messages and any photos or videos you send, such as pictures of a roof or a misted unit.
- Email. If you write to us, we receive your email address, your message and any attachments.
- The survey and the job. At a survey we record measurements, roof orientation, photographs of the roof and room, and notes that go into your written light plan and quote. If you go ahead, we keep the details needed to deliver the work, notify Building Control where the work is notifiable, and honour our 10-year workmanship guarantee.
- Website data. Like any website, the server and the services the pages use see technical data such as your IP address, browser type and the pages requested.
Please only send photographs of your own property, and avoid including people in them where you can.
Why we use it and our lawful basis
UK GDPR requires a lawful basis for each use of personal data. The table sets out ours.
| Purpose | Lawful basis |
|---|---|
| Replying to an enquiry and arranging a survey | Steps before a contract, at your request |
| Preparing your light plan and quote | Steps before a contract |
| Carrying out the installation | Performance of a contract |
| Building Control notification | Legal obligation |
| Tax and accounting records | Legal obligation |
| Guarantee records and defending claims | Legitimate interests |
| Keeping the website working and secure | Legitimate interests |
We use your details to deal with your project. We send no marketing newsletters, and we never sell your personal data or pass it to other traders for their own use.
Who we share it with
Some of the tools we use process data on our behalf, under contracts that require them to keep it secure and use it only on our instructions.
- The provider of the enquiry form, which is embedded in the site from a third party and stores the details you submit so we can read and answer them.
- WhatsApp, operated by Meta, when you choose to message us there. Your chats are also covered by WhatsApp's own privacy terms.
- Our email and website hosting providers.
- OpenStreetMap, whose map tiles load on some pages and receive your IP address when they do.
- Building Control bodies and our accountant, where the law requires it.
Some of these providers may process data outside the UK. Where that happens, we rely on the safeguards UK law provides, such as adequacy regulations or the UK International Data Transfer Agreement.
How long we keep it
We keep personal data for no longer than we need it, and then delete it securely.
- Enquiries that do not lead to work: up to 2 years from our last contact, so we can pick up a project you return to.
- Customer records, including photos and the light plan: for the 10-year guarantee period plus 6 years, which matches the time limit for contract claims.
- Financial records: 6 years from the end of the tax year they relate to.
Your rights
You have clear rights over your data, and exercising them is free in almost every case.
You can ask for a copy of the personal data we hold about you, ask us to correct anything inaccurate, ask us to delete it, ask us to restrict how we use it, object to a use based on legitimate interests, and ask for data you gave us in a portable format. Send any request to info@visionskylightscambridge.co.uk. We will reply within one month, and we may ask for proof of identity first so that we never hand your details to the wrong person.
We make no decisions about you by automated means alone.
Keeping it secure
We protect your data with access controls, secure passwords and encrypted connections.
Only the people who need your details to survey, quote or install can see them. The site loads over HTTPS, so the form details travel encrypted. If a breach ever put your data at risk, we would tell you and, where the law requires, the Information Commissioner's Office.
Complaints and changes to this policy
If you are unhappy with how we have handled your data, please tell us first so we can put it right.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection, through its website at ico.org.uk. We may update this policy when our tools or the law change, and the current version will always be on this page. To see how we work more generally, read about Vision Skylights or go back to the homepage.
