Privacy Policy

1.Who We Are

Name: Mercury Glazing Supplies Ltd

Company Registration Number: 04474128

Registered Office: Smith House, George Street, Nailsworth, Stroud, England, GL6 0AG

Telephone: 01452 383344

For the purposes of data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Mercury Glazing Supplies Ltd is the “data controller” responsible for your personal data collected in connection with our services.

2.The Data We Collect About You

We may collect and process different kinds of personal data about you, which we have grouped as follows:

Identity Data: Includes first name, last name, title, and other identifiers.

Contact Data: Includes billing address, email address, phone number, postal address.

Financial Data: Includes payment card details (processed via secure third-party payment processors; we do not store full card information).

Transaction Data: Includes details about payments and other details of services you have purchased from us.

Technical Data: Includes IP address, browser type, time zone setting, location, browser plug-in types and versions, operating system, and platform, and other technology on the devices you use to access our website.

Usage Data: Includes information about how you use our website, products, and services.

Marketing and Communications Data: Includes your preferences in receiving marketing from us and your communication preferences.

3.How Your Personal Data Is Collected

We use different methods to collect data from and about you, including:

Direct Interactions: You may provide Identity and Contact Data by filling in forms or by corresponding with us by post, telephone, email, or otherwise (e.g., when you create an account, request marketing to be sent to you, enter a competition, or give us feedback).

Automated Technologies or Interactions: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and usage patterns through cookies and similar tracking technologies.

Third Parties or Publicly Available Sources: We may receive personal data about you from analytics providers, advertising networks, or search information providers.

4.How We Use Your Personal Data

We will only use your personal data when the law allows us to. Common uses include:

To Perform Our Contractual Obligations: This means processing your personal data where it is necessary to carry out the services you have requested (e.g., order fulfilment).

To Manage Our Relationship with You: This includes notifying you about changes to our terms or this Privacy Policy.

To Improve Our Website and Services: We may use data analytics to improve our website, products, and customer experience.

For Marketing Purposes: We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. We will only send direct marketing if you have given us explicit consent or if we have another lawful basis to do so.

To Comply with Legal Obligations: In certain cases, we may need to process your data to comply with a regulatory or legal requirement.

5.Legal Bases for Processing

Under UK data protection law, we rely on the following legal bases to process your personal data:

Consent: Where you have explicitly consented to certain processing of your personal data (e.g., for direct marketing).

Contractual Necessity: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.

Legal Obligation: Where processing is necessary for compliance with a legal obligation.

Legitimate Interests: Where processing is necessary for our legitimate interests (or those of a third party), provided those interests are not overridden by your rights and interests.

6.How We Share Your Personal Data

We may share your personal data with:

Service Providers: We use trusted third parties (e.g., payment processors, website hosting, analytics providers) who process personal data on our behalf and under our instructions.

Professional Advisers: This includes lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services.

Regulators and Authorities: If required by law or if we believe disclosure is necessary to comply with legal obligations or protect our rights.

Business Transfers: In the event of a merger, restructuring, or transfer of all or part of our business, personal data held by us may be transferred to the new owner.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

7.International Transfers

We aim to keep your data within the United Kingdom. However, some of our external suppliers may be based outside the UK. Where we transfer your personal data outside the UK, we ensure a similar degree of protection by using appropriate safeguards (e.g., standard contractual clauses approved by the UK authorities).

8.Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed. We also limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

Although we do our best to protect your personal data, no transmission of data over the Internet can be guaranteed to be completely secure. Any transmission is at your own risk.

9.Data Retention

We will only retain your personal data for as long as is necessary to fulfil the purposes we collected it for, including for satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data; the potential risk of harm from unauthorised use or disclosure; the purposes for which we process your personal data; and whether we can achieve those purposes through other means.

10. Your Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

Request Access: Receive a copy of the personal data we hold about you.

Request Correction: Have any incomplete or inaccurate data we hold about you corrected.

Request Erasure: Ask us to delete or remove personal data where there is no good reason for us to continue processing it.

Object to Processing: Where we are relying on a legitimate interest or processing your personal data for direct marketing.

Request Restriction of Processing: Ask us to suspend the processing of your personal data.

Request the Transfer (Data Portability): Request the transfer of your personal data to you or a third party in a structured, commonly used, machine-readable format.

Withdraw Consent: Where we are relying on consent to process your personal data.

If you wish to exercise any of the rights set out above, please contact us (details below). You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (Information Commissioner’s Office (ICO) ).

11. Cookies and Similar Technologies

A cookie is a small text file placed on your device when you visit our website. We use cookies and similar technologies (e.g., tracking pixels, device identifiers) to:

Recognise you and your preferences;

Improve website performance;

Track website usage and visitor behaviour;

Deliver relevant online advertising, where applicable.

You can manage or disable cookies through your browser settings. Please note that blocking certain cookies may affect your website experience and some features may not function properly.

12. Third-Party Links

Our website may include links to third-party websites, plug-ins, or applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

13. Children’s Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data relating to children. If you become aware that a child under 16 has provided us with personal data, please contact us so that we can delete it.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated policy on this page and revise the “Last Updated” date at the top. If we make any material changes, we will notify you by email or by means of a prominent notice on our website. Please check back frequently to see any updates or changes to our Privacy Policy.

15. Contact Us

If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact us using the details set out below: