Privacy Policy.

1. Who we are

This Privacy Policy describes how Handstatelieren, based at 24 Talbot St, Sheffield S2 2TG, United Kingdom, collects and processes personal data when you visit our website or contact us about blinds and curtains.

For the purposes of the UK GDPR (as defined in the Data Protection Act 2018) and the Data Protection Act 2018 (United Kingdom), we are the data controller for the personal data we handle in connection with this website.

2. Personal data we collect

We may collect and process the following categories of personal data:

• Contact details such as your name, email address and telephone number when you complete an enquiry form or contact us by phone.
• Project details such as your address, property type and information about your windows where you choose to share these with us.
• Technical data such as IP address, browser type and pages visited, which may be captured through cookies and similar technologies.

3. How we use your personal data

We use your personal data only where there is a lawful basis under UK GDPR, including:

• To respond to your enquiries and provide information about our products and services, on the basis of our legitimate interest in running our business.
• To prepare quotations, fulfil orders and manage appointments, where necessary for the performance of a contract or to take steps at your request prior to entering into a contract.
• To maintain business records, meet our legal obligations and manage our accounts.
• To understand how visitors use our website and to improve its performance and content, using cookies where permitted.

4. Sharing your personal data

We do not sell your personal data. We may share it only where necessary with:

• Service providers who support our business operations, such as IT and hosting providers, subject to appropriate data protection safeguards.
• Professional advisers such as accountants where required for legal and regulatory purposes.
• Public authorities where we are legally required to do so.

5. International transfers

Where any service provider is located outside the United Kingdom, we will ensure that appropriate safeguards are in place in accordance with UK GDPR, such as the use of standard contractual clauses approved by the UK Information Commissioner's Office or other appropriate transfer mechanisms.

6. Retention of personal data

We keep personal data only for as long as it is needed for the purposes described in this Privacy Policy or as required by law. In general, enquiry information is kept for up to two years from our last meaningful contact with you, and contract records are kept for the duration required by applicable legislation and accounting rules.

7. Your data protection rights

Under UK GDPR and the Data Protection Act 2018, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions, including the right to:

• Access your personal data and receive a copy of it.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data where there is no longer a legal basis for us to retain it.
• Object to certain types of processing, including direct marketing.
• Request restriction of processing in specific circumstances.
• Request portability of data you have provided to us in a structured, commonly used and machine-readable format.

You can exercise any of these rights by contacting us using the details below.

8. Cookies and similar technologies

Our website may use cookies and similar technologies to support essential functionality and to help us understand how the site is used. For more information about the types of cookies used and how you can manage your preferences, please see our Cookies Policy.

9. How to contact us

If you have any questions about this Privacy Policy or the way we handle your personal data, you can contact us at our postal address above or by phone on +44 7770 152765. You may also contact us through the enquiry form on our Contact page.

10. Complaints

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the United Kingdom if you are concerned about how we process your personal data. The ICO is the UK's independent authority set up to uphold information rights. Further information is available on the ICO website at ico.org.uk.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on this page, together with the date of the most recent update.