Privacy Policy

Who we are

Our website address is: https://blindsandshutter.co.uk.

This website is operated by Decart Holdings Ltd, trading as Blinds and Shutter (Company number: 14130820). Registered office: Unit 35, Basepoint Business Centre, Stroudley Road, Basingstoke, RG24 8UP, United Kingdom.

Data Controller contact: datacontroller@blindsandshutter.co.uk

What personal data we collect

Depending on how you interact with us, we may collect:

• Name
• Email address
• Telephone number
• Address (where relevant for quotations, surveys or installations)
• Information you provide in forms, chat messages or appointment bookings
• Quotation and order information (where you request a quote or place an order)
• Marketing preferences (where you choose to opt in)
• IP address and browser/device information (for security, diagnostics and spam prevention)

How we collect your data

We collect information when you:

• Complete an enquiry or quote form on our website (using Gravity Forms)
• Book an appointment (using Appointment Hour Booking)
• Use our website chat system
• Request a quote or consultation by email or telephone
• Choose to opt in to newsletters or quote reminders
• Proceed with an order and become a customer

Why we use your data (lawful bases)

We process personal data under the lawful bases set out in UK GDPR. Depending on the context, these include:

• Performance of a contract – to provide quotations, installations, guarantees and aftercare when you proceed with an order
• Legitimate interests – to respond to enquiries, provide quotations, manage appointments and maintain customer service records
• Consent – for newsletters and marketing communications, and for optional quote reminders where you opt in
• Legal obligation – for accounting, tax and warranty/guarantee record-keeping where applicable

You can withdraw consent at any time (see “Marketing communications” below).

Marketing communications

We use Campaign Monitor to send newsletters and marketing communications. We only send marketing emails where you have opted in (for example, via a form or during the quotation process).

• Newsletter and reminder emails are opt-in only.
• We may ask at quotation stage whether you would like to opt in to newsletters and/or quote reminders.
• Every marketing email contains an unsubscribe link.
• You can unsubscribe at any time. This will not affect service communications relating to an active quote, order, installation or warranty support.

How we store and use your data

We store and manage information securely using systems that support our customer service and order process, including:

• Gravity Forms – to receive website enquiries and quote requests
• Appointment Hour Booking – to manage appointment bookings
• FileMaker – for quotation, customer and order management
• Campaign Monitor – for email communications and marketing (where you have opted in)

Access to personal data is restricted to authorised staff and used only for legitimate business purposes.

How long we retain your data

• Enquiries and quotations (where you do not proceed): We retain enquiry and quotation information for a limited period so we can respond, follow up where appropriate, and maintain accurate records. Once we deem the quotation is no longer active, we will remove personal identifiers and/or anonymise the data.
• Customers who proceed with an order: We retain relevant information to fulfil the contract, provide aftercare, and support warranties/guarantees, and where required to comply with legal or tax obligations.
• Marketing subscriptions: We retain your subscription details until you unsubscribe or request deletion.

Comments

When visitors leave comments on the site, we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture may be visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

We use cookies to improve your experience on our website. For example:

• If you leave a comment, you may opt in to saving your name, email address and website in cookies for your convenience. These cookies last for one year.
• If you visit our login page, we set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
• When you log in, we set cookies to save your login information and display preferences. Login cookies last for two days, and screen options cookies last for one year. If you select “Remember Me”, your login will persist for two weeks.
• If you edit or publish an article, a cookie will be saved in your browser which indicates the post ID of the article you edited. It expires after one day.

If we use a separate cookie banner or cookie policy on the site, that will provide additional detail and choices where required.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction if you have an account and are logged in to that website.

Who we share your data with

We do not sell your personal data.

We may share personal data with trusted third-party service providers only where necessary to operate the website and deliver our services. This can include website hosting, IT and security providers, email communication services, and spam prevention tools.

If you request a password reset, your IP address will be included in the reset email.

What rights you have over your data

Under UK data protection law, you have rights including the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request erasure of your data (where applicable)
• Object to or restrict processing (where applicable)
• Withdraw consent (where processing is based on consent)
• Request data portability (where applicable)

To exercise your rights, contact: datacontroller@blindsandshutter.co.uk.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk/.

Where your data is sent

Visitor comments may be checked through an automated spam detection service. Some service providers may process data outside the UK. Where this happens, we use appropriate safeguards to protect your information in line with UK data protection law.

Last updated: January 2026