Privacy Policy

Last updated: 1 January 2025

CS Blinds & Shutters Ltd ("we", "us", "our") is committed to protecting your personal information. This policy explains what data we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

CS Blinds & Shutters Ltd is a window blind and shutter supply and fitting business based in Carlisle, Cumbria. We are the data controller for the personal information you provide to us.

If you have any questions about this policy or how we handle your data, contact us at:

2. What Information We Collect

We may collect the following types of personal information:

  • Contact details: your name, phone number, and email address when you submit an enquiry or request a quote.
  • Address details: your home or business address when you book a home consultation or fitting appointment.
  • Communication records: records of emails, phone calls, or messages you send to us.
  • Website usage data: anonymous data about how you use our website, collected via cookies (see Section 7).

We do not collect payment card details directly — any payments are processed through secure third-party payment providers.

3. How We Use Your Information

We use your personal information to:

  • Respond to your enquiries and provide quotes.
  • Arrange and carry out home consultations and fitting appointments.
  • Send you information about your order or appointment.
  • Improve our website and services.
  • Comply with our legal obligations.

We will only contact you for marketing purposes if you have given us your consent to do so. You can withdraw consent at any time by contacting us.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Contract: to fulfil an order or appointment you have requested.
  • Legitimate interests: to respond to enquiries and improve our services.
  • Consent: for marketing communications (where applicable).
  • Legal obligation: where we are required to process data by law.

5. How Long We Keep Your Data

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, and to comply with our legal obligations. Typically:

  • Enquiry and quote records: up to 2 years.
  • Customer records (completed orders): up to 7 years for accounting and legal purposes.
  • Marketing consent records: until you withdraw consent.

6. Who We Share Your Data With

We do not sell your personal data to third parties. We may share your data with:

  • Our fitting team and subcontractors, where necessary to carry out your order.
  • Our software and IT service providers (e.g., email hosting, website hosting), who process data on our behalf under data processing agreements.
  • HMRC and other regulatory bodies, where required by law.

7. Cookies

Our website uses cookies to help us understand how visitors use the site. We use analytics cookies (via a privacy-respecting analytics service) to collect anonymous data about page views and traffic sources. We do not use advertising or tracking cookies.

Map provider preference. Our area service pages display an embedded map. By default this uses OpenStreetMap, which does not set any third-party cookies. If you choose to switch to Google Maps, we ask for your consent first. On approval, a first-party cookie named csb_maps_consent is stored in your browser for up to one year so your preference is remembered on future visits. Google Maps is provided by Google LLC and is subject to Google's Privacy Policy. You can withdraw this consent at any time by clicking “Switch back to OpenStreetMap” on any area page, which removes the cookie immediately.

You can also control cookies through your browser settings. Disabling cookies will not affect your ability to use the website or view maps — OpenStreetMap works without any cookies.

8. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Erase your data (the "right to be forgotten"), subject to legal obligations.
  • Restrict how we process your data in certain circumstances.
  • Object to processing based on legitimate interests.
  • Data portability — receive your data in a structured, machine-readable format.
  • Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at [email protected]. We will respond within one month.

9. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

We would, however, appreciate the chance to address your concerns before you contact the ICO — please get in touch with us first.

10. Changes to This Policy

We may update this privacy policy from time to time. The current version will always be available on this page, with the date it was last updated shown at the top. We will notify you of significant changes where we have your contact details.