WILLOW CURTAINS LTD is responsible for handling personal data used in connection with this website and our business activities. This policy summarises the principles we follow when processing personal data and the procedures available to individuals who wish to exercise data protection rights.
Data protection principles
We aim to process personal data lawfully, fairly and transparently; collect it for specified and legitimate purposes; limit it to what is reasonably necessary; keep it accurate where appropriate; retain it no longer than necessary; and protect it using proportionate security measures.
Lawful processing and purpose limitation
Before using personal data, we consider why the information is required and the lawful basis that applies. Information obtained for an enquiry or project is not repurposed for an unrelated activity without considering whether that further use is compatible with the original purpose and permitted by law.
Accuracy and minimisation
We seek to keep business contact and project information accurate where it matters to the service being provided. We do not intentionally collect more personal data than is reasonably needed to respond to an enquiry, prepare a quotation, coordinate a project or meet our legal obligations.
Access and rectification
You may ask whether we process personal data about you and request a copy, subject to applicable legal limits. You may also ask us to correct personal data that is inaccurate or incomplete. Requests can be made to kamal@willowcurtains.co.uk.
Erasure, restriction and objection
In certain circumstances you may ask us to erase personal data, restrict its processing, or object to processing based on legitimate interests. These rights are not absolute; for example, we may need to keep information to comply with law, establish or defend legal claims, or complete an existing contractual obligation.
Portability
Where the legal conditions are met, you may request personal data you provided to us in a structured, commonly used and machine-readable format, or ask for it to be transferred to another controller where technically feasible.
Automated decision-making
This website is not designed to make solely automated decisions about individuals that produce legal or similarly significant effects. If that changes, the relevant information and safeguards should be added to this policy before such processing begins.
Identity verification and response handling
We may ask for information reasonably necessary to confirm the identity of a person making a rights request. We aim to respond within the period required by applicable law, although complex or multiple requests may permit an extension. If a request is refused or limited, we will explain the reason where the law requires us to do so.
Retention and deletion
Retention is based on purpose, legal obligations, the need to maintain appropriate records, and the possibility of disputes or claims. When personal data is no longer reasonably required, it should be deleted, anonymised or securely disposed of where practicable.
Personal data breaches
If we become aware of a personal data breach, we assess the nature of the incident, the information affected and the potential risk to individuals. Where the law requires it, we will notify the Information Commissioner’s Office and affected individuals within the applicable timescales.
Processors and suppliers
Where a supplier processes personal data on our behalf, we seek to use providers appropriate to the service and to put suitable data protection arrangements in place where required. Suppliers are expected to process data only for authorised purposes and to protect it appropriately.
Questions and complaints
Questions about this policy or our use of personal data can be sent to kamal@willowcurtains.co.uk. You also have the right to raise a complaint with the Information Commissioner’s Office if you are concerned about the way your information has been handled.