Privacy Policy
Last updated: July 2026
1. Who We Are
Reflect Projects is a family-run business providing windows, doors, conservatories and construction services across Hertfordshire and surrounding areas.
If you have any questions about this privacy policy or how we handle your data, please contact us:
2. What Information We Collect
We may collect the following personal information when you use our website or contact us:
- Full name
- Email address
- Phone number
- Postcode / address
- Details of your enquiry or project
- Any additional information you choose to share with us
We collect this information when you fill in a contact form, use our quote builder, email us directly, or call us.
3. How We Use Your Information
We use your information to:
- Respond to your enquiry or quote request
- Provide the services you have asked about
- Send you information relevant to your project
- Improve our website and customer experience
- Comply with our legal obligations
We do not use your information for automated decision-making or profiling.
4. Our Lawful Basis for Processing
We process your personal data on the following legal grounds under UK GDPR:
- Legitimate interests — to respond to enquiries and provide our services
- Contract — where you have engaged us to carry out work
- Legal obligation — where we are required to retain records by law
- Consent — where you have opted in to receive marketing communications
5. How Long We Keep Your Data
We retain your personal data only for as long as necessary:
- Enquiry data — up to 12 months if no contract is entered into
- Contract and project records — up to 7 years in line with HMRC requirements
- Marketing opt-in data — until you withdraw consent
6. Who We Share Your Data With
We do not sell your personal data. We may share it with:
- Our email and website hosting providers (for operational purposes)
- Accountants or legal advisers (where required)
- Insurance companies or loss adjusters (where relevant to a claim)
- Regulatory or law enforcement bodies (where legally required)
Any third parties we share data with are required to handle it securely and in line with UK GDPR.
7. Cookies
Our website uses cookies to improve your browsing experience. Please see our Cookie Policy for full details of the cookies we use and how to manage them.
8. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct any inaccurate or incomplete data
- Erase your data (the “right to be forgotten”)
- Restrict how we process your data
- Object to processing based on legitimate interests
- Data portability — receive your data in a portable format
- Withdraw consent at any time where consent is the basis for processing
To exercise any of these rights, please contact us at [email address]. We will respond within 30 days.
9. How We Keep Your Data Secure
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss or disclosure. Our website uses SSL encryption and access to personal data is restricted to relevant members of our team only.
10. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies independently.
11. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date. We recommend checking this page periodically.
12. How to Complain
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Website: www.ico.org.uk
Helpline: 0303 123 1113