Privacy Policy

Who we are

CR Windows Ltd, Unit 6 Bridge Road, Industrial Estate, Bridge Road, Kingswood, Bristol BS15 4TA. Tel: 0117 9061180 email:

This Privacy Notice explains how CR Windows Ltd uses and protects information that could be used to identify you or other individuals (“Personal Data”)

Control of your Personal Data

CR Windows Ltd will control any Personal Data you provide to us.

The Data Protection Officer is CR Windows Ltd contactable (via the company address as noted above) or via email 

What Personal Data will be collected

CR Windows Ltd collects Personal Data on its website when you make contact and request that we provide you with a quotation. We collect Personal Data that you provide such as names, addresses, email addresses, telephone numbers and Personal Data that is not directly entered (such as IP addresses, browsing, patterns, click streams, or cookies, or from google analytical tag manner). We may receive Personal Data through emails, during telephone calls and during meetings, and from our website. Websites are required by law to gain your consent before applying cookies. We use cookies to improve your browsing experience. Parts of the website may not work as expected without them. By closing or ignoring this message, you are consenting to use our cookies.   

We collect and store credit/debit card data for the purposes of processing transactions and abide by HMRC Legislation which means information is retained for 6 years and then disposed of confidentially. We enter your card details into an independent debit /credit card processor.

Our services do not apply to persons under the age of eighteen. 

We confidentially destroy any data that is inadvertently provided or stored.

We operate CCTV in the following areas; factory, showroom and perimeters of the building over 24-hour period 7 days a week.

To support NHS Check Test and Trace (which is part of the Department for Health and Social Care) in England, by law we must collect and keep a limited record of staff, customers and visitors who come onto our premises for the purpose of contact tracing, (where applicable and as required in line with Government instruction provided and legal compliance ) . If you wish to visit our premises we are pre-booking appointments for visits, we will ask you to ‘Scan in’ via the ‘NHS Test & Trace QC Code’  (if and when this is required),  displayed in the front window of our showroom and entry points around the building,via theApp on your mobile phone, if you do not have a mobile phone App then you will be asked, in line with government guidance, and if and when required, to provide your name, address and phone number, therefore we may require you to complete a form on arrival, where this is the case, this information will be held after 21 days for the purposes of NHS Test and Trace, unless you tell us not to, and then safely disposed of. 

How your Personal Data will be used

CR Windows Ltd will only collect, store, use or otherwise process your Personal Data for the following purposes: a) to prepare free no obligation quotations: b) to perform contracts for the sale of CR Windows Ltd goods or services; c) to make specific arrangement for deliveries, installations, building works, electricians, scaffold apparatus and asbestos works where documented on Contract Order Forms (such works are additional to the goods and services provided by CR Windows Ltd ); d) register your installation with Fensa confirming your installation has been installed by an Approved Contractor ; e) register your installation with Installsure for the purpose of providing you with an Independent Insurance Backed Guarantee; f) to identify existing customers and make arrangement for Service Engineers to carry out inspection/ works required (as per Terms and  Conditions of  Contract of Agreement and Guarantee provided by CR Windows Ltd); g) when the guarantee period expires Personal Data such as your name, address, contact telephone number and order number remains on our Data Base to help us identify pervious customers who contact us and require additional works not covered by warranty, however all Personal Data relating to your Contract of Agreement, including cost, goods supplied is destroyed via confidential Waste Management Services. Should you wish to delete your Personal Data please contact us via the website or in writing and we will remove the data within 10 working days); h) pursue our legitimate interests providing our goods or services, except where those interests are overridden by your interests or fundamental rights; i) in connection with the collection of feedback to improve our services for customers; j) the extent needed to meet disaster recovery and business interruptions, continuity obligations; k) where required to protect your rights or safety or the safety of others; l) by maintaining records of customers and visitors, and sharing these with NHS Test and Trace when requested (where applicable and as required in line with Government instruction provided and legal compliance ) . We can help to identify people who may have been exposed to the coronavirus; m) for example, if another customer or employee at CR Windows reported symptoms and subsequently tested positive, NHS Test and Trace can request the log of customer details for a particular time period (for example, this may be all customers who visited on a particular day or time-band, or over a 2-day period): n) as a customer/visitor of CR Windows Ltd you will be asked to provide some basic information and contact details; o) under government guidance, the information we collect may include information which we would not ordinarily collect from you and which we therefore collect only for the purpose of contact tracing; p)in order to help maintain a safe operating environment and to help fight any local outbreak of corona virus. q) information of this type will not be used for other purposes, and NHS Test and Trace will not disclose this information to any third party unless required to do so by law (for example, as a result of receiving a court order); r) in addition, where the information is only collected for the purpose of contact tracing, it will be destroyed by us 21 days after the date of your visit. s) we operate CCTV in the following areas; factory, showroom and perimeters of the building for the purposes of security and for the protection of individuals. t) to comply with judicial or governmental subpoenas, warrants or orders; and, in the unexpected event of a bankruptcy proceeding; u) Your Personal Data may be shared with, or stored on platforms provided by, third parties (persons or companies who are not part of CR Windows Ltd) who help us provide goods or services;)Your Personal Data will not be sold to or otherwise provided to third parties for purposes of marketing their goods or services; v) Your Personal Data will not be subject to any automated decision making or profiling that would affect your rights.  

How long your Personal Data will be retained

CR Windows Ltdwill only retain your Personal Data for the time needed to accomplish the purposes listed above. In Addition: NHS Check and Trace have asked us to retain your information for 21 days from the date of your visit, to enable contact tracing to be carried out by NHS Test and Trace during that period. We will only share information with NHS Test and Trace if it is specifically requested by them, (where applicable and as required in line with Government instruction provided and legal compliance ) .

CR Windows has data retention and destruction policies in place and all waste is confidentially disposed of via Approved Waste Management Services. View our full Records Management, Retention and Disposal Policy.

How your Personal Data will be protected

CR Windows Ltd complies with all laws and regulations applicable to it, including data protection laws CR Windows Ltd has appropriate technical and organisational measures in place to ensure that your Personal Data: 1) is processed lawfully, fairly and in a transparent manner; 2) is collected for the purposes specified above and not further processed in a manner incompatible with those purposes; 3) is adequate, relevant and limited to what is necessary for those purposes; 4) is accurate (with inaccurate data promptly corrected or deleted) and, where necessary, is kept up to date; 5) is retained for no longer than needed for the purposes stated above; and, 6) is kept secure; 7) the NHS Test and Trace service ( as and when required ) and as part of safeguarding your personal data, has in place technical, organisational and administrative security measures to protect your personal information that it receives from CR Windows Ltd, that it holds from loss, misuse, and unauthorised access, disclosure, alteration and destruction, CR Windows Ltd is not responsible or accountable for any data held directly by NHS Test and Trace service.

Your Personal Data rights

You have important data rights, including the following: 

* Right to Withdraw Consent If you have consented to the use of your Personal Data, you have the right to withdraw consent at any time.

* Right to Access Information and Obtain Rectification You have the right to access and review your Personal Data and have any errors corrected.

* Right to Object to or Limit Processingyou have the right to object to the processing of your Personal    Data and to restrict or limit use or other uses. Should you wish to exercise this right please contact us via the website or in writing at the above address and we will remove the data within 10 working days. The only exception includes NHS Test and Trace service where CR Windows Ltd has a mandatory legal obligation to record retain data and to confidentially dispose of after 21 working days, (where applicable and as required in line with Government instruction provided and legal compliance ) .

To exercise any of the above rights

To exercise any of the above rights, please contact us via the website or in writing at the above address and we will remove the data within 10 working days, with the exception of NHS Test and Trace where data will be destroyed after 21 working days ( , (where applicable and as required in line with Government instruction provided and legal compliance ) .

Changes to our Privacy Policy

We regularly review our Privacy Policy and post updated versions on our website. This Privacy Policy was last updated on 21 June 2022.

Get In Touch

Speak to us today

Contact Us