Privacy policy
At SG Wrought Iron, we respect your privacy and are committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, purchase from us, contact our team, subscribe to our communications or otherwise interact with SG Wrought Iron.
For the purposes of UK data protection law, SG Wrought Iron is responsible for the personal information described in this Privacy Policy.
Nothing in this policy affects any rights you have under applicable data protection law.
1. Information We Collect
The personal information we collect depends on how you interact with us.
Contact Information
We may collect information such as:
- your name;
- billing address;
- delivery address;
- email address; and
- telephone number.
Order Information
When you place an order, we may collect:
- products purchased;
- sizes and product options selected;
- measurements or specifications you provide;
- made-to-measure or custom requirements;
- order value;
- delivery information;
- transaction history;
- return and refund information; and
- information needed to fulfil your order.
Payment Information
Payments through our website are handled by secure payment service providers.
Those providers may process your card or other payment details. SG Wrought Iron generally receives information such as payment confirmation, transaction status and limited payment information necessary to process and manage your order.
We do not need to store your full payment-card details in order to fulfil your purchase.
Customer Account Information
If customer accounts are available and you create one, we may process information associated with your account, including:
- contact information;
- order history;
- saved account details; and
- account preferences.
Communications With Us
If you contact SG Wrought Iron, we may collect and retain information you provide, including:
- enquiries;
- product questions;
- measurements;
- project information;
- delivery enquiries;
- returns or complaints;
- photographs;
- correspondence; and
- other information necessary to assist you.
Website and Device Information
When you use our website, certain technical information may be collected automatically, such as:
- IP address;
- browser type;
- device type;
- operating system;
- pages viewed;
- referring website;
- interactions with our website; and
- cookie or similar technology identifiers.
Marketing Preferences
If you subscribe to our marketing communications, we may retain:
- your email address;
- your subscription status;
- your marketing preferences;
- when and how you subscribed; and
- where applicable, information about your interaction with our communications.
2. How We Collect Your Information
We may collect personal information in several ways.
Information You Give Us
This includes information provided when you:
- place an order;
- create an account;
- submit a form;
- provide measurements or specifications;
- contact us;
- request a return or refund;
- subscribe to marketing; or
- otherwise communicate with SG Wrought Iron.
Information Collected Automatically
Certain technical and website-use information may be collected automatically through cookies and similar technologies when you use our website.
Information From Service Providers
We may receive relevant information from businesses that help us operate our store, including:
- payment processors;
- ecommerce and website providers;
- couriers;
- fraud-prevention providers;
- analytics providers; and
- other technology or business-service providers.
3. How and Why We Use Your Information
We only process personal information where we have an appropriate reason and lawful basis for doing so.
UK GDPR requires organisations to identify their purposes for processing and the applicable lawful basis.
Processing and Fulfilling Orders
We use personal information to:
- receive and manage orders;
- process payments;
- prepare products;
- prepare made-to-measure or customised products;
- arrange delivery;
- communicate about your order;
- process returns and refunds; and
- provide after-sales support.
Lawful basis: Performance of our contract with you or taking steps at your request before entering into a contract.
Customer Service
We may use your information to:
- answer enquiries;
- provide product guidance;
- help with measurements;
- respond to delivery questions;
- manage complaints;
- assist with returns; and
- resolve problems.
Lawful basis: Performance of a contract, taking steps before entering into a contract and/or our legitimate interests in providing effective customer service.
Operating and Improving Our Website
We may use information about website activity to:
- operate our online store;
- maintain website functionality;
- understand how visitors use the website;
- identify technical issues;
- improve navigation and usability; and
- assess the performance of our website.
Lawful basis: Our legitimate interests in operating and improving our business and, where required, your consent for non-essential cookies or similar technologies.
Security and Fraud Prevention
We may process information to:
- protect our website;
- detect suspicious activity;
- reduce fraud;
- protect customer accounts;
- maintain system security; and
- investigate misuse.
Lawful basis: Our legitimate interests in protecting our customers, website and business, and legal obligations where applicable.
Legal, Tax and Accounting Requirements
We may retain or use information where necessary to:
- maintain financial and transaction records;
- comply with tax and accounting obligations;
- comply with applicable law;
- respond to lawful requests from authorities; and
- establish, exercise or defend legal claims.
Lawful basis: Compliance with a legal obligation and/or our legitimate interests in protecting our legal rights.
4. Marketing Communications
If you choose to receive marketing from SG Wrought Iron, we may send information about:
- new products;
- product launches;
- offers and promotions;
- store updates;
- inspiration;
- product information; and
- other SG Wrought Iron news.
We will only send electronic marketing where permitted under applicable UK data-protection and electronic-marketing rules.
For existing customers, we may sometimes rely on the soft opt-in where the legal requirements are satisfied, including offering an opportunity to opt out when the information is collected and in each subsequent message.
You can stop receiving marketing at any time by:
- selecting the unsubscribe option in a marketing email; or
- contacting us.
Unsubscribing from marketing will not prevent us from sending service communications needed to manage an order, delivery, return, account or other transaction.
5. Cookies and Similar Technologies
Our website uses cookies and similar technologies to support its operation.
These technologies may help us:
- keep the website functioning correctly;
- maintain your shopping basket;
- support checkout;
- remember preferences;
- protect the website against fraud;
- understand website performance;
- analyse website usage; and
- support advertising or marketing where applicable.
Some technologies are necessary for essential website functions.
Where consent is legally required, non-essential cookies and similar technologies will not be used until you have made the appropriate choice through our cookie controls. ICO guidance states that non-essential cookies should not be placed before valid consent and that continuing to browse is not sufficient consent.
Similar technologies can include tracking pixels, scripts, tags, web storage and other methods of storing or accessing information on a device.
You can manage your available cookie preferences using the controls provided on our website.
6. How We Share Personal Information
We do not sell your personal information.
We may share relevant information with trusted service providers where this is reasonably necessary to operate our business, provide our website and fulfil your order.
These may include the following categories.
Ecommerce, Website and Hosting Providers
They help us operate, maintain and secure our online store.
Payment Providers
They process payments, authorise transactions and assist with payment security and fraud prevention.
Couriers and Delivery Companies
We may provide delivery partners with information needed to deliver your order, such as:
- your name;
- delivery address;
- telephone number;
- email address; and
- delivery instructions.
Technology and IT Providers
These companies may help us with website hosting, security, technical support, email systems and other business technology.
Analytics and Marketing Providers
Where applicable, providers may help us understand website activity or manage marketing.
Their use of personal information will be subject to applicable law and, where necessary, your cookie or marketing choices.
Professional Advisers
We may disclose relevant information to accountants, insurers, legal advisers and similar professionals where necessary.
Public Authorities
Information may be disclosed where required by law, court order or a valid request from an authorised government or regulatory body.
Business Sale or Reorganisation
If SG Wrought Iron or part of its business is sold, transferred or reorganised, relevant information may be disclosed to advisers and prospective or actual purchasers where reasonably necessary and subject to appropriate safeguards.
UK GDPR privacy information should tell people who their information is shared with; this can be done using appropriately specific recipient categories.
7. International Transfers
Some of the service providers involved in operating our website and business may process personal information outside the United Kingdom.
Where personal information is transferred internationally and UK data-protection rules require safeguards, appropriate mechanisms will be used.
Depending on the circumstances, these may include:
- UK adequacy regulations;
- the UK International Data Transfer Agreement (IDTA);
- the UK International Data Transfer Addendum;
- binding corporate rules; or
- another safeguard permitted by applicable UK data-protection law.
The ICO identifies the IDTA and UK Addendum as standard safeguards that may be used for restricted international transfers.
8. How Long We Keep Your Information
We do not intend to retain personal information indefinitely.
We keep information for as long as reasonably necessary for the purpose for which it was collected, including where information must be retained for legal, tax, accounting, contractual, fraud-prevention or dispute-resolution purposes.
Retention periods can vary depending on the type of information.
Order and Transaction Information
Order, invoice, payment and transaction records may be retained for the period required to comply with accounting, tax and legal obligations.
Customer-Service Communications
Enquiries, complaints, return information and other correspondence may be retained while the issue is being dealt with and for an appropriate period afterwards.
Customer Accounts
Account information may be retained while the account remains active and afterwards where information must be retained in connection with previous orders or legal requirements.
Marketing Information
Marketing information may be retained while you remain subscribed.
If you unsubscribe, we may retain limited information on a suppression list to make sure we continue to respect your request.
Website and Cookie Data
Information collected through cookies and similar technologies will be retained according to the purpose and lifespan of the relevant technology.
We periodically review the personal information we hold and delete or anonymise information when there is no longer a valid reason to retain it.
9. Security
We take reasonable organisational and technical steps to protect personal information from:
- unauthorised access;
- misuse;
- accidental loss;
- alteration;
- destruction; and
- unauthorised disclosure.
We also use reputable third-party providers to support the secure operation of our website, payments and other business services.
However, no internet-based system or method of electronic storage can be guaranteed to be completely secure.
If you have a customer account, you are responsible for keeping your password and login information confidential.
10. Your Data Protection Rights
Depending on the circumstances, UK data-protection law gives you rights over your personal information. These can include rights to access, rectify, erase or restrict information, object to processing and obtain certain information in portable form.
Right of Access
You may ask whether we process personal information about you and request a copy of that information.
Right to Rectification
You may ask us to correct inaccurate personal information or complete information that is incomplete.
Right to Erasure
In certain circumstances, you may ask us to delete personal information.
The right to erasure is not absolute and does not necessarily apply where information must be retained for legal or other valid reasons.
Right to Restrict Processing
In certain circumstances, you may request that we restrict how your personal information is used.
Right to Data Portability
Where the legal requirements apply, you may ask for certain information in a structured, commonly used and machine-readable format.
Right to Object
You may have the right to object to processing based on legitimate interests.
You may also object to the use of your personal information for direct marketing.
Right to Withdraw Consent
Where we rely on consent, you may withdraw it at any time.
Withdrawing consent does not affect processing that was lawful before the consent was withdrawn.
Not every right applies in every circumstance, and we may need to verify your identity before acting on a request.
To exercise any of these rights, please contact us using the details at the bottom of this policy.
11. Third-Party Websites
Our website may contain links to websites or services operated by third parties.
Once you leave our website, those organisations are responsible for their own privacy practices.
We recommend reviewing the relevant third party's privacy information before submitting personal information to them.
12. Children's Privacy
Our website and products are intended for general adult customers and are not specifically directed at children.
We do not knowingly seek to collect personal information from children through our online store.
If you believe that personal information relating to a child has been provided to us inappropriately, please contact us.
13. Complaints
If you have a concern about how SG Wrought Iron uses your personal information, please contact us first so that we can investigate and try to resolve the matter.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time where necessary to reflect:
- changes to our website;
- changes to our products or services;
- changes to how personal information is processed;
- new service providers;
- operational changes; or
- changes to applicable laws or regulatory guidance.
The latest version will be published on this page with an updated revision date.
15. Contact Us
If you have questions about this Privacy Policy, want to exercise a data-protection right or want to raise a privacy concern, please contact:
SG Wrought Iron
Security Hub, Office 9
Junction 7 Business Park
Blackburn Road
Clayton-le-Moors
Accrington
BB5 5JW
United Kingdom
Email: sgworkshopltd@gmail.com
Telephone: +44 7962 345264
For general customer-service enquiries:
Email: sales@sgcurtainpoles.co.uk
