Privacy Policy

Last Updated: 3 June 2026

Introduction
About Us (Data Controller)
What Personal Data We Collect
How We Collect Your Data
Why We Process Your Data (Legal Basis)
Who We Share Your Data With
International Data Transfers
Cookies and Tracking Technologies
How Long We Keep Your Data
Your Rights Under UK GDPR
How to Exercise Your Rights
Right to Complain
Data Security
Automated Decision-Making and Profiling
Children's Privacy
Third-Party Links
Changes to This Privacy Policy
Contact Us

1. Introduction

1.1 London Stair Masters ("we," "us," "our") are committed to protecting your privacy and handling your personal data responsibly and transparently.

1.2 This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website or contact us about our services. It also describes your rights regarding your personal data and how you can exercise them.

1.3 We comply with UK data protection laws including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1.4 Please read this Privacy Policy carefully. By using our website or providing your personal data to us, you acknowledge that you have read and understood this policy.

2. About Us (Data Controller)

2.1 For the purposes of data protection law, the data controller is:

LONDON STAIRMASTERS LTD Trading as: London Stair Masters

Companies House Number: 15433333
Registered Address: 40 Rowlands Close, London, England, NW7 2DN
Email: info@londonstairmasters.co.uk
Phone: +44 7920 003 010
Website: londonstairmasters.co.uk

2.2If you have any questions about this Privacy Policy or how we handle your personal data, please contact us using the details above.

3. What Personal Data We Collect

3.1 Personal data means any information that can be used to identify you, either directly or indirectly.

3.2 We collect and process the following types of personal data:

Contact Information:

Name
Email address

Enquiry Details:

Information you provide when you contact us by any means with enquiries, queries, complaints etc.
Details about your project or requirements

Technical Data:

IP address
Browser type and version
Time zone setting and location
Device information
Pages visited and time spent on our website
Referring website (how you found us)

If you enter into a contract with us, we will also collect the following:

Your telephone number
Financial information, such as bank account and/or credit/debit card details
Your billing address, and if different, the address of the property at which we will provide our services

3.3 We do not collect any special category data (such as health information, religious beliefs, or biometric data).

3.4 We also collect, use and share aggregated data such as statistical or demographic data which is not personal data as it does not directly (or indirectly) reveal your identity. For example, we may aggregate individuals' usage data to calculate the percentage of users accessing a specific website feature in order to analyse general trends in how users are interacting with our website to help improve the website and our service offering.

4. How We Collect Your Data

4.1 We collect personal data in the following ways:

Directly from you when you:

Complete our contact form on the website
Email us directly
Call us by phone
Request a quote or information about our products and services
Enter into a contract with us for our products and services

Automatically when you:

Visit our website (through cookies and similar technologies, where applicable)

4.2 We do not purchase personal data from third parties or collect data from publicly available sources.

5. Why We Process Your Data (Legal Basis)

5.1 Under UK GDPR, we must have a valid legal basis for processing your personal data. We rely on the following legal bases:

Legitimate Interests (Article 6(1)(f)):

We process your data where it is necessary for our legitimate interests, provided these interests do not override your rights and freedoms. This includes:

Responding to your enquiries and providing information about our services
Following up on your enquiry to offer a quote or arrange a consultation
Improving our website and services based on how visitors use our site
Preventing fraud and ensuring the security of our website
Keeping records of communications for quality and training purposes

Contract Performance (Article 6(1)(b)):

Where you engage us to provide services, we process your data as necessary to:

Provide quotations
enter into a contract with you and provide you with the agreed products and services
Arrange site visits and consultations
Communicate with you about your project

Legal Obligations (Article 6(1)(c)):

We may process your data where necessary to comply with our legal obligations, such as but not limited to:

Tax and accounting requirements
Responding to lawful requests from law enforcement or regulatory authorities

Consent (Article 6(1)(a)):

Where we are relying on your consent to process your data (for example, for non-essential cookies), you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before consent is withdrawn.

6. Who We Share Your Data With

6.1 We do not sell your personal data to third parties.

6.2 We may share your personal data with the following categories of recipients:

Service Providers:

Website hosting providers – to host and maintain our website
Analytics providers – such as Google Analytics or Wix Analytics, to help us understand how visitors use our website
Suppliers – in connection with orders and deliveries for your project

6.3 All service providers are required to process your data only on our instructions and in accordance with data protection law. We ensure appropriate contracts are in place to protect your data.

6.4 We may also disclose your personal data if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, property, or safety, or that of others.

7. International Data Transfers

7.1 We primarily operate in the United Kingdom and store your data within the UK.

7.2 However, some of our service providers (such as analytics providers) may process data in countries outside the UK or European Economic Area (EEA).

7.3 Where your data is transferred outside the UK/EEA, we ensure appropriate safeguards are in place to protect your data, including:

Transfers to countries that have been deemed to provide an adequate level of data protection by the UK Government
Standard Contractual Clauses approved by the UK Information Commissioner's Office
Other lawful transfer mechanisms under UK GDPR

8. Cookies and Tracking Technologies

8.1 Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work more efficiently and to provide information to website owners.

8.2 Our website may use the following types of cookies:

Essential Cookies: These are necessary for the website to function properly. They enable basic features such as page navigation and access to secure areas. The website cannot function properly without these cookies, and they do not require your consent.

Analytics Cookies: We may use analytics cookies (such as Google Analytics) to collect information about how visitors use our website. This helps us improve our website and your experience. Analytics cookies collect information in an aggregated, anonymous form. Analytics cookies are non-essential cookies.

Functionality Cookies: These are used to recognise you when you return to our website. This enables us to remember your preferences (for example, your choice of language or region).

8.3 Where we use non-essential cookies, we will ask for your consent before placing them on your device.

8.4 You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

8.5 For more information about cookies and how to manage them, visit www.allaboutcookies.org.

9. How Long We Keep Your Data

9.1 We retain your personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, or as required by law. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

9.2 Our retention periods are as follows:

Data Type

Retention Period

Enquiries that do not proceed to a quote or service

2 years from last contact

Customer records (quotes provided, services delivered)

7 years (for tax and legal purposes and to correspond with our Warranty Period)

Website analytics data

Aggregated/anonymised after 26 months

9.3 After the retention period expires, we will securely delete or anonymise your personal data.

9.4 In some circumstances, you can ask us to delete your data: see section 10 for further information.

10. Your Rights Under UK GDPR

10.1 Under UK data protection law, you have the following rights regarding your personal data:

Right of Access (Article 15) You have the right to request a copy of the personal data we hold about you. This is commonly known as a "Subject Access Request."

Right to Rectification (Article 16) You have the right to request that we correct any personal data that is inaccurate or incomplete, though we may need to verify the accuracy of the new data you provide to us.

Right to Erasure (Article 17) You have the right to request that we delete your personal data in certain circumstances, where there is no good reason for us to continue processing it. This may include where the data is no longer necessary for the purpose it was collected, or you withdraw your consent. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

Right to Restrict Processing (Article 18) You have the right to request that we limit how we use your personal data in certain circumstances, for example, while we verify the accuracy of your data at your request or consider an objection you have raised.

Right to Data Portability (Article 20) You have the right to request to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to you or to another data controller, where technically feasible. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

Right to Object (Article 21) You have the right to object to processing of your personal data where we are relying on legitimate interests as our legal basis for the processing. We will stop processing unless we can demonstrate compelling legitimate grounds that override your right to object.

Right to Complain: You have the right to complain to us if you are dissatisfied with how we have processed your personal data. Details of how you may make a complaint are set out in section 12 below.

10.2 These rights are not absolute and may be subject to exemptions.

11. How to Exercise Your Rights

11.1 To exercise any of your rights, please contact us at:

Email: info@londonstairmasters.co.uk
Post: 40 Rowlands Close, London, England, NW7 2DN

11.2 Please provide enough information to allow us to identify you and specify which right you wish to exercise.

11.3 We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

11.4 We will aim to respond to your request within one month of receiving it. If your request is complex or we receive multiple requests, we may extend this period by a further two months, in this case we will notify you and keep you updated.

11.5 There is no fee for exercising your rights in most cases. However, if your request is clearly unfounded, repetitive or excessive, we may charge a reasonable fee or refuse to act on the request. Alternatively, we could refuse to comply with your request in these circumstances.

12. Right to Complain

12.1 If you are unhappy with how we have handled your personal data or responded to your request, you will need to contact us first so we can try to resolve the issue. You can contact us by email here [LINK].] We will send an acknowledgement within 30 days of receiving your complaint and will take appropriate steps to investigate the complaint. We aim to respond as quickly as possible.

12.2 You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO). However, before doing so please make sure you have first made your complaint to us or asked us for clarification if there is something you do not understand. The ICO will expect you to have done this before reviewing your complaint.

Information Commissioner's Office

Post: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Telephone: 0303 123 1113
Website: https://ico.org.uk

13. Data Security

13.1 We take the security of your personal data seriously and implement appropriate security measures to protect your data from being accidentally lost, destroyed or from being altered, disclosed or accessed in an unauthorised way.

13.2 Our security measures include:

Encryption of data in transit using SSL/TLS technology
Secure hosting with reputable providers
Access controls to limit who can access personal data
Regular review of our security practices

13.3 While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

13.4 We have put in place procedures to deal with any suspected personal data breach and will notify you and the ICO of a breach where we are legally required to do so.

14. Automated Decision-Making and Profiling

14.1 We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

14.2 All decisions relating to your enquiry or any services we provide are made by our team members, not by automated systems.

15. Children's Privacy

15.1 Our website and services are not directed at children under the age of 16, and we do not knowingly collect personal data from children.

15.2 If you believe we have inadvertently collected data from a child under 16, please contact us immediately and we will take steps to delete that information.

16. Third-Party Links

16.1 Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites.

16.2 We encourage you to read the privacy policy of any website you visit.

17. Changes to This Privacy Policy

17.1 We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.

17.2 When we make changes, we will update the "Last Updated" date at the top of this policy.

17.3 For significant changes that materially affect how we process your personal data, we will take reasonable steps to notify you, such as posting a prominent notice on our website.

17.4 We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

18. Contact Us

18.1 If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us: