Privacy Policy

Last updated: 21 September 2026

1. Who we are

Crown Sash Ltd (“we”, “us”) is the data controller for the personal information described in this policy.

Company: Crown Sash Ltd. Company number: 17342256, registered in England and Wales. Registered office: 167-169 Great Portland Street, London, England, W1W 5PF. Email: admin@crownsash.com. Telephone: +44 7466 596765.

If you have any question about this policy or about how we handle your information, contact us at admin@crownsash.com.

2. What we collect

When you complete our enquiry form, we collect: your full name; your company name (optional); your email address; your telephone number; your project location or postcode; the product type you are enquiring about; any project details you choose to give us; any drawings or files you upload (PDF, JPG or PNG).

When you contact us by email or telephone, we collect the contact details and the content of your message.

Automatically, when you visit the site, our hosting and security providers process your IP address, browser type and the pages you view, for the purpose of delivering the site and protecting it from abuse.

We do not ask for, and do not want, special category data (such as health or ethnicity) or payment card details through this website.

3. Why we use it, and our lawful basis

Responding to your enquiry and preparing a quotation: Article 6(1)(b), steps taken at your request before entering into a contract.

Managing the supply of windows and doors once ordered: Article 6(1)(b), performance of a contract.

Keeping records of quotations, orders and correspondence: Article 6(1)(c) legal obligation, and Article 6(1)(f) our legitimate interest in defending claims.

Sending trade information to business contacts who have enquired: Article 6(1)(f) legitimate interests, direct marketing to a business contact, and Regulation 22 of PECR.

Site security and fraud prevention: Article 6(1)(f) legitimate interests.

You can ask us to stop sending trade information at any time, by replying to any message or writing to admin@crownsash.com. We will act on that request without delay.

4. Who we share it with

We share personal information only where it is necessary: our website host and content delivery provider, to run and protect this site; our email and office software provider, Microsoft, to receive and store correspondence; our customer relationship system, Pipedrive, to record enquiries, quotations and orders; our manufacturing partner, where your drawings and measurements are needed to produce your order; our delivery partners, where your delivery address is needed to deliver an order; professional advisers, insurers, auditors and public authorities, where we are required or permitted to do so.

We do not sell your personal information, and we do not share it for anyone else’s marketing.

5. International transfers

Some of our providers process information outside the United Kingdom. Where that happens, we rely on UK adequacy regulations or, where none apply, on the International Data Transfer Addendum to the European Commission’s standard contractual clauses. You can ask us for details of the safeguards in place.

6. How long we keep it

Enquiries that do not lead to an order: 24 months from the last contact.

Quotations, orders and project files: 6 years from the end of the contract, matching the limitation period under the Limitation Act 1980.

Accounting records: 6 years, as required by the Companies Act 2006.

Correspondence: 6 years from the end of the business relationship.

After those periods we delete the information or anonymise it.

7. Your rights

Under the UK GDPR you have the right to ask us to: give you a copy of the personal information we hold about you; correct information that is inaccurate or incomplete; delete information where we no longer have a reason to keep it; restrict how we use it while a concern is resolved; transfer it to you or another provider in a portable format; stop using it for direct marketing, at any time; object to processing we carry out on the basis of our legitimate interests.

Write to admin@crownsash.com. We will respond within one month. We do not charge for this.

If you are not satisfied with our response, you can complain to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, telephone 0303 123 1113, ico.org.uk. We would prefer the chance to put things right first.

8. Automated decision-making

We do not make decisions about you by automated means alone, and we do not profile you.

9. Changes

If we change this policy we will update the date at the top of the page. Where the change is significant, we will say so on this page.