Privacy Policy

1. Who We Are

GFM Painting ("we", "us", or "our") operates this website and is the data controller responsible for your personal data collected through this Site.

Email: [email protected]

Registered Address: 1 Maultway Court, 67-69 Ruxley Lane, Epsom, Surrey, KT19 0JG, UK

2. What Information We Collect

• Identity Data: Full name, title, date of birth
• Contact Data: Billing address, delivery address, email address, telephone numbers
• Financial Data: Payment card details (securely processed via third-party providers)
• Transaction Data: Details about orders and purchases
• Technical Data: IP address, browser type, time zone setting, location, device type
• Usage Data: How you use our Site, including cookies and browsing behaviour
• Marketing Preferences: Your choices for receiving promotional emails or newsletters
• User Content: Reviews, comments, or product ratings you submit

We do not knowingly collect data from individuals under the age of 18.

3. How We Collect Your Data

• Directly from you when you:
  • Create an account or make a purchase
  • Enter a contest or request a newsletter
  • Contact customer support
• Automatically via cookies and tracking technologies as you navigate the Site
• From third parties (e.g., delivery partners, analytics providers, and marketing platforms)

4. How We Use Your Data

5. Marketing Communications

If you have opted in, we may send you occasional updates about our services, promotions, and products. You can unsubscribe at any time by:

• Clicking the “unsubscribe” link in any email
• Updating your account preferences
• Emailing us at [email protected]

We do not sell or rent your personal data to third parties for marketing purposes.

6. Sharing Your Information

We only share your information when absolutely necessary and under strict data processing agreements. Your personal data may be shared with:

• Trusted service providers (e.g., Royal Mail, DPD, payment processors, hosting services)
• Marketing or analytics partners (e.g., Google Analytics)
• Government authorities (e.g., HMRC, law enforcement)
• Business transferees in case of sale, merger, or acquisition

All third-party processors must comply with strict data protection rules and cannot use your data for other purposes.

7. International Data Transfers

We aim to store your data within the UK or EEA. If personal data is transferred outside these areas, we ensure protections such as Standard Contractual Clauses are in place.

8. Cookies & Tracking Technologies

We use cookies and similar technologies to improve your experience. These include:

• Essential cookies: Required for basic site functionality
• Analytical cookies: Monitor site usage
• Marketing cookies: Personalised advertising
• Functional cookies: Social media advertising

You can manage cookies via your browser settings. See our Cookie Policy for full details.

9. Data Security

We protect your data using:

• SSL encryption
• Firewalls and anti-virus software
• Access controls and staff training

No system is completely secure. Please keep your password confidential.

10. Your Rights Under UK GDPR

You have rights under UK GDPR including:

• Right to Access
• Right to Rectification
• Right to Erasure
• Right to Restrict Processing
• Right to Data Portability
• Right to Object
• Right to Withdraw Consent
• Right to Complain (visit ICO)

To exercise your rights, email [email protected]. We may verify your identity first.

11. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy and to comply with legal obligations.

12. Third-Party Links

Our Site may link to third-party websites. We are not responsible for their privacy practices. Review their policies before submitting any data.

13. Changes to This Policy

We may update this Privacy Policy. Changes will be posted here along with the “last updated” date. Please check periodically.

Last updated: 22 July 2025

14. Contact Us

For any privacy-related queries, contact:

Email: [email protected]