1. Who we are

We are Rocknowe Interiors Limited, a company registered in Scotland (company number SC489276, VAT number 198478633), trading as The Scottish Shutter Company. Our registered office is at Unit 2 Ainslie Street, West Pitkerro Industrial Estate, Broughty Ferry, Dundee, DD5 3RR.

We are registered with the Information Commissioner's Office (ICO) under registration number ZB581919.

2. What data we collect

We may collect the following personal information when you contact us, request a quotation, or place an order:

Your name and contact details (address, email address, telephone number)
Details about your property relevant to your enquiry (such as window measurements and photographs)
Payment details (processed securely, never stored by us)
Records of our correspondence and communications with you
Information you provide when completing forms on our website

3. Why we collect it

We process your personal data on the following lawful bases under the UK General Data Protection Regulation (UK GDPR):

Contractual necessity (Article 6(1)(b)): To prepare quotations, process orders, arrange surveys, schedule installations, and fulfil our contractual obligations to you.
Legitimate interest (Article 6(1)(f)): To follow up on enquiries, improve our services, and communicate with you about your project.
Consent (Article 6(1)(a)): Where you have opted in to receive marketing communications from us.

4. How we use your data

We use your personal information to:

Prepare and send quotations for our products and services
Process and fulfil your orders
Arrange home consultations, surveys, and installation appointments
Communicate with you about your project, including progress updates
Handle any aftercare, warranty, or service enquiries
Comply with our legal and regulatory obligations

5. Marketing

We will only send you marketing communications where you have given us your explicit consent to do so. You can withdraw your consent at any time by contacting us or using the unsubscribe link in any marketing email.

We will never sell, rent, or share your personal data with third parties for their own marketing purposes.

6. Data sharing

We may share your personal data with the following categories of third parties, solely for the purpose of fulfilling our obligations to you:

Our suppliers and manufacturers: To order and deliver your bespoke products.
Payment processors: To process payments securely.
IT service providers: Including our CRM system, email communications platform, and website hosting provider, who help us maintain our systems and communications.
Error monitoring (Sentry): We use Sentry (sentry.io) to capture JavaScript and server-side errors so we can fix them quickly. Error payloads include the page URL and technical diagnostic data. Customer names, email addresses, phone numbers, postcodes and addresses are stripped before the data is sent. Sentry data is stored in the EU.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We never sell your data to any third party.

7. International data transfers

Some of our suppliers and manufacturers are based outside the UK. Where your personal data is shared internationally as part of fulfilling your order, we ensure appropriate safeguards are in place in accordance with UK GDPR, including ensuring that the receiving country provides an adequate level of data protection or that suitable contractual protections are in place.

8. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

Contract and order data: Retained for 7 years from the date of the transaction, as required for tax and legal compliance.
Marketing consent records: Retained until you withdraw your consent.
Enquiry data (where no order is placed): Retained for up to 2 years, then securely deleted.

9. Your rights under GDPR

Under the UK GDPR, you have the following rights in relation to your personal data:

Right of access: You can request a copy of the personal data we hold about you.
Right to rectification: You can ask us to correct any inaccurate or incomplete data.
Right to erasure: You can ask us to delete your personal data where there is no compelling reason for us to continue processing it.
Right to restrict processing: You can ask us to suspend the processing of your data in certain circumstances.
Right to data portability: You can request a copy of your data in a structured, commonly used, machine readable format.
Right to object: You can object to our processing of your personal data where we are relying on a legitimate interest.
Right to withdraw consent: Where we process your data based on your consent (such as marketing communications), you can withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact our Data Protection Lead, David Browne, at privacy@scottishshutters.co.uk or call 0800 086 2989. If David is unavailable, you may also contact David D'Ambrosio (Technical Director) at david.d@scottishshutters.co.uk. We will respond to your request within one month.

10. Automated decision-making

We do not use automated decision-making or profiling in relation to your personal data.

11. Cookies

Our website uses cookies to ensure it functions correctly and to help us understand how visitors use our site. For full details on the cookies we use and how to manage them, please see our Cookie Policy.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The date of the most recent revision will always be shown at the top of this page.

13. Contact and complaints

If you have any questions about this Privacy Policy or how we handle your personal data, please contact our Data Protection lead:

Name: David Browne, Project Director
Email: privacy@scottishshutters.co.uk
Phone: 0800 086 2989

If you wish to raise a formal complaint about how we have handled your personal data, please follow our Data Protection Complaints Procedure.

We are registered with the Information Commissioner's Office under registration number ZB581919. You have the right to lodge a complaint directly with the ICO at any time at ico.org.uk or by calling 0303 123 1113, whether or not you have used our internal procedure first.

For a plain-English summary of our approach to data protection, including our processor list, AI governance and breach response, please see our Your Data, in Safe Hands page.