Privacy Policy
Last updated: 6 July 2026
1. Who we are
newupvcwindows.co.uk is operated by Inbray Limited (trading as New uPVC Windows), registered in England and Wales, company number 05446799, registered office Wardley Industrial Estate, Worsley, Manchester M28 2LY. We are the data controller for personal data collected through this Site.
Contact for privacy matters: sales@newupvcwindows.co.uk
2. What we collect
When you place an order or create an account: your name, email address, phone number, billing and delivery address, order details, and (for trade accounts) business details. A securely hashed password if you create an account — we never store passwords in plain text.
Automatically: IP address, browser type, and basic server logs used for security and to keep the Site running. Your basket contents are stored locally in your own browser (localStorage), not on our servers, until you place an order.
Payment details: when card payment is available on the Site, payments are processed by our payment provider (e.g. Stripe). Your full card details are sent directly to them and never touch our servers. We receive only confirmation of payment and a payment reference.
We do not collect special category data, and this Site is not directed at children.
3. Why we use it and our lawful bases
| Purpose | Lawful basis (UK GDPR Art. 6) |
|---|---|
| Processing and delivering your order, contacting you about it | Performance of a contract |
| Account administration and trade account management | Performance of a contract |
| Keeping accounting and tax records | Legal obligation |
| Site security, fraud prevention, and error logging | Legitimate interests |
| Responding to enquiries | Legitimate interests / steps prior to a contract |
We do not send marketing emails unless you have separately agreed to receive them, and we do not sell or share your data for advertising.
4. Who we share it with
We share personal data only as needed to run the business: delivery carriers (name, address, phone for delivery); our payment processor (when card payment is live); IT and hosting providers; our transactional email provider (to send order emails); Google, as our analytics provider, but only for visitors who accept analytics cookies; and our accountants and professional advisers. Where these providers process data on our behalf they do so under contract and on our instructions.
We may also disclose data where required by law. Some providers (for example email or payment services) may process data outside the UK; where they do, transfers are protected by UK-approved safeguards such as adequacy regulations or standard contractual clauses.
5. How long we keep it
- Order and invoice records: 6 years after the end of the relevant financial year (tax law requirement).
- Account data: while your account is active, then deleted or anonymised within 12 months of closure.
- Enquiries that don't lead to an order: up to 12 months.
- Server logs: up to 90 days.
6. Your rights
Under UK GDPR you have the right to: access a copy of your data; correct inaccurate data; request erasure; restrict or object to processing; and data portability. To exercise any right, email sales@newupvcwindows.co.uk. We will respond within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113 — though we'd appreciate the chance to resolve it first.
7. Cookies
This Site uses strictly necessary cookies, and optional Google Analytics cookies that are only set if you accept them when asked. You can change your choice at any time on our Cookie Notice, which lists every cookie we use.
8. Changes
We may update this policy from time to time; the current version will always be published on this page with its date.