Privacy & cookies
How we use enquiry and job information, our approach to basic analytics, and your data-protection rights.
Last reviewed
About this policy and contacting us
ThamesTask is a service brand operated by Shutter Design Limited, registered in England and Wales under company number 10477976. Shutter Design Limited is the controller responsible for your personal information. This policy covers the ThamesTask website and information used to handle enquiries and arrange home repairs, fitting and assembly.
Our registered office is 20 Wittering Close, Kingston Upon Thames, KT2 5GA, England. It is not a public showroom. You can write to this address about your privacy rights, use our contact page, or reply to an existing quotation or other correspondence from us.
Information we collect
The quote form asks for your first and last name, phone number, optional email address, postcode, service, preferred timing and job description. We also keep details you choose to share during correspondence or a visit, such as an address, access arrangements, measurements and photographs of the work. The website form does not currently accept photo uploads.
If you ask for a quote or arrange work, relevant records can include messages, appointment details, the agreed scope, quotations, invoices, payment confirmations and aftercare correspondence. This website does not collect full payment-card details.
Hosting and enquiry systems also process technical information needed to deliver and protect the website, such as IP addresses, request times, browser details and security logs. This essential processing is separate from optional website analytics.
Please include the practical details needed for the job without sending medical information or other sensitive personal information that we have not requested.
How we use information and our lawful basis
We use enquiry and property details to reply, understand the work, prepare a quotation and discuss a visit. The basis is taking steps at your request before entering a contract. If you arrange work with us, we use the relevant information to schedule and provide the agreed service and aftercare, on the basis of performing that contract.
Accounting and tax records are kept where required by our legal obligations. Relevant service and correspondence records may also be needed for our legitimate interests in handling complaints, maintaining accurate business records and establishing or defending legal claims.
Essential technical information is used for our legitimate interests in operating a reliable website, delivering enquiries, preventing abuse and diagnosing faults, subject to your rights and interests.
Submitting an enquiry does not subscribe you to marketing. We use your contact details for the enquiry and service communications you request. Optional electronic marketing would require a separate appropriate basis and an effective way to opt out.
Who receives information
We do not sell personal information. Relevant information is shared only where needed for the purposes described in this policy, including with people handling your enquiry or carrying out agreed work, and suppliers where needed for an agreed product or part.
Hostinger provides website hosting. The website's form-email service uses Resend to deliver enquiries to the business inbox. Hosting, email-delivery and mailbox providers process the technical or message information needed to provide those services.
Banks, accountants, professional advisers and insurers may receive relevant records where necessary. Information may also be disclosed to regulators, courts or other authorities where required by law. If you choose to contact us through WhatsApp, that conversation is also subject to WhatsApp and Meta's own privacy terms.
Enquiry security checks
We are adding Cloudflare Turnstile to protect our enquiry form from automated spam. It has not yet been activated on this version of the site. When enabled, the final form step will send technical signals such as your IP address, browser information and the website origin to Cloudflare, and our server will check the verification result before sending an enquiry.
This security processing supports our legitimate interests in protecting the enquiry service. It is separate from optional analytics and advertising. We do not send your name, contact details or job description to Turnstile. Cloudflare describes its processing, including improving its bot detection, in the Turnstile Privacy Addendum.
Basic website analytics
Basic analytics is planned to help us understand which pages are useful, how visitors reach the website and how the site performs. Optional analytics is not currently enabled on this website.
The intended approach is the same consent-based approach used on our related sites: optional analytics will stay off until you choose to allow it. Before it is activated, this notice and the site's consent controls will identify the provider, the information collected and how to change or withdraw your choice.
This website does not currently use advertising pixels or remarketing tags. Information entered in a quote request is not sent to an analytics service.
International processing
Some technology providers or their sub-processors may process information outside the United Kingdom. Restricted transfers must meet UK data-protection requirements. Depending on the provider and destination, this may involve UK adequacy regulations or appropriate contractual safeguards. Contact us for information about the providers relevant to your enquiry and the applicable arrangements.
How long we keep information
Retention depends on why the information is needed: responding to an enquiry and follow-up, arranging and completing work, providing aftercare, meeting accounting or other legal obligations, and dealing with complaints or legal claims. Information should not be kept longer than is necessary for those purposes.
We have not yet adopted fixed deletion periods for unsuccessful enquiries or customer photographs. These records are not automatically deleted after a stated number of months. Relevant accounting or service records may need to remain for the applicable legal or contractual requirements, which are separate from an enquiry-deletion schedule.
You can ask what information we hold, why it is still needed, or request deletion where your rights apply. Hosting and email providers also apply their own configured retention controls. Optional analytics retention will be addressed when that service is configured.
Your data-protection rights
Depending on the circumstances, you can request access to your personal information, correction of inaccurate details, deletion, restriction of processing or a portable copy of information you provided. You can object to processing based on legitimate interests and object at any time to direct marketing.
Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. We do not use solely automated decisions that produce legal or similarly significant effects on you.
Use the contact route above to make a request. We may ask for enough information to identify the relevant records and confirm your identity. We normally respond within one month, subject to any extension or exception permitted by law, and will explain if a right does not apply to particular records.
Questions and complaints
Please contact us if you have a concern about your information so we can investigate it. You can also complain to the Information Commissioner's Office, the UK data-protection regulator.
Security and information about children
The public website uses HTTPS to protect information in transit. No online system can be guaranteed completely secure, so please send only the information needed for the enquiry and do not put full card details or passwords in a job description.
Our home services are not directed at children. If you believe a child has supplied personal information, contact us so we can review the records and address the applicable rights.
Changes to this policy
We may update this notice when our services, providers or processing arrangements change. The review date identifies this version. Analytics and retention wording will be updated when those arrangements are finalised.